Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/our5ihUuGcgcU0KjT-Q2_hJRSYY.roa
File: our5ihUuGcgcU0KjT-Q2_hJRSYY.roa (raw, json)
Hash identifier: fFr4tZX1VGxnmEddwX1C01U/hs/f3oFzPhvXVoAW6YQ=
Subject key identifier: A2:EA:F9:8A:15:2E:19:C8:1C:53:42:A3:4F:E4:36:FE:12:51:49:86
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 01A0BF313104D580CB601E394256CB1DB3C3
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/our5ihUuGcgcU0KjT-Q2_hJRSYY.roa
Signing time: Sun 20 Sep 2026 14:21:07 +0000
ROA not before: Sun 20 Sep 2026 14:21:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 45.143.96.0/24 maxlen: 24
185.148.243.0/24 maxlen: 24
185.169.183.0/24 maxlen: 24
185.174.20.0/24 maxlen: 24
185.174.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:31:31:04:d5:80:cb:60:1e:39:42:56:cb:1d:b3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Sep 20 14:21:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2eaf98a152e19c81c5342a34fe436fe12514986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:07:40:d0:69:3e:96:cf:e7:7d:af:a3:50:b3:
6c:82:f8:69:af:97:bc:dd:cb:82:f5:21:65:8c:f1:
f7:57:a7:4b:d8:81:82:aa:40:d2:ea:d6:6d:34:51:
9f:1f:92:ba:68:87:fb:60:f0:28:29:8d:dc:ca:06:
fb:b8:53:3e:4c:68:5d:af:a8:c3:7a:c6:4f:e5:88:
b0:1e:3f:e3:06:47:52:c2:7e:a0:5a:e0:fb:a0:15:
6f:76:1b:9f:dd:bf:2b:fd:db:e9:2d:b5:96:31:2e:
13:7b:8e:04:75:a7:ba:4f:3d:df:f0:11:ee:f0:5a:
98:2a:76:dd:99:00:63:f6:fc:56:b3:2a:68:f7:67:
f1:d8:1f:db:1e:71:ee:89:ce:7c:1c:9d:ba:1c:d0:
fd:4c:6b:da:70:ba:50:47:4c:bf:78:c6:68:24:36:
f3:f5:5a:0e:68:62:68:42:d7:52:28:d6:e0:93:fe:
5b:1b:ef:55:38:11:a2:c0:5d:18:88:6a:7e:18:e3:
fd:b8:9a:05:ba:cb:90:4b:b7:65:c4:e8:f9:23:f9:
ae:68:34:6d:26:c6:ea:a7:49:43:2c:cd:3f:ae:10:
e0:5d:4f:29:f4:86:11:58:41:35:86:52:e8:60:30:
3a:36:60:25:10:41:94:e3:24:83:04:6d:62:78:41:
f9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:EA:F9:8A:15:2E:19:C8:1C:53:42:A3:4F:E4:36:FE:12:51:49:86
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/our5ihUuGcgcU0KjT-Q2_hJRSYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.96.0/24
185.148.243.0/24
185.169.183.0/24
185.174.20.0/24
185.174.23.0/24
Signature Algorithm: sha256WithRSAEncryption
54:bf:73:19:1f:7e:dc:55:eb:f0:cc:55:c2:fc:da:a8:ae:81:
84:1e:03:21:df:a0:b1:08:39:66:d2:55:bf:44:6f:f5:b3:95:
7c:6b:4d:04:9c:99:71:00:bd:6d:a7:19:f5:40:17:09:6a:59:
a3:da:cb:85:d1:d0:3d:44:9a:16:0b:44:c5:33:51:17:a6:13:
48:06:7b:34:0f:1f:b4:28:d9:48:91:1f:48:dc:d3:56:dd:11:
16:47:2a:4f:75:8c:be:66:c5:e9:d2:59:7a:47:81:62:9c:fa:
4e:84:02:49:a6:e9:28:fd:80:30:88:35:39:4a:0d:67:7f:07:
95:e7:13:3a:f1:38:95:b9:70:ec:67:be:4c:a1:d2:40:76:95:
32:ba:a9:44:25:4d:4a:fa:d5:25:06:4f:a9:84:b6:26:8d:b9:
c3:d4:11:26:86:6e:6c:a7:94:37:ae:a2:1c:ee:dd:bc:bb:18:
7d:da:2c:b2:36:df:be:1c:0b:f3:da:92:e0:88:e8:94:e9:58:
59:5c:b8:a2:8d:63:32:ca:f2:4d:05:15:b3:0f:77:00:6f:36:
1f:7f:22:2e:c5:00:19:07:18:d2:9c:a2:19:97:65:c1:69:95:
ba:8e:ae:7b:f2:2c:6d:03:e3:87:0a:03:9e:70:80:83:63:29:
1f:73:3e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:20:33 2026 by rpki-client