Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/OpM0aacv3cDgllARtK5OJ_U41oY.roa
File: OpM0aacv3cDgllARtK5OJ_U41oY.roa (raw, json)
Hash identifier: GrTrg7WpkImpssaiQfCv+xpnuR02J5FW93xe9u7+0Qw=
Subject key identifier: 3A:93:34:69:A7:2F:DD:C0:E0:96:50:11:B4:AE:4E:27:F5:38:D6:86
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 019DD4723BB8E9AA4B38127F0D6125143550
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/OpM0aacv3cDgllARtK5OJ_U41oY.roa
Signing time: Tue 28 Apr 2026 14:15:49 +0000
ROA not before: Tue 28 Apr 2026 14:15:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210546
IP address blocks: 87.251.77.0/24 maxlen: 24
87.251.78.0/24 maxlen: 24
87.251.88.0/24 maxlen: 24
193.37.70.0/24 maxlen: 24
194.113.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d4:72:3b:b8:e9:aa:4b:38:12:7f:0d:61:25:14:35:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Apr 28 14:15:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a933469a72fddc0e0965011b4ae4e27f538d686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:af:05:50:1e:44:1b:04:9b:ed:38:af:36:9f:
4f:dc:ba:f3:67:66:15:8f:37:fa:cd:86:3f:82:ff:
76:3c:b2:24:26:e8:46:55:15:ff:da:70:06:8e:a4:
c0:e0:97:52:92:f1:1c:66:87:00:53:96:3b:d6:56:
47:6d:ab:db:ee:31:3c:64:62:e6:e6:e7:8b:39:c3:
f1:b8:50:60:4d:ca:37:09:82:9c:6c:5b:bf:2e:f9:
09:6b:be:75:d3:4b:f0:48:1a:99:a2:dc:a8:f4:e3:
e1:34:85:ea:b2:46:61:a9:fb:d9:27:e4:98:3b:76:
0a:2b:cb:14:c5:f3:57:e2:87:c8:54:c0:df:a5:0f:
a5:53:76:83:f6:85:4f:3c:a8:54:16:8f:1a:24:4c:
86:d4:ef:5d:c4:67:a7:24:9b:5c:01:0f:d2:f0:72:
80:7e:9d:21:bc:19:2b:30:5b:2b:b3:c5:31:35:1e:
43:45:be:67:cb:6c:be:ef:58:e1:bf:05:9c:4a:66:
eb:de:23:03:04:eb:fa:f6:d8:47:1d:2a:49:db:f8:
12:79:0f:ed:c0:18:e4:09:98:78:7b:4a:f8:be:f7:
5b:71:19:ef:15:12:6c:d9:32:2e:6d:d9:37:00:90:
d7:ce:27:03:2a:a4:c6:31:51:05:ca:16:20:7a:52:
c4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:93:34:69:A7:2F:DD:C0:E0:96:50:11:B4:AE:4E:27:F5:38:D6:86
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/OpM0aacv3cDgllARtK5OJ_U41oY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.77.0-87.251.78.255
87.251.88.0/24
193.37.70.0/24
194.113.233.0/24
Signature Algorithm: sha256WithRSAEncryption
85:43:8a:d6:68:2d:c1:92:fb:30:8e:31:36:10:2e:bf:e0:7d:
45:49:ed:b6:93:a5:5e:30:f7:dd:da:ee:92:41:23:b7:b1:e2:
6e:60:f6:7a:76:ef:95:eb:26:07:a9:f7:70:02:28:8e:04:65:
f6:45:07:ce:bc:14:e7:21:39:73:8c:71:74:8c:12:21:a8:0e:
cb:7a:f4:10:5c:e8:13:5d:36:f6:b1:03:14:41:bd:b8:c5:21:
6d:05:c1:20:bf:6c:ac:a8:1d:03:f9:b2:ac:cd:37:6f:37:24:
ef:7f:02:9c:f1:90:3f:f7:5a:a6:c9:d9:45:7b:49:c1:28:35:
b0:d4:9a:db:ea:47:82:55:28:3b:82:b0:05:65:ac:f8:0a:c7:
f8:99:7c:8c:a7:11:94:d1:51:e8:4a:c2:38:6b:55:cb:b5:e3:
4c:bf:78:0b:0c:04:49:7f:db:b4:8a:cf:1c:47:64:7e:64:9a:
7b:49:ba:7c:51:a5:aa:7a:3d:57:01:f9:20:a2:d2:16:d1:d4:
ce:61:55:07:7d:ab:d7:22:5a:55:3d:f8:f6:c6:88:18:39:40:
b6:5d:fa:55:fe:35:27:32:b4:9f:31:e0:e7:54:18:0d:25:cd:
5e:29:da:62:05:84:ce:03:9f:e7:73:f7:71:51:c2:71:b7:62:
ab:e8:b2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:53:34 2026 by rpki-client