Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/OpcAMycJkbHs8yUkV7lgYIGDoeg.roa
File: OpcAMycJkbHs8yUkV7lgYIGDoeg.roa (raw, json)
Hash identifier: hZ3pNa89++OuklEo5WIWYy9R8cNI2rsPHmZH6gfn5xY=
Subject key identifier: 3A:97:00:33:27:09:91:B1:EC:F3:25:24:57:B9:60:60:81:83:A1:E8
Certificate issuer: /CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c
Certificate serial: 01A114E839BDF68FA67CD8553D3E48B6A7DB
Authority key identifier: 5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/OpcAMycJkbHs8yUkV7lgYIGDoeg.roa
Signing time: Wed 07 Oct 2026 05:48:45 +0000
ROA not before: Wed 07 Oct 2026 05:48:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9044
IP address blocks: 185.203.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:14:e8:39:bd:f6:8f:a6:7c:d8:55:3d:3e:48:b6:a7:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c
Validity
Not Before: Oct 7 05:48:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a970033270991b1ecf3252457b960608183a1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1e:a3:ac:84:9b:45:ce:66:8a:7e:07:d8:05:
bd:be:4b:93:1a:5f:a4:97:ca:df:b8:7d:fe:db:84:
12:4d:7a:f1:1b:3f:81:06:a3:42:af:b1:03:aa:19:
4e:b1:a1:d1:dd:af:5f:da:96:95:29:b2:78:23:97:
61:ec:2b:64:a9:52:f0:c1:2c:5b:87:e1:21:5a:d2:
3e:82:81:c8:f6:74:f6:ab:55:40:75:5d:04:7e:21:
ce:5d:b5:23:a7:b3:32:59:ae:55:ba:af:21:d8:66:
74:fa:ad:52:8f:1b:08:ea:e6:2b:af:8b:0f:18:76:
88:88:70:e4:b3:aa:05:97:af:1b:7b:5c:7c:ba:9d:
2f:35:14:c2:0f:4d:18:af:8f:72:03:01:d8:b1:2e:
cd:fb:4e:99:57:96:75:3c:78:c0:e8:d0:1d:bb:81:
f1:08:d5:49:21:91:9f:56:4b:c8:48:28:0e:6e:5a:
f9:30:6b:de:0d:4a:27:e0:c6:d3:40:e2:93:8d:80:
b8:3c:45:9e:33:ae:79:58:38:de:34:ac:16:6a:a4:
8f:e9:7e:8c:80:af:39:d9:73:39:38:d8:17:9c:05:
a1:6e:64:cc:d1:fc:70:6d:8c:f6:28:cb:9f:b9:a5:
7a:d1:cc:92:04:83:2c:2c:b4:06:42:a6:d8:34:5c:
29:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:97:00:33:27:09:91:B1:EC:F3:25:24:57:B9:60:60:81:83:A1:E8
X509v3 Authority Key Identifier:
keyid:5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/OpcAMycJkbHs8yUkV7lgYIGDoeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.90.0/24
Signature Algorithm: sha256WithRSAEncryption
75:22:84:ee:d9:a3:dd:8c:e2:7d:92:e6:0d:c9:37:2b:e2:f0:
ff:13:bb:a9:6d:82:e2:fa:e5:b2:d0:71:4e:91:71:1a:1f:c2:
22:55:de:c6:89:4b:74:27:a0:d7:1c:a5:d6:a1:fb:23:bd:79:
f1:3d:36:33:93:39:e0:5a:98:9d:87:55:b7:6e:04:6d:c9:4b:
23:13:b2:fa:44:9a:8a:3f:54:b1:1e:74:45:c0:4f:fe:a0:91:
4d:8a:3a:96:ec:de:81:bd:8a:6b:41:91:2d:8c:0a:c6:84:8a:
13:b8:57:7d:7e:dc:37:25:e2:d1:34:ba:f2:42:c7:2b:37:a2:
42:0c:7c:d1:bc:3b:69:c4:db:52:3f:8c:e7:1c:03:5f:fc:d1:
21:06:d3:cb:e0:80:2a:f5:09:11:19:21:f4:46:4a:d2:fc:ad:
ab:4f:89:9d:f9:65:4e:ed:0e:d8:44:0a:7d:03:a2:16:f6:0e:
d7:d0:ab:d4:d5:44:c2:e8:e0:a5:aa:a7:0c:0e:db:fa:0f:5d:
a8:b4:bd:9f:67:5b:26:1f:8d:49:21:39:55:fd:f6:53:9a:ea:
56:81:31:64:e4:3e:61:77:6e:81:d5:6d:a6:1e:b7:ae:54:d2:
c0:4e:27:a5:c4:f9:15:a4:f4:a9:f7:54:8e:a9:82:28:98:10:
47:74:3f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 23:28:56 2026 by rpki-client