Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/OtyG0WjLHxgUI-iQk8ihNnEXEfM.roa
File: OtyG0WjLHxgUI-iQk8ihNnEXEfM.roa (raw, json)
Hash identifier: GlWW+c/cVj2N0GB90BwkmqV4TKDnrZJEURd8gG8a1Dg=
Subject key identifier: 3A:DC:86:D1:68:CB:1F:18:14:23:E8:90:93:C8:A1:36:71:17:11:F3
Certificate issuer: /CN=0f18326e001aa7fc56f83531315376f9eaae0988
Certificate serial: 01A0E50E99376609BAC3480F164E104355E4
Authority key identifier: 0F:18:32:6E:00:1A:A7:FC:56:F8:35:31:31:53:76:F9:EA:AE:09:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DxgybgAap_xW-DUxMVN2-equCYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/OtyG0WjLHxgUI-iQk8ihNnEXEfM.roa
Signing time: Sun 27 Sep 2026 22:48:54 +0000
ROA not before: Sun 27 Sep 2026 22:48:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49972
IP address blocks: 91.216.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DxgybgAap_xW-DUxMVN2-equCYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:0e:99:37:66:09:ba:c3:48:0f:16:4e:10:43:55:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f18326e001aa7fc56f83531315376f9eaae0988
Validity
Not Before: Sep 27 22:48:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3adc86d168cb1f181423e89093c8a136711711f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3f:27:6d:6f:1a:9c:4d:e2:83:49:ae:87:9f:
98:a9:f3:a8:7e:cf:90:93:39:50:9d:36:be:2f:6f:
1c:d2:37:34:d7:24:51:6c:a8:5e:51:67:9b:da:f3:
85:e8:3b:79:af:31:be:f4:9d:49:dd:a8:95:98:24:
62:3f:6b:55:2a:b6:45:78:61:f7:7b:41:0b:29:45:
0d:d9:f1:d4:a3:6a:ad:62:0d:8a:21:5a:73:9c:ed:
ca:1c:69:a7:69:f1:87:1f:19:ca:a7:49:04:0d:45:
83:34:84:3f:9d:c6:3c:38:db:3f:82:58:70:37:b0:
54:96:14:7c:82:06:88:fd:c9:36:90:7b:53:76:b9:
c7:cb:4b:06:68:ac:73:20:1e:04:db:62:c9:85:a5:
81:01:5b:fb:9d:5e:f7:dc:64:f9:a4:9e:b7:85:58:
9a:4c:99:fc:b9:16:81:fd:27:45:60:a1:51:29:a3:
be:94:b6:cd:a9:03:7e:5b:d3:b8:ed:8f:61:fe:96:
2e:bc:58:91:80:5b:53:29:75:88:e4:2d:9f:0f:ff:
70:9b:df:4f:e5:cb:71:d6:2d:eb:5e:2c:a8:96:50:
02:18:4d:52:ce:4c:71:fc:1a:16:2f:eb:ae:f7:fc:
d4:32:b3:fa:0b:e5:18:e3:26:41:dd:ed:31:4c:31:
ef:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DC:86:D1:68:CB:1F:18:14:23:E8:90:93:C8:A1:36:71:17:11:F3
X509v3 Authority Key Identifier:
keyid:0F:18:32:6E:00:1A:A7:FC:56:F8:35:31:31:53:76:F9:EA:AE:09:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DxgybgAap_xW-DUxMVN2-equCYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/OtyG0WjLHxgUI-iQk8ihNnEXEfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.171.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:75:4a:98:bc:32:18:fc:35:03:f5:38:d6:2f:71:a1:e8:80:
3d:7a:92:14:df:a7:49:1b:93:c7:72:48:80:84:2c:ae:82:6c:
ab:10:58:f7:04:5e:b4:fa:e1:ee:1a:32:7f:77:aa:66:8d:25:
90:11:49:4f:d1:b8:74:7c:6e:f0:62:5c:31:cb:a6:c9:91:7c:
74:3b:5b:e6:5d:97:ab:bb:f5:5e:8c:34:a4:5d:c7:c7:5d:71:
c8:9e:ce:f3:bc:a8:e3:3c:75:40:c3:cc:2e:c9:c2:44:27:78:
84:55:c6:75:e4:53:3d:fb:3f:c5:00:58:5f:d0:d1:a8:fd:58:
37:0b:53:3c:5f:a6:7f:cb:d4:9f:32:55:29:bd:e7:9c:b5:50:
a2:5f:84:21:9c:48:ca:e2:66:d1:2c:7a:3a:7e:4a:35:b0:70:
9d:51:a2:92:f5:d9:75:41:85:79:46:f4:02:dc:38:3d:38:a1:
13:93:0d:95:77:89:e9:40:10:2d:bb:80:85:09:c5:ee:68:07:
3e:68:a8:a5:3c:fd:81:e6:4a:85:d8:02:ad:be:91:0f:6a:a9:
85:e1:e8:70:ec:1d:1f:cb:c2:f2:10:aa:f7:d9:14:37:4e:06:
e7:b3:a0:71:9f:af:0d:46:a1:c4:12:bc:3d:c8:65:f5:9d:db:
17:56:b2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:54:18 2026 by rpki-client