Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/Oo01x8pERgWGLUwO9m5xfExXg9g.roa
File: Oo01x8pERgWGLUwO9m5xfExXg9g.roa (raw, json)
Hash identifier: iSqQFbuWHpKMVbwARx0x5sxvGhMHq7DllvKbl8K+zMo=
Subject key identifier: 3A:8D:35:C7:CA:44:46:05:86:2D:4C:0E:F6:6E:71:7C:4C:57:83:D8
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 01A05E58B4AD4A75F410FA956E0226E0102E
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/Oo01x8pERgWGLUwO9m5xfExXg9g.roa
Signing time: Tue 01 Sep 2026 19:01:06 +0000
ROA not before: Tue 01 Sep 2026 19:01:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215355
IP address blocks: 91.103.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5e:58:b4:ad:4a:75:f4:10:fa:95:6e:02:26:e0:10:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Sep 1 19:01:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a8d35c7ca444605862d4c0ef66e717c4c5783d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:04:3c:84:4b:85:a3:3b:2f:05:f6:86:a8:a0:
69:59:5c:09:bd:e1:5b:bb:14:8a:84:5d:85:cd:7f:
c2:a8:cc:a1:30:85:5c:d0:d0:1a:da:30:e7:c4:88:
45:cf:ba:76:61:37:d1:51:8e:f3:a1:59:50:ea:7f:
51:cb:ad:04:6d:e4:3d:f3:6a:b7:06:b0:bc:c5:75:
c4:dc:aa:b9:8c:0c:20:79:0d:96:f9:ae:71:cf:97:
f2:a7:93:c4:e1:ed:eb:6e:fd:dc:bd:ca:d4:1b:be:
73:d0:8c:13:ff:d1:77:6b:66:05:37:af:7f:8a:23:
61:f7:a5:14:eb:9a:de:a9:30:19:fd:06:a5:b0:00:
e6:f4:8e:a8:37:66:41:ff:4e:6b:21:3f:66:9a:1c:
48:8f:f6:2b:45:03:21:91:03:de:f6:54:94:d7:73:
5f:b4:29:9f:e6:25:7c:86:03:0b:50:67:ff:44:42:
4b:cc:36:42:b5:0c:01:65:90:d2:dc:75:1b:95:a5:
e7:54:a7:b5:88:83:72:2c:a7:8f:65:c0:00:22:23:
26:d2:0f:35:0a:58:1b:56:1b:f3:7b:3d:5b:c6:33:
bd:c0:7b:2e:81:7e:e3:d5:e2:04:3f:22:7c:1d:25:
60:cf:aa:31:0f:88:ba:bb:d0:9f:fc:5a:e1:97:72:
7b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8D:35:C7:CA:44:46:05:86:2D:4C:0E:F6:6E:71:7C:4C:57:83:D8
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/Oo01x8pERgWGLUwO9m5xfExXg9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.120.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:c1:95:51:60:4f:3e:11:0a:09:86:f0:cd:37:7d:b9:f9:da:
44:db:46:df:b8:fc:6c:d9:e2:fb:4e:85:87:de:34:0b:01:90:
35:f9:c7:ba:b3:52:f0:7c:e0:64:f1:c3:66:01:b3:82:e8:4a:
86:d6:62:4c:4d:b0:02:f4:84:0e:8c:4b:66:7a:80:47:ad:0c:
49:92:c5:6a:f4:3c:76:ae:38:fd:31:bd:36:19:9a:b6:6d:15:
02:71:c8:06:9f:b9:03:5d:b9:59:a1:8d:b2:4f:b4:64:ab:e6:
83:49:01:2a:f1:d5:a9:b8:30:71:3e:4b:22:e9:f5:93:38:57:
72:e5:ff:3b:e8:9e:4c:4a:b3:94:fd:8b:be:f5:d8:4b:3a:aa:
41:fc:d3:0a:36:5b:01:c3:8e:85:14:b9:ca:d2:17:a1:0a:76:
b9:07:9e:33:81:2e:f5:d0:db:66:f6:d4:d8:9d:85:b8:08:09:
82:04:f0:e2:f9:16:3d:68:61:b2:ef:52:96:f5:88:78:70:94:
d7:05:45:25:b1:06:38:e6:6d:a7:5f:66:15:70:ea:e6:c6:df:
85:53:d6:23:80:59:74:48:2e:da:84:d5:b9:28:a9:0c:c7:41:
33:94:b6:f8:fa:9e:2a:8d:8e:66:5f:bc:f9:bd:58:83:bd:71:
1c:41:bf:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:49:16 2026 by rpki-client