Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/oaAkI4u-q1sNX4XewPVfZpBZbiQ.roa
File: oaAkI4u-q1sNX4XewPVfZpBZbiQ.roa (raw, json)
Hash identifier: CN/AvchRlL8gZqtJDbJknMgG+JNTjA+0pvGllBDxlpY=
Subject key identifier: A1:A0:24:23:8B:BE:AB:5B:0D:5F:85:DE:C0:F5:5F:66:90:59:6E:24
Certificate issuer: /CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64
Certificate serial: 01A0B47C19C40A68540640F032F76D163793
Authority key identifier: 12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/oaAkI4u-q1sNX4XewPVfZpBZbiQ.roa
Signing time: Fri 18 Sep 2026 12:27:07 +0000
ROA not before: Fri 18 Sep 2026 12:27:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47254
IP address blocks: 185.9.148.0/22 maxlen: 22
185.9.148.0/24 maxlen: 24
185.9.149.0/24 maxlen: 24
185.9.150.0/24 maxlen: 24
185.9.151.0/24 maxlen: 24
2a02:d1c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:7c:19:c4:0a:68:54:06:40:f0:32:f7:6d:16:37:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64
Validity
Not Before: Sep 18 12:27:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1a024238bbeab5b0d5f85dec0f55f6690596e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:08:86:a7:42:a2:e0:49:f7:c5:ac:6e:68:a7:
e1:c6:79:00:b2:38:78:71:91:46:96:9e:fe:5f:28:
cb:21:8f:79:25:a0:86:1b:e5:63:e6:5a:70:02:c6:
f0:c7:0f:8c:e0:a9:fc:96:18:84:58:66:20:e1:f0:
b6:cb:89:3a:20:85:1d:46:a7:dd:0f:db:26:d7:a8:
93:82:d7:78:7e:04:15:21:7e:12:b0:15:9d:71:f1:
ca:75:67:b3:51:7e:79:9e:31:75:94:87:dd:ba:66:
f5:25:c8:52:57:57:44:39:4e:d4:01:ad:28:25:ef:
19:1a:41:c4:ef:23:7a:5b:b7:77:68:62:13:29:2c:
dc:3f:3e:95:3a:21:6c:63:b7:c3:a1:99:1f:3a:d6:
ea:33:14:32:58:85:18:53:a6:cc:52:4a:1b:7b:72:
be:2f:71:83:a7:4e:73:19:c9:38:52:38:54:1e:80:
14:a7:8b:90:7f:91:4b:48:ad:8f:5a:83:e0:8a:de:
88:08:89:4e:41:9d:b2:96:4d:a1:91:b8:b1:23:48:
c6:22:3e:d4:21:10:b8:fe:dc:de:d3:9d:c1:ae:e7:
5f:3e:42:44:9e:48:df:41:e6:9e:32:f0:20:69:ff:
06:d4:ed:5a:9b:69:cb:b3:d4:d9:3c:ac:5c:9e:64:
b9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A0:24:23:8B:BE:AB:5B:0D:5F:85:DE:C0:F5:5F:66:90:59:6E:24
X509v3 Authority Key Identifier:
keyid:12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/oaAkI4u-q1sNX4XewPVfZpBZbiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.148.0/22
IPv6:
2a02:d1c0::/29
Signature Algorithm: sha256WithRSAEncryption
36:b0:e1:82:47:73:4d:c9:52:49:0a:dc:b4:a5:7e:0e:f8:60:
64:81:c0:d5:a6:f9:2d:b0:b3:b0:ea:93:ae:59:4d:ff:59:0a:
