Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/okYTAFv0fOS9soZrrxLl574xTGA.roa
File: okYTAFv0fOS9soZrrxLl574xTGA.roa (raw, json)
Hash identifier: rpmBZSddtmksKomt+BLvZz1ojSc6Gfeu2dWLfewjWuE=
Subject key identifier: A2:46:13:00:5B:F4:7C:E4:BD:B2:86:6B:AF:12:E5:E7:BE:31:4C:60
Certificate issuer: /CN=a51e2dbbf019d8d3747e5730392554df11f6ed93
Certificate serial: 019F1868BA47B4FFACA945812763EADC53E0
Authority key identifier: A5:1E:2D:BB:F0:19:D8:D3:74:7E:57:30:39:25:54:DF:11:F6:ED:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pR4tu_AZ2NN0flcwOSVU3xH27ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/okYTAFv0fOS9soZrrxLl574xTGA.roa
Signing time: Tue 30 Jun 2026 12:02:24 +0000
ROA not before: Tue 30 Jun 2026 12:02:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201938
IP address blocks: 185.152.244.0/22 maxlen: 22
2a0f:ca40::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pR4tu_AZ2NN0flcwOSVU3xH27ZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:68:ba:47:b4:ff:ac:a9:45:81:27:63:ea:dc:53:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a51e2dbbf019d8d3747e5730392554df11f6ed93
Validity
Not Before: Jun 30 12:02:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a24613005bf47ce4bdb2866baf12e5e7be314c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:80:f3:f0:6c:db:f0:33:c8:83:e8:50:af:91:
13:be:9f:15:a5:1e:da:05:0d:d3:c9:00:b6:89:49:
3b:79:bb:09:36:65:60:3d:af:e9:1f:e5:c4:37:c0:
39:a3:44:e1:86:1e:5f:cc:43:7d:03:56:33:f3:2e:
de:35:2a:e9:10:41:2c:f9:55:1d:5e:f3:11:30:50:
ba:d2:71:8a:e5:82:1c:b3:7e:9e:c9:4a:57:39:26:
41:f4:79:08:c4:fb:e4:ef:b7:c6:c9:7c:ce:19:c8:
2d:c8:0f:13:70:97:8e:0d:ed:8b:ea:88:2d:04:84:
8e:a7:73:6a:80:b2:59:41:be:5f:06:bd:6b:bc:b8:
c6:b0:4c:80:1b:6b:f7:9d:59:e0:07:aa:41:d9:4b:
3f:0d:56:c5:0e:62:8a:c8:28:07:44:a2:d6:d2:65:
ff:40:36:f0:05:06:40:4b:60:5b:3e:35:c2:a5:c6:
6d:d9:05:f1:f3:16:d6:4b:22:a9:55:81:20:f2:9d:
44:51:df:09:14:25:21:c4:ad:bf:88:a6:0b:d6:4b:
e3:39:83:9d:41:61:66:7e:21:0a:f7:b4:d6:7b:f7:
b9:06:a9:fd:f2:cc:31:b2:11:6e:9f:df:1d:27:cc:
37:9d:a5:a7:17:88:97:c9:e0:d5:f3:25:9e:67:77:
59:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:46:13:00:5B:F4:7C:E4:BD:B2:86:6B:AF:12:E5:E7:BE:31:4C:60
X509v3 Authority Key Identifier:
keyid:A5:1E:2D:BB:F0:19:D8:D3:74:7E:57:30:39:25:54:DF:11:F6:ED:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pR4tu_AZ2NN0flcwOSVU3xH27ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/okYTAFv0fOS9soZrrxLl574xTGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.244.0/22
IPv6:
2a0f:ca40::/31
Signature Algorithm: sha256WithRSAEncryption
18:8f:24:c6:75:94:c9:33:b9:4e:fa:f4:c0:a1:2b:72:c0:fe:
cc:0a:7f:6b:60:3e:66:2e:3d:ab:68:77:68:38:45:35:9a:37:
14:a0:69:65:c0:cd:34:5d:7b:19:53:cf:bc:74:25:0d:72:e7:
24:d6:1f:56:4c:a1:7e:54:02:22:49:75:ee:ee:b7:68:4a:92:
df:ab:3b:a5:99:2a:52:08:ac:85:bc:c8:27:8b:36:50:c6:86:
39:84:70:c9:8b:9c:5a:90:e1:4c:cf:6b:94:a9:89:90:aa:db:
21:1e:0a:c2:30:72:09:f0:59:52:fc:60:e1:87:40:3a:42:f7:
9d:04:78:48:74:ed:95:9d:15:1f:77:e2:0a:34:e7:fd:71:92:
6a:70:8e:32:85:c6:f8:c4:39:1f:77:f0:14:5c:cb:5c:0c:84:
91:8c:82:bf:df:96:04:72:c4:7f:a6:d3:01:00:c9:d1:eb:00:
cf:d5:d4:b8:56:ad:8e:9d:4d:65:a3:15:30:1d:52:fd:0f:30:
89:d9:12:70:76:a0:7c:e3:cd:47:6c:a8:4a:36:7c:50:8b:58:
64:f6:2a:91:06:52:59:c7:80:e7:ac:56:7a:ae:ec:36:fe:cd:
1c:8d:43:75:07:cc:eb:1e:4c:d7:c3:81:d4:f1:9f:cf:6e:77:
4e:6b:b6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:39 2026 by rpki-client