Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/oKSsMuSbioJTAAXxNUhX3aEkTkA.roa
File: oKSsMuSbioJTAAXxNUhX3aEkTkA.roa (raw, json)
Hash identifier: uN6o2dfQogWKiR10tNNdi8uBAG3yAcVpyMFsu4QzgWY=
Subject key identifier: A0:A4:AC:32:E4:9B:8A:82:53:00:05:F1:35:48:57:DD:A1:24:4E:40
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 01A19BCEBD4D2C8FD12A49E2751AF8C516BD
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/oKSsMuSbioJTAAXxNUhX3aEkTkA.roa
Signing time: Mon 02 Nov 2026 10:29:39 +0000
ROA not before: Mon 02 Nov 2026 10:29:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207043
IP address blocks: 109.160.33.0/24 maxlen: 24
109.160.34.0/24 maxlen: 24
109.160.35.0/24 maxlen: 24
109.160.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9b:ce:bd:4d:2c:8f:d1:2a:49:e2:75:1a:f8:c5:16:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Nov 2 10:29:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0a4ac32e49b8a82530005f1354857dda1244e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:63:7d:80:bb:5b:b5:63:cd:b7:8a:d4:71:a0:
30:a6:33:2e:88:48:7a:83:13:b1:01:e2:f4:48:34:
89:d7:83:fb:74:c4:7a:7e:d8:9d:bb:a8:88:60:6c:
83:22:ec:4c:b0:8f:1b:58:de:86:3e:e0:ad:02:cb:
31:98:04:b6:45:b3:fc:cf:20:38:06:86:9f:68:95:
97:2f:53:d3:e8:a9:28:49:08:63:81:51:79:0c:e6:
85:97:3e:4d:a9:75:87:1d:e8:51:8c:02:b3:cd:d9:
d9:2e:fd:b5:77:be:2a:5a:29:f5:dd:82:93:48:db:
92:c5:00:26:a0:c0:96:e4:78:34:04:80:e3:50:93:
cb:b8:76:80:22:01:f7:82:aa:e8:96:5c:29:7c:16:
a4:de:37:01:61:8d:71:11:0b:1b:98:1f:2e:75:ba:
88:85:86:bd:bd:b9:93:df:18:c9:49:05:d8:ab:fa:
13:a5:18:5c:b1:ce:85:58:56:ca:5b:03:f7:ab:a0:
bc:86:59:67:61:45:c1:9b:95:ca:ce:26:c6:88:dd:
ed:3a:fc:7b:6a:e1:94:25:b6:51:1a:ea:6c:c0:b3:
ce:ff:ef:b2:6d:75:2f:40:07:9d:d5:9a:00:68:84:
03:f3:cf:87:c9:e4:28:a7:54:8c:8a:9b:8a:79:61:
a4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A4:AC:32:E4:9B:8A:82:53:00:05:F1:35:48:57:DD:A1:24:4E:40
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/oKSsMuSbioJTAAXxNUhX3aEkTkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.160.33.0-109.160.35.255
109.160.37.0/24
Signature Algorithm: sha256WithRSAEncryption
76:9d:e7:6c:cc:3a:a4:5d:f7:5d:67:a5:8a:ad:19:6a:bd:1f:
c7:e2:7f:bb:c0:e3:14:75:e2:75:83:33:8d:d2:c0:83:8b:60:
f1:a6:00:26:f5:b7:c9:0a:11:d5:3e:80:b8:4e:75:33:01:1a:
1a:9b:9b:c9:21:e6:d2:b0:22:b8:9b:2f:d0:5f:9f:fb:1c:6a:
65:33:d0:64:7d:9c:8d:16:5a:84:1d:fa:e5:69:6a:1f:7f:e2:
65:f6:9b:94:08:1e:c7:21:fb:8c:e1:b3:40:bd:e3:89:83:fa:
18:c9:22:6d:b2:59:c9:64:34:e9:55:7b:bc:6b:34:a8:bd:6a:
93:1f:ed:d5:54:8a:75:95:d5:a0:80:a4:fe:39:7c:1b:b9:88:
4f:18:de:06:01:9c:26:a7:2a:2d:98:b5:b6:05:cd:3b:68:07:
76:c3:04:14:e3:93:7e:15:8b:ac:3c:0d:6f:82:a7:16:f6:a2:
ab:b4:ca:9c:55:0a:5a:f3:09:47:00:bd:38:17:6e:bb:bb:b0:
ad:40:10:6e:54:5a:d3:37:60:de:30:9f:44:9c:8c:90:bc:20:
34:7a:b7:a8:2b:df:82:90:3b:26:fa:03:1f:4d:5f:ae:09:cc:
63:9d:3a:bc:78:23:cc:70:bd:81:37:f2:9f:3e:ef:28:14:bc:
cf:ad:45:0d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 15 08:04:36 2026 by rpki-client