Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/oQLxEXQNzlebuTEadeHk2PXoDOk.roa
File: oQLxEXQNzlebuTEadeHk2PXoDOk.roa (raw, json)
Hash identifier: ms5ThIyloAKhim+xvau3wCzl5Vh2LKreAWDnN6XBHRo=
Subject key identifier: A1:02:F1:11:74:0D:CE:57:9B:B9:31:1A:75:E1:E4:D8:F5:E8:0C:E9
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 019D29B6CD0BABCD9421B016CE3C49C2A1EE
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/oQLxEXQNzlebuTEadeHk2PXoDOk.roa
Signing time: Thu 26 Mar 2026 10:35:38 +0000
ROA not before: Thu 26 Mar 2026 10:35:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209493
IP address blocks: 45.141.61.0/24 maxlen: 24
193.109.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:22:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:b6:cd:0b:ab:cd:94:21:b0:16:ce:3c:49:c2:a1:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Mar 26 10:35:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a102f111740dce579bb9311a75e1e4d8f5e80ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2a:05:da:1f:8a:ac:47:30:43:12:59:3e:0d:
73:cd:a8:a6:dd:d5:31:a3:43:41:85:ca:76:3e:5d:
8d:a8:eb:95:4c:12:fe:9b:02:17:77:d8:e3:8c:1a:
13:2b:8a:a8:5c:df:26:23:ef:90:42:73:b4:2b:c7:
8d:85:f1:a1:14:86:ec:47:ac:3e:75:c9:69:3b:73:
43:a9:e4:19:39:6f:72:6c:4e:11:2d:92:f8:f7:5d:
74:1a:04:a3:92:5d:01:b5:e3:c6:15:b4:b2:30:23:
a7:f6:e6:3a:ce:54:da:76:d4:ae:71:ca:ed:6e:29:
38:9e:4a:2b:b2:70:bf:6d:85:38:88:f0:91:59:74:
4e:16:8d:30:fa:90:b6:16:c2:e8:79:73:16:08:d0:
bb:cb:0a:df:f4:6c:73:91:32:51:a1:91:94:52:be:
bc:cf:de:58:24:dd:17:13:62:bf:06:07:08:ea:05:
97:f6:10:7b:ce:a4:47:68:a3:05:4b:72:ee:36:1c:
f4:72:29:e7:0b:dd:ca:1d:8c:0a:fa:47:46:3e:06:
9e:2e:6b:46:d7:b8:a3:d0:f1:6a:c3:de:ab:cc:35:
77:d8:56:98:fb:ee:6a:2a:49:2f:e4:9b:9e:77:75:
68:6f:08:c2:8d:da:7c:f5:4f:a1:f3:18:67:e3:aa:
46:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:02:F1:11:74:0D:CE:57:9B:B9:31:1A:75:E1:E4:D8:F5:E8:0C:E9
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/oQLxEXQNzlebuTEadeHk2PXoDOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.61.0/24
193.109.136.0/24
Signature Algorithm: sha256WithRSAEncryption
32:b9:1c:13:67:09:33:e6:c2:de:ed:0c:49:57:5a:d8:37:d9:
f3:cb:eb:78:6a:4e:58:95:34:76:09:48:3d:eb:6a:7f:f7:45:
e5:d4:fb:a7:69:13:a2:f1:57:91:d2:76:7a:0c:60:fb:56:cd:
5a:17:cb:0e:0c:83:5d:21:04:55:81:83:82:78:c3:b5:45:95:
69:a6:e7:0b:ff:61:be:de:1b:6e:76:95:b1:0e:c8:9d:ba:6a:
6c:88:df:aa:49:ef:88:fb:7b:05:39:13:69:75:ea:e0:fb:34:
bc:d1:84:80:4b:10:b8:16:14:e6:e2:8b:74:29:79:13:29:f6:
0c:55:3a:65:3b:14:86:32:cb:e1:6e:7f:15:d2:24:b9:db:24:
df:97:27:07:cd:ae:c1:d3:f9:bd:dd:72:fd:7b:c3:e9:ed:21:
d9:d0:bb:d6:d7:a8:b4:96:f3:13:56:23:51:68:5e:e2:b0:6f:
a3:ab:c5:e7:b7:3f:ce:be:ef:2e:36:09:67:dc:3a:5d:00:cf:
eb:a9:57:cb:56:01:d0:3c:cf:79:9e:fd:2e:5d:a9:60:e5:9e:
dc:ff:2a:42:d2:c2:ab:99:60:f5:a0:34:ef:03:b2:3c:da:f2:
81:b1:11:85:b9:62:a9:36:3f:34:c5:9a:be:f7:d6:c3:35:98:
b4:e9:33:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:56:02 2026 by rpki-client