74:01:9e:5c:06:be:b3:6c:ab:00:87:25:4f:c9:5a:f5:cd:f3:
38:28:d4:6e:7c:26:2d:f4:3b:f8:13:61:4d:ce:04:9c:82:a5:
02:f7:57:4f:ce:5f:1d:a5:b1:24:20:60:c3:39:43:1f:60:0c:
eb:0f:3a:86:e3:da:b4:eb:f1:81:7f:b1:1b:f9:81:63:ed:b2:
00:37:83:ef:c8:f7:0d:31:83:00:b3:ba:0f:59:9c:96:03:28:
17:70:1b:cb:55:0d:bc:1b:37:ca:bf:e6:38:ff:ad:25:0a:0e:
b3:c0:74:e1:13:b1:44:78:1a:71:4c:4c:f6:38:bc:36:a3:a8:
dd:1f:3e:e8:07:94:5b:3c:a8:2e:ba:47:a0:99:d9:28:27:bc:
af:bf:5f:86:70:b6:19:21:bd:0a:87:50:cd:53:4f:8d:17:27:
11:d5:08:70:b2:93:5c:57:e8:43:74:a4:a4:56:7c:bb:85:c0:
77:66:0e:f8:64:f8:65:e4:e3:d3:44:31:9d:c4:ed:74:88:9f:
e3:30:c0:93:3d:02:24:ba:c8:b3:7f:ef:7b:8e:4a:6b:61:c8:
aa:ae:8a:88
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAaC0fBnECmhUBkDwMvdtFjeTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMTMzYTY1MjNlMmVkMGEwYzlhMzZlYThhN2M2ZjBlNzJh
NWRkNjQwHhcNMjYwOTE4MTIyNzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMWEwMjQyMzhiYmVhYjViMGQ1Zjg1ZGVjMGY1NWY2NjkwNTk2ZTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswiGp0Ki4En3xaxuaKfhxnkAsjh4
cZFGlp7+XyjLIY95JaCGG+Vj5lpwAsbwxw+M4Kn8lhiEWGYg4fC2y4k6IIUdRqfd
D9sm16iTgtd4fgQVIX4SsBWdcfHKdWezUX55njF1lIfdumb1JchSV1dEOU7UAa0o
Je8ZGkHE7yN6W7d3aGITKSzcPz6VOiFsY7fDoZkfOtbqMxQyWIUYU6bMUkobe3K+
L3GDp05zGck4UjhUHoAUp4uQf5FLSK2PWoPgit6ICIlOQZ2ylk2hkbixI0jGIj7U
IRC4/tze053BrudfPkJEnkjfQeaeMvAgaf8G1O1am2nLs9TZPKxcnmS5SQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFKGgJCOLvqtbDV+F3sD1X2aQWW4kMB8GA1UdIwQY
MBaAFBITOmUj4u0KDJo26op8bw5ypd1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWhNNlpTUGk3UW9NbWpicWlueHZEbktsM1dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85MzRlYzMtYjc2YS00MGQwLThhM2Et
ODI0NzI5YWI0YjlhLzEvb2FBa0k0dS1xMXNOWDRYZXdQVmZacEJaYmlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC85MzRlYzMtYjc2YS00MGQwLThhM2EtODI0NzI5YWI0Yjlh
LzEvRWhNNlpTUGk3UW9NbWpicWlueHZEbktsM1dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuQmUMA0E
AgACMAcDBQMqAtHAMA0GCSqGSIb3DQEBCwUAA4IBAQA2sOGCR3NNyVJJCty0pX4O
+GBkgcDVpvktsLOw6pOuWU3/WQp0AZ5cBr6zbKsAhyVPyVr1zfM4KNRufCYt9Dv4
E2FNzgScgqUC91dPzl8dpbEkIGDDOUMfYAzrDzqG49q06/GBf7Eb+YFj7bIAN4Pv
yPcNMYMAs7oPWZyWAygXcBvLVQ28GzfKv+Y4/60lCg6zwHThE7FEeBpxTEz2OLw2
o6jdHz7oB5RbPKguukegmdkoJ7yvv1+GcLYZIb0Kh1DNU0+NFycR1QhwspNcV+hD
dKSkVny7hcB3Zg74ZPhl5OPTRDGdxO10iJ/jMMCTPQIkusizf+97jkprYciqroqI
-----END CERTIFICATE-----
Generated at Wed Sep 23 06:46:58 2026 by rpki-client