Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/oI30TaQkzDahr37tajkMEIXKAzY.roa
File: oI30TaQkzDahr37tajkMEIXKAzY.roa (raw, json)
Hash identifier: RTVxMi/95yqVwuSHeUZOXHWC2+rI43AVkGKRhOOCHw8=
Subject key identifier: A0:8D:F4:4D:A4:24:CC:36:A1:AF:7E:ED:6A:39:0C:10:85:CA:03:36
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019D1D7C9C405C2C0C457EDF866E5A48DE3D
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/oI30TaQkzDahr37tajkMEIXKAzY.roa
Signing time: Tue 24 Mar 2026 01:36:38 +0000
ROA not before: Tue 24 Mar 2026 01:36:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142270
IP address blocks: 202.71.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1d:7c:9c:40:5c:2c:0c:45:7e:df:86:6e:5a:48:de:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Mar 24 01:36:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a08df44da424cc36a1af7eed6a390c1085ca0336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a1:4b:71:62:b3:14:98:25:b8:73:e0:4c:b8:
d9:7e:2d:aa:cf:06:7d:3f:fb:fa:98:73:9b:bc:f7:
20:b7:d2:3a:e1:8d:56:de:eb:e0:07:ca:2c:e9:4f:
a4:a1:0e:2e:e4:a5:c9:1d:7d:88:87:ee:27:d1:7f:
89:15:c7:07:5f:6d:94:a7:a4:cc:d0:9e:90:07:f2:
7a:fe:f9:a8:62:cc:92:80:24:8a:38:a6:07:9f:71:
19:f5:0d:77:58:55:0e:a7:3c:04:6f:c6:7c:0f:a9:
5d:53:51:1c:b8:35:d4:d4:75:9f:99:bb:13:ec:56:
0e:c3:87:4b:13:f4:ad:76:be:a3:3b:f5:56:0f:ad:
da:41:56:98:ae:7a:6d:fd:95:4c:cb:94:b3:6a:7c:
f6:8a:6e:9d:70:7e:cf:9f:47:43:14:3f:ce:0e:8d:
d9:df:b8:30:d4:dd:9e:69:aa:b4:b5:6b:4f:b4:93:
83:70:f5:fd:53:46:af:32:c0:b1:56:9f:c6:36:12:
d3:38:ac:c6:f2:3e:e5:ab:f5:d6:64:0e:fe:f6:4f:
23:d9:3c:cf:70:40:49:3b:97:9e:eb:b3:8f:29:48:
44:0c:d7:05:ea:a1:3f:e0:64:07:87:27:a8:b0:27:
0e:bb:30:0b:50:44:c7:e7:2a:28:71:01:62:be:62:
6c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8D:F4:4D:A4:24:CC:36:A1:AF:7E:ED:6A:39:0C:10:85:CA:03:36
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/oI30TaQkzDahr37tajkMEIXKAzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.71.9.0/24
Signature Algorithm: sha256WithRSAEncryption
57:76:ba:13:b9:90:8f:63:7a:0c:e4:39:c3:c4:04:0b:9f:64:
1b:f5:8b:25:6a:81:21:1f:2b:c3:fe:73:27:9e:9c:ed:57:1e:
dd:e2:11:f4:3a:77:c3:3b:33:1a:3d:c6:1d:fb:50:02:b4:67:
d9:32:c7:f3:a9:d2:36:5a:c0:7f:29:1f:26:0a:45:cb:0e:58:
30:df:b2:41:60:7c:fe:11:10:86:68:be:ca:e4:a0:96:d9:86:
48:df:9b:57:ce:b9:bd:03:55:80:aa:78:a4:9d:f5:0d:2f:ac:
99:92:b9:b6:89:d2:c6:19:d2:89:44:bf:44:78:1e:6d:a6:24:
e6:ac:52:6d:05:49:fe:0b:50:44:21:08:03:7b:b0:aa:fe:c8:
48:e9:7c:5c:09:23:90:a7:a8:d1:c0:95:54:e4:3f:50:cc:d5:
c2:18:e9:c5:31:f2:03:70:09:42:ee:c8:97:02:6d:af:df:e4:
f2:3c:d5:7f:f3:53:89:1c:6f:6a:75:04:12:3a:6f:cf:67:dd:
bf:85:2b:a9:a6:66:0d:b6:c8:7f:df:d2:1e:1b:84:81:9a:92:
72:55:68:ff:f2:78:d4:f6:5c:a0:c0:55:ed:a0:50:c8:dc:82:
0c:59:d3:41:a7:c9:35:14:14:1b:18:fa:70:e0:5f:38:92:8b:
94:4a:b5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:48:51 2026 by rpki-client