Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/OrFKuXk1tNGW3qAfJhiWIvgABlI.roa
File: OrFKuXk1tNGW3qAfJhiWIvgABlI.roa (raw, json)
Hash identifier: GCcWM3qYGz+jKi3Y/YpCZkCF1WqTLbWom0Q9aQw1vbc=
Subject key identifier: 3A:B1:4A:B9:79:35:B4:D1:96:DE:A0:1F:26:18:96:22:F8:00:06:52
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 01A0AE1947F68E1929325D43119DF5AED403
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/OrFKuXk1tNGW3qAfJhiWIvgABlI.roa
Signing time: Thu 17 Sep 2026 06:41:27 +0000
ROA not before: Thu 17 Sep 2026 06:41:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 88.135.152.0/22 maxlen: 24
213.110.70.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:19:47:f6:8e:19:29:32:5d:43:11:9d:f5:ae:d4:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Sep 17 06:41:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ab14ab97935b4d196dea01f26189622f8000652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e1:1d:fb:87:bb:3d:29:15:13:92:d5:f5:87:
ff:98:f4:b0:79:22:dc:d6:db:75:00:d2:e7:11:8a:
04:82:a3:e9:71:5e:a0:ba:8a:97:4a:e1:7b:7a:79:
13:44:01:7a:37:c3:6b:f6:63:8f:20:00:41:62:03:
3d:63:ba:f5:77:6e:17:fd:1a:30:19:f2:60:fc:8d:
68:78:1c:2c:74:2c:a4:f6:67:3e:51:db:e0:45:89:
bc:8b:b8:62:f1:0f:c9:cb:90:0c:db:85:db:b2:5c:
49:bf:17:a0:68:8c:a2:4f:af:50:7b:f7:81:52:bc:
ac:20:05:7d:ce:e3:f2:fd:f3:52:f7:5e:fe:98:25:
74:53:89:5a:16:70:ed:f6:b5:82:61:0e:3d:a5:e7:
c3:fb:89:15:4c:d6:17:e1:7f:85:8a:7a:ea:d0:f7:
55:ee:d4:18:dc:ba:c7:f2:39:f2:87:1d:1d:f7:41:
4b:3a:ab:58:cf:a3:8c:39:ed:12:01:72:43:53:3b:
ce:3e:4e:79:8b:45:a5:13:51:04:33:e5:bf:71:16:
d9:e5:3b:4b:19:5e:bc:be:72:50:1f:d3:9d:04:f2:
d4:84:39:eb:a3:fd:51:90:3e:d4:11:46:70:7b:c5:
2d:c0:7e:f5:78:42:15:96:ee:3a:e3:1a:ca:80:11:
8c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B1:4A:B9:79:35:B4:D1:96:DE:A0:1F:26:18:96:22:F8:00:06:52
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/OrFKuXk1tNGW3qAfJhiWIvgABlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.152.0/22
213.110.70.0/23
Signature Algorithm: sha256WithRSAEncryption
77:ac:2a:4e:06:a9:98:22:9a:68:15:47:61:df:b5:75:e0:d9:
7d:61:3a:0a:3f:10:92:0b:db:0e:7e:20:c7:e8:fa:18:4f:58:
4b:46:25:a1:7c:fb:5f:99:b3:da:f0:36:81:bb:77:0b:36:ca:
74:be:3d:99:84:57:b5:07:9b:22:9a:a6:69:d2:8d:81:41:d5:
93:4c:a0:95:ca:e2:d6:1b:22:a4:d1:02:f8:d8:30:6d:40:ef:
63:03:ac:1b:5d:13:e6:ac:b6:cc:6d:6b:d1:a7:50:5a:90:56:
c7:2d:0b:49:6f:40:76:1d:49:4c:f4:3d:75:15:7d:74:20:05:
09:17:3a:e3:5b:7b:d1:9a:6c:18:1a:0c:c8:e3:59:9d:82:cc:
41:21:0e:0c:c3:8d:75:b7:91:05:ad:2c:68:ee:38:2a:9e:68:
b9:42:84:fc:6d:50:ed:ae:9f:52:0e:89:16:98:53:be:4a:c1:
a8:a9:6d:27:1c:38:85:df:d4:7c:98:dd:9d:a3:1f:3c:97:79:
84:1b:8e:c5:5f:69:d8:a7:a1:86:18:58:e8:60:0e:65:39:9a:
f3:7d:9d:52:1c:23:42:83:15:2d:e6:e9:e4:0e:4e:57:b0:45:
bc:d6:d0:e8:0a:71:84:4d:c0:50:57:19:17:de:85:0a:ad:c1:
07:35:16:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:25:27 2026 by rpki-client