Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/oua9Kp44reoXheBwYMVIn0LsMK8.roa
File: oua9Kp44reoXheBwYMVIn0LsMK8.roa (raw, json)
Hash identifier: SAiOCmUsajRvlJSQ1si4F2WehUWy/HXpu9iNYf9XYuQ=
Subject key identifier: A2:E6:BD:2A:9E:38:AD:EA:17:85:E0:70:60:C5:48:9F:42:EC:30:AF
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 01A0A978D8AC525E7C1582BDBD903B7BC87C
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/oua9Kp44reoXheBwYMVIn0LsMK8.roa
Signing time: Wed 16 Sep 2026 09:07:44 +0000
ROA not before: Wed 16 Sep 2026 09:07:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219100
IP address blocks: 185.251.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:78:d8:ac:52:5e:7c:15:82:bd:bd:90:3b:7b:c8:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Sep 16 09:07:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2e6bd2a9e38adea1785e07060c5489f42ec30af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:65:5b:4b:e4:37:32:0b:ed:b3:93:28:3e:
d7:69:d8:d9:60:54:39:fe:96:30:cc:a6:b7:b1:45:
fd:66:31:da:67:c0:c2:7f:c5:74:bb:0a:5d:4d:e7:
00:0e:dc:af:e7:4c:e9:48:c6:7d:0a:ca:75:81:20:
f2:c3:50:3d:b7:41:57:52:d0:70:9b:af:dc:c4:bf:
18:e3:d5:95:28:c3:90:22:d7:47:5b:ae:c3:8b:ac:
7d:9f:61:31:28:1e:14:c3:2e:22:5d:e7:ad:37:25:
4c:22:b6:25:b5:a9:dc:1c:0f:9e:ee:12:cc:52:60:
0a:f7:06:1a:84:b0:54:e5:2d:2b:aa:6c:97:56:0d:
b4:28:96:20:84:64:59:37:ce:96:4d:5c:61:89:3b:
00:73:7c:86:e8:1a:1e:fc:58:66:b2:08:9e:93:c5:
7f:69:27:91:97:d6:97:99:37:c8:01:28:5f:a7:21:
e5:6d:ff:d5:b8:0d:05:d3:e1:a4:49:20:da:04:05:
3d:18:6b:61:fe:22:a7:bb:2b:8f:9d:ef:5b:0f:d0:
c6:83:f7:0f:0f:0b:88:27:81:b5:50:11:8f:0a:93:
c4:d0:da:dc:20:8d:a6:f6:ba:7b:38:77:ae:ec:87:
2e:5d:75:01:c3:93:d6:b3:64:35:93:38:e3:d9:90:
f7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E6:BD:2A:9E:38:AD:EA:17:85:E0:70:60:C5:48:9F:42:EC:30:AF
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/oua9Kp44reoXheBwYMVIn0LsMK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.83.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:85:08:2e:f0:d2:c3:4d:ad:9a:c4:73:60:79:91:76:e2:11:
32:1b:a8:76:c8:16:e6:16:fc:14:88:45:dc:d9:35:4c:06:d7:
42:42:3b:94:26:ca:34:ae:06:31:29:9b:36:5f:19:78:28:b2:
a1:3a:28:25:cd:0d:a0:5f:67:b2:b4:de:cb:1e:d3:e1:6d:42:
ea:8d:67:a3:55:6c:57:17:58:c0:0a:b6:de:c4:29:e3:8f:0b:
d3:7f:ff:0e:f8:36:84:c0:28:8d:6c:7e:6d:4a:17:bb:de:28:
e0:c3:52:71:5d:55:a6:91:ff:45:71:ce:f9:0d:b0:40:e2:96:
62:26:90:57:42:ac:8a:ec:3b:cf:49:dd:2e:30:44:e7:cf:5d:
d8:25:9d:a6:4e:2d:f4:48:4d:74:47:1c:d5:c8:ae:e9:c8:92:
4b:5e:f3:b6:ac:f3:ef:62:0e:2b:a5:bc:1e:03:d5:9f:66:36:
fa:7d:e0:3c:1b:4d:4a:2a:ce:01:d8:8c:f6:50:20:c4:5e:f0:
3e:8b:81:7a:1f:c1:74:81:de:47:3c:73:de:1d:34:59:6b:37:
41:a4:87:7f:32:87:9f:6c:f2:8f:82:7a:fa:aa:9f:63:a3:98:
42:be:e1:46:8a:74:5f:cd:03:6d:f2:f8:ab:9f:d9:5c:5b:44:
1f:9e:cc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:51:23 2026 by rpki-client