Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/e286a1-f29c-4aea-9716-505061e459a2/1/0fDWrl-zOWsXcIHpYgiHIIXlzbM.roa
File: 0fDWrl-zOWsXcIHpYgiHIIXlzbM.roa (raw, json)
Hash identifier: 5OnTSgOmHXF9aC2oY1o80TpVqcSBGodjVSzKDjL92Ic=
Subject key identifier: D1:F0:D6:AE:5F:B3:39:6B:17:70:81:E9:62:08:87:20:85:E5:CD:B3
Certificate issuer: /CN=18e1d3fade0abd8c0fbd11d588c65d2b3419cedf
Certificate serial: 01A0A03922AB7944AB6E1DEAF8A3A76DE91B
Authority key identifier: 18:E1:D3:FA:DE:0A:BD:8C:0F:BD:11:D5:88:C6:5D:2B:34:19:CE:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOHT-t4KvYwPvRHViMZdKzQZzt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e286a1-f29c-4aea-9716-505061e459a2/1/0fDWrl-zOWsXcIHpYgiHIIXlzbM.roa
Signing time: Mon 14 Sep 2026 14:01:34 +0000
ROA not before: Mon 14 Sep 2026 14:01:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 766
IP address blocks: 161.67.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e286a1-f29c-4aea-9716-505061e459a2/1/GOHT-t4KvYwPvRHViMZdKzQZzt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e286a1-f29c-4aea-9716-505061e459a2/1/GOHT-t4KvYwPvRHViMZdKzQZzt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GOHT-t4KvYwPvRHViMZdKzQZzt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:39:22:ab:79:44:ab:6e:1d:ea:f8:a3:a7:6d:e9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e1d3fade0abd8c0fbd11d588c65d2b3419cedf
Validity
Not Before: Sep 14 14:01:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d1f0d6ae5fb3396b177081e96208872085e5cdb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f8:12:21:5c:a7:00:0a:c5:f8:6c:de:a3:dc:
0e:48:b3:3b:55:6d:c8:57:34:cc:2b:f6:dd:a6:30:
12:e6:53:83:8e:bb:de:b0:a1:31:c4:fc:8b:dc:c9:
b0:c8:20:5f:1a:61:cb:53:4c:8b:c4:8e:9f:06:d4:
b5:7f:b8:9f:2a:23:54:2e:12:b6:9f:f0:70:99:b0:
a8:cf:88:83:00:de:2d:5a:b0:90:2e:2f:b2:7e:3f:
f0:c6:cd:95:95:3a:ad:3c:ae:6d:8a:85:b9:01:20:
4f:c0:af:1c:ae:1c:1f:c3:1d:d9:a4:32:0a:ec:07:
18:d1:4f:31:a2:8b:c6:5c:b8:0f:49:b8:fe:d9:76:
3d:0c:ce:50:d6:09:75:18:f9:9d:3a:76:69:73:18:
bf:d1:c8:e1:b2:53:14:b2:07:04:67:d5:db:9e:ee:
d9:2e:49:23:34:e6:7b:32:8a:9d:fb:98:46:aa:f2:
a0:7b:be:16:fc:78:1b:78:e2:ee:4f:d9:fa:c6:36:
9e:d3:c8:d2:63:63:a7:a1:f8:15:06:0f:66:50:05:
d7:2b:31:43:fc:cd:57:8f:f3:70:f2:db:3d:84:e4:
e1:4b:08:5d:06:00:fa:70:1e:22:51:8b:60:a2:77:
41:ac:3c:57:06:69:41:a0:0f:2c:2a:0d:7c:aa:fc:
21:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F0:D6:AE:5F:B3:39:6B:17:70:81:E9:62:08:87:20:85:E5:CD:B3
X509v3 Authority Key Identifier:
keyid:18:E1:D3:FA:DE:0A:BD:8C:0F:BD:11:D5:88:C6:5D:2B:34:19:CE:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOHT-t4KvYwPvRHViMZdKzQZzt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e286a1-f29c-4aea-9716-505061e459a2/1/0fDWrl-zOWsXcIHpYgiHIIXlzbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e286a1-f29c-4aea-9716-505061e459a2/1/GOHT-t4KvYwPvRHViMZdKzQZzt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.67.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3f:2d:80:30:16:48:4a:39:73:ea:25:f7:fc:70:d3:77:87:c7:
99:18:bb:61:ad:91:91:0f:34:29:a5:8f:82:c2:fd:d4:93:8b:
f5:e9:25:f1:06:57:2b:2e:bc:8c:82:9c:d7:8d:f6:d8:94:b7:
96:86:9f:6a:84:28:bc:d1:56:55:c4:30:a8:70:d3:a1:0a:4b:
0c:0f:a1:18:53:dc:cd:3d:cf:e2:6a:48:47:fe:97:96:d5:29:
f8:80:cf:f7:72:db:a4:f0:81:d3:0f:07:cc:26:19:b1:b9:a1:
b6:6a:0d:92:6d:ef:af:b0:0b:9a:5e:8f:9a:c7:c9:a1:ab:3a:
f0:06:ad:8f:1f:5a:72:a6:51:ed:bd:a5:cf:fe:9e:7e:f9:ed:
58:c8:4f:1e:db:0e:8d:c2:1b:97:f2:cd:8e:76:a6:67:5f:2b:
3a:51:6b:91:c2:11:7e:0a:0f:53:02:34:fb:22:ce:28:2f:e5:
97:06:6e:91:50:41:ee:e2:f5:8e:85:49:35:13:14:90:93:3b:
18:a9:c3:00:61:37:71:24:3d:55:ab:bc:fe:2f:69:af:4e:75:
26:f4:f6:13:15:aa:32:e0:1a:97:82:46:f3:71:b0:44:f9:3e:
94:44:ef:d1:eb:a4:95:20:4e:e1:c4:c4:d5:56:92:f3:2c:8b:
a4:a6:6e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:52:25 2026 by rpki-client