Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/o1hI_vA3WO-f0x7a0iDzyO_cfMI.roa
File: o1hI_vA3WO-f0x7a0iDzyO_cfMI.roa (raw, json)
Hash identifier: 3HV05eMz9CY1q6+dVr/ccvaXwL6/u3gsDjopHKCyzP0=
Subject key identifier: A3:58:48:FE:F0:37:58:EF:9F:D3:1E:DA:D2:20:F3:C8:EF:DC:7C:C2
Certificate issuer: /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial: 01A0A971433612F118B5435E5D880232D746
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/o1hI_vA3WO-f0x7a0iDzyO_cfMI.roa
Signing time: Wed 16 Sep 2026 08:59:27 +0000
ROA not before: Wed 16 Sep 2026 08:59:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62329
IP address blocks: 193.105.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:71:43:36:12:f1:18:b5:43:5e:5d:88:02:32:d7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Validity
Not Before: Sep 16 08:59:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a35848fef03758ef9fd31edad220f3c8efdc7cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:50:da:d3:72:67:bc:23:78:f9:e0:d0:42:64:
d6:4a:23:2d:95:28:40:ca:87:13:3b:b5:ad:a7:9a:
63:f9:89:dc:e2:8c:3e:92:8e:80:0d:a2:a1:f8:99:
ad:c0:96:e2:c2:44:ad:b5:fa:9d:a3:a2:62:34:73:
2a:f1:d7:7d:cb:b9:aa:15:4b:d2:4f:0b:ff:18:fd:
1e:2c:1d:23:02:6b:cf:f6:0f:1c:fc:95:77:0d:81:
b3:ea:7a:c2:98:54:13:c6:e7:e3:42:2c:d1:e3:ac:
4b:50:8d:5c:d0:30:ce:48:3b:d4:0f:ec:8a:86:bf:
15:d4:dd:2e:86:e1:d6:7e:fe:38:95:22:34:ba:e0:
15:3a:36:53:a3:53:1b:aa:08:f8:dd:59:fc:0f:0a:
18:f7:a6:dc:58:66:50:c2:60:11:cd:e3:a1:00:7f:
fb:6e:bd:8d:4c:1d:e5:71:0c:d9:0f:ef:11:69:05:
b3:66:9d:2f:81:a3:b4:d2:88:c6:c0:27:11:b5:1c:
41:5c:ed:0f:3e:28:9d:a9:83:1e:5b:93:6a:33:36:
cc:44:ca:3f:f2:2e:12:7d:33:43:33:61:ca:10:f8:
32:8f:35:ab:94:15:3b:16:82:f7:03:15:2f:04:09:
3b:24:b5:12:b8:d3:4b:92:49:4e:bf:49:fb:46:f8:
8d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:58:48:FE:F0:37:58:EF:9F:D3:1E:DA:D2:20:F3:C8:EF:DC:7C:C2
X509v3 Authority Key Identifier:
keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/o1hI_vA3WO-f0x7a0iDzyO_cfMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.78.0/24
Signature Algorithm: sha256WithRSAEncryption
27:45:b7:c1:d2:53:ef:5d:d1:31:05:15:6f:7a:34:ac:eb:ec:
04:79:a6:cc:7a:8b:ff:20:a9:49:ba:95:3d:f8:3e:52:0a:a5:
fc:f0:73:85:e2:65:de:35:08:c3:87:da:31:6a:31:04:8a:95:
15:61:7a:f6:a4:03:cb:bf:8c:b9:32:fb:ac:1f:3c:bb:2e:d1:
fe:4a:9a:8f:36:cf:ad:ea:f9:25:55:97:77:ba:d1:19:7d:0f:
c9:1f:36:14:78:cf:fb:9d:72:be:14:fc:dc:eb:b1:a0:87:1c:
88:f9:a0:ae:3b:ad:0a:63:42:ed:2c:6b:fe:f3:de:cc:6c:f4:
7a:e6:b3:56:48:7c:40:61:ec:f7:3d:05:1f:c5:4e:3f:f5:7f:
b8:09:aa:47:ea:0b:12:d6:0d:42:1d:e9:1a:7f:08:a5:29:72:
c3:7d:0f:12:00:cd:3a:45:13:9c:bb:5f:c9:35:15:33:81:ca:
65:70:4f:e2:7d:53:3e:69:df:2d:67:73:74:be:1d:ea:07:74:
c5:cc:c4:52:16:b7:9c:b7:48:8e:40:41:b7:a2:dd:45:57:63:
84:32:fc:37:f4:4c:9e:0e:84:5b:75:5e:bd:53:14:db:82:1b:
e6:7a:42:a0:e7:56:e5:30:c3:ae:ca:28:5b:69:40:1f:7d:46:
91:82:60:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:08:56 2026 by rpki-client