Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/od_vNFdzyPTihlWXgx3lhAcGfYw.roa
File: od_vNFdzyPTihlWXgx3lhAcGfYw.roa (raw, json)
Hash identifier: w0LnuSD3Z5yjYPNxEpqk8u/+1Ashm8kvNdbgDEz9Ixs=
Subject key identifier: A1:DF:EF:34:57:73:C8:F4:E2:86:55:97:83:1D:E5:84:07:06:7D:8C
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 019BFD017807EADCF484C19114BD5800591C
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/od_vNFdzyPTihlWXgx3lhAcGfYw.roa
Signing time: Tue 27 Jan 2026 01:11:30 +0000
ROA not before: Tue 27 Jan 2026 01:11:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 109.111.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fd:01:78:07:ea:dc:f4:84:c1:91:14:bd:58:00:59:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 27 01:11:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1dfef345773c8f4e2865597831de58407067d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:85:3f:e6:c8:29:98:d4:52:5d:8e:24:68:fb:
e7:f0:a2:62:c0:af:c4:29:f1:1d:68:ac:19:3e:d4:
b7:12:40:59:db:e5:37:2a:44:a3:7f:d7:7a:a5:62:
08:4f:c6:76:e1:5d:e8:97:2a:28:48:e3:4a:2b:90:
bc:78:80:7c:7e:3d:9d:f2:8d:f3:bd:36:97:f7:38:
6c:e9:08:4c:ff:8d:67:0e:db:36:29:2b:1a:85:17:
96:f9:a5:16:3b:8b:88:7b:ad:a0:15:fa:8f:0e:ee:
56:e2:d5:e2:64:31:66:6f:97:75:f6:24:4f:9a:52:
40:3f:93:cf:a9:d5:b0:e3:81:ac:34:5a:68:17:f0:
f3:c0:93:0f:36:b8:4f:79:b1:8b:a4:8a:78:c4:61:
cf:38:94:0b:75:64:73:ed:de:a2:2c:10:b0:9a:7f:
33:54:21:1c:e5:01:e6:35:ca:7d:99:66:5e:d8:e7:
86:76:c2:07:b6:7f:cf:83:10:65:bc:b1:4e:ae:d6:
c7:f9:e3:c6:84:be:8b:db:98:de:cf:ea:50:96:aa:
64:d3:05:3a:30:2f:7f:c3:39:d9:dd:e7:1e:a3:05:
ce:cf:d1:41:71:28:39:e6:a3:49:ef:f3:aa:b2:04:
a4:91:74:af:3a:6e:db:21:e0:98:67:3d:82:78:17:
e9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DF:EF:34:57:73:C8:F4:E2:86:55:97:83:1D:E5:84:07:06:7D:8C
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/od_vNFdzyPTihlWXgx3lhAcGfYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.32.0/22
Signature Algorithm: sha256WithRSAEncryption
87:d2:bb:ae:ab:16:f6:f0:8e:1f:91:00:22:6e:55:5a:cd:a6:
84:42:bf:ad:67:7b:e7:39:a3:bd:32:03:c4:90:00:ea:d1:6e:
14:14:ae:7f:a6:b5:d5:2d:84:29:ed:66:25:26:29:78:57:ac:
b8:c4:26:e4:d3:bd:c4:1c:e6:4c:cf:3d:a5:4a:35:9a:e3:0a:
86:9e:c7:bd:3f:68:bd:47:d8:dd:78:7f:95:c0:ae:56:8d:30:
6d:58:ea:4e:6d:78:88:3e:3f:32:7a:34:46:be:44:0c:e8:c4:
93:bb:f0:e5:00:b5:b4:2b:3c:09:d4:28:63:7b:e1:02:58:a6:
27:b8:ca:49:28:d1:39:37:5e:73:db:2c:0e:a2:ac:a6:15:1d:
91:6e:a6:65:ad:b1:bb:ff:af:05:80:26:78:79:09:8c:cd:0c:
51:f5:90:58:af:29:78:6d:06:ea:92:54:0f:98:16:14:13:80:
2b:16:25:f9:0d:24:18:a8:ed:56:ab:a2:18:0a:16:14:34:be:
0f:40:62:b3:6f:2b:0f:cc:8d:ab:9b:71:8b:5a:4e:70:69:4c:
16:d8:52:b4:c0:8d:b9:e5:6c:02:d3:7b:be:c1:39:e3:0d:ed:
fc:63:4f:99:08:13:01:0a:0d:c6:36:9b:23:48:5e:65:41:ed:
eb:0f:3e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:04:13 2026 by rpki-client