Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/o4PwLG_moTiY139IzZuL6upeTkA.roa
File: o4PwLG_moTiY139IzZuL6upeTkA.roa (raw, json)
Hash identifier: ZfhKwHM96PoMcD115Xy9gRe1flstjY89l+eR5aAx9zE=
Subject key identifier: A3:83:F0:2C:6F:E6:A1:38:98:D7:7F:48:CD:9B:8B:EA:EA:5E:4E:40
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 019D441BFBB0362EBFFC9B08589A8554B64A
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/o4PwLG_moTiY139IzZuL6upeTkA.roa
Signing time: Tue 31 Mar 2026 13:36:17 +0000
ROA not before: Tue 31 Mar 2026 13:36:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199651
IP address blocks: 212.22.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:44:1b:fb:b0:36:2e:bf:fc:9b:08:58:9a:85:54:b6:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Mar 31 13:36:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a383f02c6fe6a13898d77f48cd9b8beaea5e4e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b7:3d:33:36:b6:bc:4b:8b:58:6b:28:fb:46:
97:63:c0:50:48:e8:60:d9:b6:f4:8d:45:00:57:84:
df:dc:6a:07:bb:2d:36:99:2a:76:2a:ea:02:ad:40:
c9:7d:79:d4:5f:a0:aa:c7:67:4a:ed:2e:28:bb:7c:
89:3b:c0:7e:b7:00:1a:3e:61:10:9f:c0:fa:9c:70:
1f:0b:21:d9:91:57:97:45:36:fe:7e:92:fb:50:3f:
b3:86:0b:2d:61:c7:53:b1:91:f8:13:d5:72:5a:14:
40:51:98:0b:7c:ed:eb:55:02:4f:5c:0c:b7:67:30:
67:70:29:01:f9:76:ba:57:0a:61:2f:20:d3:aa:a6:
e9:44:c2:a6:26:a8:5e:96:f8:77:14:bb:96:ee:f0:
a2:20:f2:13:81:04:e4:e5:0d:f8:fc:8a:d8:ac:bb:
75:10:8a:61:e3:4c:2e:cd:37:e3:5f:80:0c:5c:28:
ce:cd:95:05:76:6d:fb:01:0d:4b:a0:d1:57:41:13:
58:7e:da:25:0b:47:09:d8:99:59:69:bc:7e:a4:f5:
a4:26:bc:2e:60:d4:b6:f6:3a:d0:4e:ef:47:1d:a5:
97:47:35:82:3d:ac:3d:e0:2e:ff:36:ae:03:ff:6d:
d6:60:4a:a5:19:58:f8:8a:67:fd:02:ea:f6:79:ad:
ce:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:83:F0:2C:6F:E6:A1:38:98:D7:7F:48:CD:9B:8B:EA:EA:5E:4E:40
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/o4PwLG_moTiY139IzZuL6upeTkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.22.80.0/24
Signature Algorithm: sha256WithRSAEncryption
16:55:dd:2c:a9:a4:43:c2:df:09:00:17:8e:55:d9:69:1d:19:
9b:cf:c5:59:33:34:b0:b2:f5:a9:ef:f8:e6:8f:dc:69:eb:30:
15:6a:d7:ca:97:92:b4:4f:80:80:29:f2:f0:fd:2e:05:e6:4c:
ae:f3:ea:67:70:32:55:95:fb:c2:f4:40:c3:81:11:e8:56:b9:
3c:50:c6:ac:1f:32:f2:d0:5b:89:c9:97:8a:d0:5f:76:df:b2:
07:40:a1:69:08:08:fb:13:39:39:e2:04:4b:76:2f:da:2f:3f:
02:74:e9:e7:83:7d:7d:72:23:b7:33:95:4d:dc:1d:59:63:ac:
1a:3c:a5:15:eb:a0:d6:33:e8:ca:50:3a:c5:4b:68:9a:29:e7:
8c:9b:72:be:05:73:6d:79:58:2c:3f:c7:e6:cb:02:d1:2e:88:
63:d9:4f:e3:b7:5e:5f:33:82:14:95:fe:d1:6a:b1:a8:7d:e7:
1f:ac:36:00:fa:73:71:8d:f2:90:5a:39:6e:55:94:d9:3e:f4:
da:13:56:9e:73:97:7a:9e:71:bb:fb:bf:66:f1:3c:ab:b7:36:
7a:c1:d6:17:0f:9a:c7:f7:f3:6e:05:cd:ba:1a:97:ae:d6:2f:
c1:87:2b:e7:6d:74:dc:f2:23:2a:ed:82:cb:6c:67:7d:d2:e3:
52:86:67:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:57:45 2026 by rpki-client