Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/oJ2A5v6B9XNI1HlBck7rgFL0Tns.roa
File: oJ2A5v6B9XNI1HlBck7rgFL0Tns.roa (raw, json)
Hash identifier: KVHlR5a+3eNOK3ZqEJJGtPG+m1XBvjG7O5qDxGYZoMA=
Subject key identifier: A0:9D:80:E6:FE:81:F5:73:48:D4:79:41:72:4E:EB:80:52:F4:4E:7B
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A1BFE1B07A8F5F1F694E239745052A873F
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/oJ2A5v6B9XNI1HlBck7rgFL0Tns.roa
Signing time: Mon 09 Nov 2026 10:36:41 +0000
ROA not before: Mon 09 Nov 2026 10:36:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142111
IP address blocks: 45.86.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bf:e1:b0:7a:8f:5f:1f:69:4e:23:97:45:05:2a:87:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Nov 9 10:36:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a09d80e6fe81f57348d47941724eeb8052f44e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:68:59:58:a6:8f:f0:d6:00:f3:e1:0f:df:0e:
be:f5:e1:76:92:53:3e:b2:22:3f:f5:13:78:94:91:
36:cc:df:af:1d:96:66:35:c0:c4:19:2b:81:ec:2c:
36:e7:88:68:cc:94:88:ad:d8:02:2f:30:6a:07:aa:
82:8c:f3:b8:2b:9c:dc:e0:a8:1c:bf:2f:23:52:8e:
63:85:2a:b9:da:df:fb:9b:9a:c8:54:f2:c1:d6:9b:
37:c4:f6:a8:4f:0d:e0:b2:df:8a:6e:c3:5d:20:3d:
fe:0c:54:75:bb:e0:9c:56:fd:55:02:aa:0a:bf:de:
b8:79:f5:ab:04:1e:f2:2a:39:f3:c9:e5:42:29:c9:
8b:52:97:8c:99:2d:ec:06:66:89:69:2d:fd:83:4b:
9f:e2:2d:84:17:e5:bb:d9:f3:d5:ee:01:23:f0:5d:
cd:08:88:79:b6:1a:8a:0d:1f:aa:90:e0:60:0a:47:
2d:69:5d:75:68:e7:b0:a4:b5:25:27:e2:e1:4b:a6:
3b:26:e8:f1:68:b8:69:10:54:fe:cf:21:59:00:e0:
ce:28:5b:5a:51:cd:37:e4:68:fc:cb:b0:a5:e3:5c:
7a:36:31:78:14:63:eb:f7:ed:2d:2c:e7:bf:6d:52:
0e:14:56:0d:ff:de:66:86:bc:37:db:da:1b:22:e8:
10:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9D:80:E6:FE:81:F5:73:48:D4:79:41:72:4E:EB:80:52:F4:4E:7B
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/oJ2A5v6B9XNI1HlBck7rgFL0Tns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.73.0/24
Signature Algorithm: sha256WithRSAEncryption
98:f7:30:45:bf:ed:8d:68:a5:27:1c:14:f5:4f:b2:fe:2c:8f:
1b:82:67:18:e8:8b:c4:43:15:76:60:7d:18:f4:22:5d:da:e4:
3e:8b:ab:0d:f1:71:a0:7a:bb:53:46:13:80:37:d8:b9:8f:f2:
bf:d8:71:7a:07:30:d1:0b:f5:a1:7c:ed:da:bd:3f:cb:70:8a:
11:d7:55:af:9e:b1:09:15:46:7c:6c:5d:e8:68:22:b4:ab:8b:
b3:bd:8b:50:6e:aa:cd:e6:70:26:2c:de:4e:bb:7a:cd:92:07:
6e:21:40:60:0d:80:ae:26:63:90:78:3f:e8:f4:d8:8a:d6:e6:
b2:91:60:cc:fe:01:dd:01:62:06:21:8d:af:fb:3f:71:20:bd:
99:42:a6:e0:69:f7:8e:4e:b9:1e:8d:2a:9f:d8:58:e5:a3:f9:
4f:a7:0f:ec:22:18:7b:da:41:eb:c2:b5:12:67:2f:30:5f:b7:
c5:96:24:db:7e:91:71:b3:b3:4f:cb:21:8d:6d:f5:76:af:18:
01:14:62:89:32:43:74:19:bb:73:f6:3e:13:6b:15:09:79:42:
df:e9:cb:7e:76:b4:26:89:fc:0c:0f:e3:a9:2c:ad:c3:9a:93:
09:2f:c4:47:fd:41:a4:5d:af:1b:5f:e7:f5:d6:2d:3a:fe:e2:
e4:32:86:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:48:53 2026 by rpki-client