Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/okKZDqcNWXmus3VAHiD_yVoQKoM.roa
File: okKZDqcNWXmus3VAHiD_yVoQKoM.roa (raw, json)
Hash identifier: mHCBNlFONOJbBkNBIWpg6F1jxsPLaCKILFXdqJv3jfE=
Subject key identifier: A2:42:99:0E:A7:0D:59:79:AE:B3:75:40:1E:20:FF:C9:5A:10:2A:83
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 01A0EAF70D7C3FFCFD126E17D1B5AD59E32C
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/okKZDqcNWXmus3VAHiD_yVoQKoM.roa
Signing time: Tue 29 Sep 2026 02:20:54 +0000
ROA not before: Tue 29 Sep 2026 02:20:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 89.46.251.0/24 maxlen: 24
109.69.108.0/24 maxlen: 24
193.32.208.0/24 maxlen: 24
194.88.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:f7:0d:7c:3f:fc:fd:12:6e:17:d1:b5:ad:59:e3:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Sep 29 02:20:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a242990ea70d5979aeb375401e20ffc95a102a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fa:5f:8c:71:ca:4d:e3:ad:e6:7a:f6:73:1d:
9b:e5:73:db:09:36:22:4a:02:ab:44:d9:14:11:19:
79:8e:d6:3d:ea:4d:4f:ef:c1:44:1f:df:ec:cf:45:
76:f9:7b:df:43:8d:e2:58:31:9a:e1:7a:0b:1b:7a:
fc:9b:42:84:5e:6b:63:11:b0:5d:5d:d3:8a:36:af:
d5:e4:27:85:43:ea:94:94:b5:5c:f5:9e:fe:1d:bb:
79:97:bc:6d:2b:85:13:e9:47:ec:5e:e0:d6:67:1f:
5b:76:29:97:27:a1:7d:28:f3:05:6f:89:d5:20:23:
8a:3a:1c:12:a2:ef:fc:71:21:4c:9d:a4:e8:4f:f3:
89:17:8f:85:d9:18:86:7b:91:e8:e9:ea:9b:a4:19:
d0:0b:40:72:d1:af:8b:26:96:12:b9:e0:f1:30:9f:
6a:03:3e:fe:6e:61:9f:5e:d1:67:52:8d:49:d7:d5:
eb:13:8f:ca:49:9f:04:c4:da:4d:12:a5:cb:52:ed:
ff:4f:15:e2:b3:4d:d5:be:9f:9b:16:55:04:83:ff:
56:fd:e8:1c:42:ab:2a:8f:05:65:80:bd:fa:b9:70:
67:cc:14:be:4d:e9:ed:12:b6:d7:bb:38:be:2f:b5:
e7:40:f7:bf:13:df:c1:35:d7:2d:54:a0:6c:94:cb:
e9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:42:99:0E:A7:0D:59:79:AE:B3:75:40:1E:20:FF:C9:5A:10:2A:83
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/okKZDqcNWXmus3VAHiD_yVoQKoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.251.0/24
109.69.108.0/24
193.32.208.0/24
194.88.102.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:96:08:14:4c:0b:c5:63:67:36:46:55:43:17:85:c2:a4:9a:
83:29:03:57:1d:83:02:62:3c:66:fa:a1:9f:dc:cc:d3:65:b4:
39:6e:e0:00:08:3a:30:ee:23:56:c8:ae:54:f8:26:47:0c:b6:
e7:e8:e8:eb:7b:a1:f7:49:8c:5b:8f:fe:8e:36:cd:7d:1b:da:
99:f9:e6:3e:89:e1:dc:1a:23:a5:7a:d3:74:c8:11:bc:aa:9a:
e4:0d:0a:2d:c3:c3:cc:d7:e6:57:5e:1c:ce:5d:64:a7:71:00:
1b:21:97:c4:7c:63:ae:88:95:55:2e:1a:bd:11:d5:c5:00:23:
32:95:32:c2:27:ed:fd:a1:f9:ba:79:db:81:a1:36:67:2e:a6:
09:88:b5:7c:c2:91:dc:78:a4:0d:13:4e:99:fc:fc:19:d2:5a:
10:9b:b7:53:fa:63:5d:5b:45:a1:e3:e5:c0:a8:5e:3a:60:42:
cd:15:c2:f7:a7:e0:f1:47:f3:1e:4a:a4:18:01:db:04:a2:93:
2a:4f:92:f5:ac:ef:84:d8:d7:dd:f3:b6:56:33:6b:83:59:fd:
bb:aa:72:25:0a:97:b3:97:cd:0a:5b:35:6f:b0:4c:a2:fd:60:
93:2a:a2:89:c0:a4:ac:f1:d9:3f:79:4a:8c:dd:09:d6:6b:51:
62:7c:b2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:25:19 2026 by rpki-client