Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/oClPZJT6D0f4dR_qB20ROSGy3Uc.roa
File: oClPZJT6D0f4dR_qB20ROSGy3Uc.roa (raw, json)
Hash identifier: qQHC5wbtqPFNv5PYiRxDG6ZXTaD7NV+WGp7lKe4wsgs=
Subject key identifier: A0:29:4F:64:94:FA:0F:47:F8:75:1F:EA:07:6D:11:39:21:B2:DD:47
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 019C6204453C0EB0652FD9CA5C911A34937A
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/oClPZJT6D0f4dR_qB20ROSGy3Uc.roa
Signing time: Sun 15 Feb 2026 15:56:12 +0000
ROA not before: Sun 15 Feb 2026 15:56:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 91.102.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:62:04:45:3c:0e:b0:65:2f:d9:ca:5c:91:1a:34:93:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Feb 15 15:56:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0294f6494fa0f47f8751fea076d113921b2dd47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:be:86:82:a2:29:11:09:8d:6b:99:0c:9f:57:
92:c1:8a:d3:22:2b:14:1f:aa:41:e9:b5:c2:b3:6c:
ef:0c:5b:c9:b2:94:90:1c:cf:dd:49:f6:c7:08:cc:
7a:33:5a:56:4b:9b:31:b2:ba:1c:ca:c1:ed:b0:d0:
e7:46:bb:50:ff:7d:f3:d8:71:ca:4a:58:3c:de:c6:
7c:b0:e0:6d:7b:ef:f2:30:77:54:b5:2a:91:d9:13:
12:ff:f7:ef:01:f6:e3:64:5e:df:2f:e4:ad:0f:d7:
51:ec:3b:0c:39:33:a1:78:4e:55:96:39:b4:86:6e:
e7:15:7e:90:6c:e6:61:c3:c1:35:61:f1:b5:0d:8e:
23:f0:f8:ab:2a:b5:d1:14:17:21:fc:a3:c2:9c:ca:
09:2a:35:64:a5:61:2b:69:23:08:9e:18:99:28:7b:
09:1b:30:4f:53:cb:aa:cc:fc:2c:da:fd:a7:bb:34:
77:04:6f:96:c6:be:a9:83:03:20:15:e0:ae:ea:0e:
fd:8c:20:23:88:01:ca:60:f4:fc:b5:0e:36:34:7c:
6f:12:f2:76:d8:94:07:3b:36:5e:db:d5:88:c9:46:
df:8c:19:8a:1f:bf:42:51:1b:7d:da:7a:ad:b8:b6:
9a:0d:7b:1b:23:08:18:be:94:e7:fe:a3:0c:4a:b1:
a2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:29:4F:64:94:FA:0F:47:F8:75:1F:EA:07:6D:11:39:21:B2:DD:47
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/oClPZJT6D0f4dR_qB20ROSGy3Uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.166.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:48:db:e0:ed:a3:4f:7b:46:5b:60:d6:be:d6:4e:a6:79:50:
64:e3:13:75:f4:79:b2:cf:72:f4:fb:d3:ba:57:8a:2e:c8:90:
cd:e0:3e:47:79:f3:15:27:5e:e6:91:57:cf:fa:05:77:f2:0d:
53:e7:d2:62:91:86:8a:82:05:09:cd:3b:be:df:53:0a:9e:23:
2d:e1:f3:5f:fc:4d:62:8d:67:27:58:6c:bf:c8:0a:8f:2d:7e:
a2:c0:9b:86:e1:21:88:84:95:f5:c7:4e:c0:ab:c4:17:c3:b4:
0c:09:ff:3a:ab:a3:f9:51:39:a6:78:26:98:66:ec:49:f5:b0:
2b:0d:30:40:15:fb:63:b3:88:71:a5:0b:dd:42:a7:ec:6a:00:
d2:59:ac:5a:00:be:d9:4e:bc:ab:58:a6:d4:1e:c3:a1:02:00:
e4:4c:59:41:81:9e:d2:fc:3b:3b:3f:86:79:c6:dd:93:14:98:
5d:1a:28:d0:12:66:e3:2e:c8:46:6e:af:b9:3c:72:78:f6:b6:
d2:bb:56:41:48:e2:03:99:a6:40:df:92:69:94:13:92:2b:7f:
1a:06:cd:6f:c2:91:25:ea:ca:4c:c0:26:d0:b8:2a:12:a4:fe:
2e:b3:0b:7a:5b:af:7f:8d:b7:13:d8:8b:8b:06:00:ad:79:47:
40:1f:4e:0e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZxiBEU8DrBlL9nKXJEaNJN6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YzhiNDI3YzMxMzU5OGE5MmU4ZDhlYzYwZTI5NTBkYTM5
ZmMyYzkwHhcNMjYwMjE1MTU1NjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDI5NGY2NDk0ZmEwZjQ3Zjg3NTFmZWEwNzZkMTEzOTIxYjJkZDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL6GgqIpEQmNa5kMn1eSwYrTIisU
H6pB6bXCs2zvDFvJspSQHM/dSfbHCMx6M1pWS5sxsrocysHtsNDnRrtQ/33z2HHK
Slg83sZ8sOBte+/yMHdUtSqR2RMS//fvAfbjZF7fL+StD9dR7DsMOTOheE5Vljm0
hm7nFX6QbOZhw8E1YfG1DY4j8PirKrXRFBch/KPCnMoJKjVkpWEraSMInhiZKHsJ
GzBPU8uqzPws2v2nuzR3BG+Wxr6pgwMgFeCu6g79jCAjiAHKYPT8tQ42NHxvEvJ2
2JQHOzZe29WIyUbfjBmKH79CURt92nqtuLaaDXsbIwgYvpTn/qMMSrGitQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKApT2SU+g9H+HUf6gdtETkhst1HMB8GA1UdIwQY
MBaAFCfItCfDE1mKkujY7GDilQ2jn8LJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzct
MWM2ZWU0NGUxMWFkLzEvb0NsUFpKVDZEMGY0ZFJfcUIyMFJPU0d5M1VjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzctMWM2ZWU0NGUxMWFk
LzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW2amMA0G
CSqGSIb3DQEBCwUAA4IBAQAdSNvg7aNPe0ZbYNa+1k6meVBk4xN19Hmyz3L0+9O6
V4ouyJDN4D5HefMVJ17mkVfP+gV38g1T59JikYaKggUJzTu+31MKniMt4fNf/E1i
jWcnWGy/yAqPLX6iwJuG4SGIhJX1x07Aq8QXw7QMCf86q6P5UTmmeCaYZuxJ9bAr
DTBAFftjs4hxpQvdQqfsagDSWaxaAL7ZTryrWKbUHsOhAgDkTFlBgZ7S/Ds7P4Z5
xt2TFJhdGijQEmbjLshGbq+5PHJ49rbSu1ZBSOIDmaZA35JplBOSK38aBs1vwpEl
6spMwCbQuCoSpP4uswt6W69/jbcT2IuLBgCteUdAH04O
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:06:54 2026 by rpki-client