Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/otlDwitKEaIJU2uBA1kA4FQjaiM.roa
File: otlDwitKEaIJU2uBA1kA4FQjaiM.roa (raw, json)
Hash identifier: PnlNyi9JuqZEzROpx8dqkQn2kawiLgt6YWBA0/7GyGs=
Subject key identifier: A2:D9:43:C2:2B:4A:11:A2:09:53:6B:81:03:59:00:E0:54:23:6A:23
Certificate issuer: /CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
Certificate serial: 019F36FF888137C412A02F6792CD946559D4
Authority key identifier: 5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/otlDwitKEaIJU2uBA1kA4FQjaiM.roa
Signing time: Mon 06 Jul 2026 10:35:44 +0000
ROA not before: Mon 06 Jul 2026 10:35:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56582
IP address blocks: 79.134.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:ff:88:81:37:c4:12:a0:2f:67:92:cd:94:65:59:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
Validity
Not Before: Jul 6 10:35:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2d943c22b4a11a209536b81035900e054236a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:70:94:e2:10:32:81:46:60:d9:60:8c:06:4d:
b8:b1:96:4c:71:1c:a0:24:9f:01:6e:24:2e:29:ce:
2a:58:56:01:90:e1:94:78:10:76:f1:6f:3f:e6:6d:
10:f0:ae:e4:4d:17:0b:f2:7e:9a:ef:ca:a7:96:31:
b1:fa:5e:b7:82:75:66:70:41:ef:33:78:26:0d:6e:
cc:b4:70:e1:81:be:bd:61:a3:41:2c:61:53:15:79:
37:49:2b:e4:99:74:4e:c6:e7:1f:d4:9c:8a:54:dd:
67:b5:3b:b4:09:09:21:66:6e:8b:94:f5:50:71:3d:
17:68:77:41:e1:d9:61:87:83:20:a6:05:d6:3b:2f:
6e:f7:6d:99:f7:05:e1:40:88:91:ad:da:75:4a:15:
d2:74:3b:d9:e0:a6:bd:7c:90:7c:16:bc:63:fe:7e:
2c:f4:2a:8c:39:9e:d2:d5:a0:2c:70:05:4e:3b:e2:
83:1d:24:e5:2c:84:b9:ba:63:03:26:d2:dc:76:f1:
70:96:e2:e8:79:58:f1:b9:c8:26:fc:e3:0d:65:3d:
ae:f1:1f:0a:2e:48:f7:44:77:ec:f2:c9:34:39:d4:
da:e9:0f:32:3f:69:1d:89:60:42:6f:25:a2:bc:c0:
ee:a9:c6:d6:19:36:43:a5:be:8d:d5:b3:68:8e:72:
d2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D9:43:C2:2B:4A:11:A2:09:53:6B:81:03:59:00:E0:54:23:6A:23
X509v3 Authority Key Identifier:
keyid:5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/otlDwitKEaIJU2uBA1kA4FQjaiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.134.234.0/24
Signature Algorithm: sha256WithRSAEncryption
07:28:43:3f:65:73:15:28:dc:ba:19:41:99:2f:fc:29:1c:ba:
34:90:06:2c:38:ea:1b:02:d2:af:7e:3e:05:ec:b2:7d:20:45:
1f:5f:79:4c:ae:aa:ec:96:ba:62:a3:1d:ae:7e:d4:ed:9a:b2:
8f:73:48:ad:56:78:12:46:4b:ec:7a:01:8b:ca:c5:63:bd:bf:
16:95:4c:a0:e7:fc:fb:63:c9:6d:f4:79:9f:3d:5d:0d:4c:01:
9d:ac:1b:5f:d4:c3:1c:c2:50:40:5c:a6:50:5d:39:59:56:66:
92:b1:85:96:7b:3e:11:40:62:8e:93:fe:ff:95:d5:1b:2e:47:
65:e5:6b:9c:b5:7c:5f:38:9b:da:23:ec:c3:f5:df:4d:d8:5b:
95:47:d9:c1:dc:1f:7d:8c:54:af:34:74:59:5b:db:02:25:be:
45:84:e8:71:f7:e3:bf:46:92:25:ca:1a:4a:6c:82:9f:98:e4:
91:48:e0:d9:3e:d0:9e:55:4d:71:71:e4:54:1b:6d:11:f2:91:
64:e6:62:23:e5:81:d0:4b:18:63:ff:13:b5:fb:48:c3:b7:80:
1a:cd:fd:20:43:ff:39:3b:98:46:3b:8f:72:90:bb:96:e3:22:
2f:af:62:59:aa:5c:6f:fb:55:24:f9:57:f3:67:da:b2:93:50:
e3:f3:0c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:17 2026 by rpki-client