Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/oYoK3MKCDAt2Vl6sc2ZPRQPXck4.roa
File: oYoK3MKCDAt2Vl6sc2ZPRQPXck4.roa (raw, json)
Hash identifier: ojbwZkbf6RTWhGjCLnOZeAUwCGajo9XVRazbI1Jt8aI=
Subject key identifier: A1:8A:0A:DC:C2:82:0C:0B:76:56:5E:AC:73:66:4F:45:03:D7:72:4E
Certificate issuer: /CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a
Certificate serial: 019C93F6BDF3BFCCA396CEAADDD6ED4B79DA
Authority key identifier: 14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/oYoK3MKCDAt2Vl6sc2ZPRQPXck4.roa
Signing time: Wed 25 Feb 2026 08:42:27 +0000
ROA not before: Wed 25 Feb 2026 08:42:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 185.72.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:93:f6:bd:f3:bf:cc:a3:96:ce:aa:dd:d6:ed:4b:79:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a
Validity
Not Before: Feb 25 08:42:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a18a0adcc2820c0b76565eac73664f4503d7724e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1e:fe:40:3b:01:95:42:23:e2:d9:32:1b:ec:
5b:f2:c6:a9:63:f5:e1:8d:f9:8e:4a:ca:90:2e:0c:
83:24:70:ea:34:e4:46:1d:ce:9a:4f:30:05:64:71:
35:2f:70:0b:ce:84:d0:c4:6f:f6:5f:d1:d9:f3:34:
5c:5b:54:83:2c:a8:3e:05:6c:0c:25:d3:e8:30:e4:
37:e0:f5:fd:d8:4f:14:f7:33:aa:e3:c4:46:cf:09:
6a:dc:be:4e:51:60:f5:f8:37:1c:15:5d:ef:4c:35:
bc:87:ef:be:06:e1:25:9f:24:a8:c6:cd:61:91:ad:
22:24:80:d5:1c:6f:d5:9b:f4:2e:41:13:e4:df:81:
17:5a:c5:b5:26:01:02:35:a7:66:6a:f7:2f:f6:7c:
e3:e6:08:15:52:25:2c:48:b0:df:bb:4a:89:db:b6:
f2:8f:5d:56:34:48:96:54:96:70:d5:b8:7d:3e:6c:
f8:11:63:83:73:f2:b9:f6:2c:b3:49:c5:d3:e9:72:
c6:5f:50:3f:28:e7:68:54:d8:7a:c7:b0:52:40:67:
38:6a:f6:6d:2f:b1:1c:e9:fc:9e:29:38:83:c4:75:
43:2d:20:5c:55:9a:94:b3:28:a6:6f:79:d2:17:0b:
f4:84:6f:c7:20:da:2e:81:98:e2:24:a0:eb:0a:09:
ac:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8A:0A:DC:C2:82:0C:0B:76:56:5E:AC:73:66:4F:45:03:D7:72:4E
X509v3 Authority Key Identifier:
keyid:14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/oYoK3MKCDAt2Vl6sc2ZPRQPXck4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.124.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:46:a4:4e:e3:69:44:6d:13:d1:c2:23:93:10:c3:8f:cc:7d:
47:a2:bf:8a:7d:f1:fd:5b:c5:91:32:a6:29:d5:44:72:fa:57:
1d:a2:b8:4e:f1:23:a3:06:65:ff:a6:ee:1b:24:cc:36:2e:18:
94:73:31:67:dc:99:32:28:8e:4f:97:7b:11:50:b9:4a:74:b5:
61:bb:c3:1c:98:3b:e9:68:82:26:7f:59:56:b2:f4:0f:e1:a0:
68:aa:33:80:bc:29:49:b3:f2:33:d8:f4:40:1c:c2:b8:6d:e5:
e0:f3:4b:fb:6e:f8:35:0e:1a:2f:58:22:0f:ec:16:c6:0d:bd:
01:ec:d7:3c:d2:3f:cc:3e:1c:34:e8:a2:da:a6:82:d7:03:93:
3c:af:c3:af:cc:6d:81:85:fa:3c:1c:bc:63:40:66:2a:84:cd:
fa:68:1d:ca:0d:a4:ba:23:2e:9e:1e:69:18:8f:bf:8c:b8:1d:
c8:0e:51:7e:36:05:bb:1f:eb:58:25:fb:80:71:22:38:5f:af:
63:95:87:9d:ca:3a:49:c3:a7:5f:5b:60:28:84:2b:4a:81:c0:
90:d8:11:ff:59:00:cc:aa:eb:21:6e:1d:49:45:a4:79:fd:f0:
ab:59:55:f7:b7:95:9f:98:5c:66:db:d5:ab:da:a0:a4:92:14:
e5:bb:d9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:42:08 2026 by rpki-client