Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/O5MpWWAIngvdNCIvP59Ugg-k22w.roa
File: O5MpWWAIngvdNCIvP59Ugg-k22w.roa (raw, json)
Hash identifier: IIiXMVL+EFWSPDF6ZVIvXgN6h4ljFTOq3BqqTal5ll8=
Subject key identifier: 3B:93:29:59:60:08:9E:0B:DD:34:22:2F:3F:9F:54:82:0F:A4:DB:6C
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01A13F956D09D2B15849234920292AB79A9B
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/O5MpWWAIngvdNCIvP59Ugg-k22w.roa
Signing time: Thu 15 Oct 2026 12:41:59 +0000
ROA not before: Thu 15 Oct 2026 12:41:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 109.111.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 05:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:95:6d:09:d2:b1:58:49:23:49:20:29:2a:b7:9a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Oct 15 12:41:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b93295960089e0bdd34222f3f9f54820fa4db6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:73:24:c0:7d:35:1e:ae:6d:98:bd:dc:36:cc:
2d:23:dd:90:f0:c9:63:4c:3a:5a:10:ee:0b:44:a9:
8f:b7:f9:83:10:80:b3:ac:0a:45:5a:16:62:21:0f:
e1:4e:7d:72:84:8c:fd:a2:c4:ed:76:78:05:0e:87:
72:ca:23:0b:e4:33:07:1e:af:6c:3c:65:2f:eb:e5:
04:bf:1e:1d:2b:fc:8f:7a:ea:6b:16:dc:03:c3:43:
e7:c1:14:ea:68:31:b8:9b:23:a0:8d:3c:f5:4e:23:
4d:9b:64:4b:54:ee:c8:77:39:20:05:fd:4f:17:3b:
be:5f:e6:ca:af:40:db:89:c6:0d:04:87:dc:cb:de:
07:a4:59:19:b0:f5:d0:59:1d:2a:f2:ec:f7:c1:ad:
46:fe:fc:be:6b:c8:c1:e5:e8:2f:6a:f9:e7:f6:a0:
f2:2f:dc:d3:04:a1:13:7a:72:5e:f7:82:e5:2d:10:
e1:11:27:14:58:8d:9a:9a:9a:c7:61:f5:01:dd:02:
de:8d:c2:49:80:c9:fc:4a:f7:b6:fc:0c:0e:dd:3b:
78:d6:5d:3f:86:ca:cd:8b:9c:01:c4:2c:3a:bd:36:
38:b5:be:73:f9:8a:96:96:02:79:25:ef:cb:75:f0:
bc:c0:df:34:a7:ef:23:c6:9f:08:f9:39:f2:89:5a:
5a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:93:29:59:60:08:9E:0B:DD:34:22:2F:3F:9F:54:82:0F:A4:DB:6C
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/O5MpWWAIngvdNCIvP59Ugg-k22w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.48.0/23
Signature Algorithm: sha256WithRSAEncryption
32:99:6b:ff:8d:aa:3a:2f:8f:91:e8:17:95:60:48:85:fc:e8:
46:04:44:ce:d8:11:e0:0e:60:5c:eb:c1:44:a9:9c:6d:8a:81:
b6:14:5a:66:59:e1:db:c3:b1:cd:b0:32:03:36:11:9a:1c:82:
25:04:c0:ff:9e:b1:ce:8d:96:86:2e:2f:b3:85:61:cf:53:d1:
a6:09:32:63:f0:68:ab:96:d2:be:22:01:5a:cc:a8:81:5a:40:
0c:8d:6d:36:58:c8:6a:a4:42:bb:4d:1f:fc:b9:3d:0b:0f:33:
2e:20:f8:77:cd:1c:8f:0e:af:52:cf:e9:16:af:45:cb:8a:0c:
84:08:5c:4b:7e:a0:ee:c0:37:d7:4c:cf:17:1a:c5:f4:93:c4:
ad:b7:de:a4:d4:c5:1b:4f:91:45:9e:da:fc:ed:d7:19:34:f0:
a4:1d:25:4b:7f:e4:ef:7f:c2:6b:a3:8a:fc:94:3d:71:82:5d:
5e:d8:d8:b0:c6:37:cc:c1:f5:8a:25:9b:5e:0e:f9:3e:57:8e:
43:35:59:84:44:47:36:cb:7f:61:5e:7e:0a:e7:84:65:15:6a:
76:ea:8a:0f:59:28:e9:df:d8:84:14:d3:07:1e:a2:1a:48:43:
73:39:99:e6:66:e8:a3:a9:e5:49:a4:b9:05:e8:a9:9e:46:6b:
9a:ae:f1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:10:50 2026 by rpki-client