Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/oPoAPW2imYIIhMBjHBjrrJzlTm0.roa
File: oPoAPW2imYIIhMBjHBjrrJzlTm0.roa (raw, json)
Hash identifier: Ai3LKCPihwHhkGrEgiXr64yAeNHxTfkXCv7Ldk/G4cw=
Subject key identifier: A0:FA:00:3D:6D:A2:99:82:08:84:C0:63:1C:18:EB:AC:9C:E5:4E:6D
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 019F6A02A78F1CD1764BC69129D09DEA5012
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/oPoAPW2imYIIhMBjHBjrrJzlTm0.roa
Signing time: Thu 16 Jul 2026 08:19:46 +0000
ROA not before: Thu 16 Jul 2026 08:19:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209854
IP address blocks: 109.160.32.0/24 maxlen: 24
109.160.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6a:02:a7:8f:1c:d1:76:4b:c6:91:29:d0:9d:ea:50:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Jul 16 08:19:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0fa003d6da299820884c0631c18ebac9ce54e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ac:94:b9:23:fd:4a:05:0c:69:b2:0a:4d:ae:
26:9e:97:43:7b:6b:37:6e:fd:9b:c4:b1:7a:2f:83:
bd:53:8a:43:f5:7b:6f:47:4f:61:10:61:db:5d:a8:
fb:c6:90:f6:18:bc:c0:17:c6:7f:9e:69:32:62:68:
e8:64:d7:be:e4:b8:e1:55:61:ee:09:7d:98:72:fe:
83:ea:73:ef:45:1d:82:7b:94:66:65:e4:b1:c6:ee:
6b:62:ee:fb:05:c6:07:2e:71:5a:18:fd:22:f9:31:
f9:7f:f1:3f:4b:8d:4c:d6:50:48:40:83:60:4e:60:
80:32:7e:b3:5e:ca:2c:90:cf:2a:9e:da:06:ad:0e:
e1:96:91:ba:fc:83:ad:8c:e0:cf:8f:86:e9:74:46:
8a:e8:84:ac:d6:24:ae:f8:81:8e:48:90:34:f7:10:
c9:09:48:6c:d2:00:94:60:46:be:81:b8:87:34:f7:
58:12:a6:44:82:f3:51:c9:d4:e8:24:79:04:93:68:
16:53:b2:4b:44:8a:c4:69:06:a6:2f:7d:96:6b:6b:
d6:37:ae:65:5e:20:be:c8:4d:97:04:e0:c5:f9:9e:
89:ca:ba:6d:fa:85:24:67:aa:33:d1:55:f5:cb:5f:
18:61:7d:4e:1a:70:99:42:13:21:12:b1:96:a5:ee:
27:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FA:00:3D:6D:A2:99:82:08:84:C0:63:1C:18:EB:AC:9C:E5:4E:6D
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/oPoAPW2imYIIhMBjHBjrrJzlTm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.160.32.0/24
109.160.34.0/24
Signature Algorithm: sha256WithRSAEncryption
33:8d:ef:9e:5e:2d:65:55:db:d0:a5:be:9a:37:e3:89:79:7b:
65:8a:72:42:b0:fb:92:25:59:72:db:6b:3e:10:13:87:58:f5:
83:06:32:62:51:e1:f0:1d:ac:81:d7:83:a1:f8:bf:52:7f:f8:
fc:8f:5f:1a:45:81:56:c2:e3:e0:a5:7e:02:84:fc:02:09:18:
2d:46:fd:3b:72:b7:51:0b:53:42:3f:17:7e:70:95:46:c3:07:
25:07:eb:0c:60:cd:88:14:1d:70:c9:49:39:8d:be:20:34:2a:
67:d1:1d:a8:7e:ad:be:80:94:dd:82:89:c6:15:b4:80:8c:20:
d2:70:f9:13:3f:dc:7c:2f:0a:98:4e:b2:00:29:f5:76:5b:98:
2e:f5:b2:50:dc:78:d0:82:b9:a0:92:e7:d7:a7:ba:4a:c6:ae:
40:c3:06:c5:3e:3d:7c:35:6f:41:79:39:d8:80:15:a0:e1:65:
0e:4e:7a:1f:96:7a:dd:31:75:7b:81:18:dc:d6:96:0d:3e:71:
18:b1:e6:cc:fc:db:e4:c7:63:34:1f:70:18:9e:05:51:20:c1:
31:31:e5:de:f5:1c:f4:a9:c7:6d:39:83:d8:c4:ea:b6:9a:d5:
f8:78:a4:82:e5:5e:2c:49:b3:46:2b:e3:1f:a7:e2:b0:e7:97:
18:a2:78:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:41:33 2026 by rpki-client