Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/62a475-860d-4dfd-a46d-72fb962067c0/1/oAQJKMK8NgZqtvxbBkzDM7geQKQ.roa
File: oAQJKMK8NgZqtvxbBkzDM7geQKQ.roa (raw, json)
Hash identifier: ZaBpVCGnBFmIfoFiVR1I1KP7qEJHmLIIk81K+9Hn9BU=
Subject key identifier: A0:04:09:28:C2:BC:36:06:6A:B6:FC:5B:06:4C:C3:33:B8:1E:40:A4
Certificate issuer: /CN=1afa395dd6c87fccfb9b9dd7c536d61666ebc746
Certificate serial: 01A03E62346508763EBED82497F72CBB007B
Authority key identifier: 1A:FA:39:5D:D6:C8:7F:CC:FB:9B:9D:D7:C5:36:D6:16:66:EB:C7:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gvo5XdbIf8z7m53XxTbWFmbrx0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/62a475-860d-4dfd-a46d-72fb962067c0/1/oAQJKMK8NgZqtvxbBkzDM7geQKQ.roa
Signing time: Wed 26 Aug 2026 14:03:38 +0000
ROA not before: Wed 26 Aug 2026 14:03:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48378
IP address blocks: 91.209.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/62a475-860d-4dfd-a46d-72fb962067c0/1/Gvo5XdbIf8z7m53XxTbWFmbrx0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/62a475-860d-4dfd-a46d-72fb962067c0/1/Gvo5XdbIf8z7m53XxTbWFmbrx0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gvo5XdbIf8z7m53XxTbWFmbrx0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:62:34:65:08:76:3e:be:d8:24:97:f7:2c:bb:00:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1afa395dd6c87fccfb9b9dd7c536d61666ebc746
Validity
Not Before: Aug 26 14:03:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0040928c2bc36066ab6fc5b064cc333b81e40a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6a:9a:55:ac:c6:e7:5a:85:d2:e1:5d:f1:f6:
96:96:f1:d6:24:26:1e:39:24:05:ee:bf:45:7b:bb:
c9:30:97:c7:55:9a:0f:b3:00:c6:92:b0:f3:b9:b6:
f5:09:69:78:a4:b6:77:17:a5:4a:f5:bb:4e:0f:8b:
d5:b7:29:62:39:8c:8a:f2:c1:9a:b0:ba:5c:65:f3:
9d:f8:00:df:8d:1c:de:95:6c:81:5b:ba:98:8e:7e:
b0:9b:37:15:d2:dd:d5:b4:30:a6:b4:7d:3b:c5:1b:
3d:67:ee:64:dd:fa:73:4f:72:4c:8e:81:f6:53:34:
48:1a:8e:40:4c:b7:c0:c6:c5:f8:52:b8:cf:c9:91:
73:53:ab:88:af:cc:75:57:0e:1d:1e:41:08:fd:b3:
c4:54:a3:95:b6:48:fc:86:93:a1:50:28:63:d1:be:
5c:a2:6a:7b:8e:f3:dd:6e:a8:1b:77:97:ea:f4:d7:
df:bd:50:08:78:fd:e1:ad:0c:9d:f9:de:28:0f:9f:
a3:d6:eb:0d:a6:a7:dd:b1:a5:4a:6b:85:c8:86:20:
6a:01:59:30:24:64:8e:d3:d6:6f:e8:c6:25:cf:31:
bf:5e:fa:e9:ee:d7:94:f5:a4:20:96:8d:19:03:12:
64:76:4a:3b:e5:2a:8b:1f:70:d4:c6:f5:72:ef:a5:
7b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:04:09:28:C2:BC:36:06:6A:B6:FC:5B:06:4C:C3:33:B8:1E:40:A4
X509v3 Authority Key Identifier:
keyid:1A:FA:39:5D:D6:C8:7F:CC:FB:9B:9D:D7:C5:36:D6:16:66:EB:C7:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gvo5XdbIf8z7m53XxTbWFmbrx0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/62a475-860d-4dfd-a46d-72fb962067c0/1/oAQJKMK8NgZqtvxbBkzDM7geQKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/62a475-860d-4dfd-a46d-72fb962067c0/1/Gvo5XdbIf8z7m53XxTbWFmbrx0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.138.0/24
Signature Algorithm: sha256WithRSAEncryption
24:8d:c1:fb:6e:91:39:78:ae:0f:52:b3:a5:ac:c8:d4:d3:3c:
74:9e:6a:91:4d:b9:0f:8d:4d:1a:aa:45:39:76:48:db:88:37:
1d:84:76:36:9c:f9:14:d9:05:b8:32:c6:6b:7e:8b:d3:75:6e:
a9:c3:d7:e7:74:f8:6f:c6:76:3c:0e:fb:03:ce:cc:63:74:af:
24:6d:9c:e2:80:92:63:18:80:78:af:11:f6:ee:c1:93:93:41:
47:48:a6:e4:25:0f:51:21:bf:14:22:17:4c:5c:63:da:92:aa:
cf:ab:6d:cf:83:70:af:73:cb:fd:56:b6:92:6f:2e:ae:db:3a:
e4:e5:d7:b6:98:c1:04:b4:eb:81:c7:24:34:9f:96:54:6d:56:
32:3f:aa:43:8a:b2:69:78:4e:54:73:1d:c1:5f:1d:01:6f:13:
94:ac:99:fb:b8:b2:18:7d:f6:b7:92:44:78:2b:40:ef:9c:ae:
c5:2d:12:19:fc:89:89:d3:6c:46:2c:77:81:c5:b6:e0:46:5c:
b4:42:1f:20:57:a3:6a:70:55:83:e8:e6:f9:ee:27:38:16:49:
cc:3c:dd:4f:4a:94:20:b8:ce:32:67:5c:1c:7d:57:c4:3a:42:
5c:38:53:2f:7f:19:ef:51:6a:d1:3f:41:64:e5:bf:68:24:33:
b6:c4:5b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:54:47 2026 by rpki-client