Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/ot2MPHy_GeaUM9wSJOhNeqX_r1E.roa
File: ot2MPHy_GeaUM9wSJOhNeqX_r1E.roa (raw, json)
Hash identifier: 0UBBGz5BJKAD5JttzPp2bQOm6I+FL3ciNri0MZme80k=
Subject key identifier: A2:DD:8C:3C:7C:BF:19:E6:94:33:DC:12:24:E8:4D:7A:A5:FF:AF:51
Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3
Certificate serial: 01A0AF27480B99335ED2368692A4579A545F
Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/ot2MPHy_GeaUM9wSJOhNeqX_r1E.roa
Signing time: Thu 17 Sep 2026 11:36:22 +0000
ROA not before: Thu 17 Sep 2026 11:36:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 79.110.4.0/22 maxlen: 22
94.231.230.0/24 maxlen: 24
94.231.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:27:48:0b:99:33:5e:d2:36:86:92:a4:57:9a:54:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3
Validity
Not Before: Sep 17 11:36:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2dd8c3c7cbf19e69433dc1224e84d7aa5ffaf51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:df:69:11:4a:c6:b4:4d:40:ac:89:5c:03:94:
64:7d:cc:5f:a5:14:d2:87:d4:30:5c:9f:c4:ae:2f:
93:49:9d:77:9c:c7:b5:a9:41:de:39:bb:f5:cd:4f:
05:bb:b1:68:f3:9d:7f:56:37:43:c7:cd:2f:d1:bb:
01:67:60:58:5c:5f:e6:4e:da:9b:ae:b1:0e:eb:1d:
ac:cb:fd:f0:45:b2:25:30:b6:f6:06:9e:30:46:fc:
6b:cf:68:2a:48:46:63:54:1a:63:bf:89:2c:d8:f1:
64:63:5d:07:0d:a4:51:1b:4f:8b:51:46:ca:c7:5e:
2c:06:f6:98:5c:a6:90:c9:de:6a:03:50:b0:cd:86:
0e:1c:9b:d9:9d:33:ef:6e:23:c9:5b:8d:1e:fd:10:
d4:9c:1d:46:b2:c7:24:ae:4a:cf:64:c4:54:ab:29:
75:c9:83:ba:78:22:98:6b:c5:d5:55:f1:8e:c8:9f:
59:63:71:29:78:9a:ae:99:f5:3f:a9:5f:b0:7e:ba:
fd:42:ce:3c:0a:60:ff:2e:47:eb:74:19:31:83:cd:
34:59:01:e4:33:35:b3:f0:40:1b:05:63:38:b0:78:
18:a6:5d:7e:bf:e0:c4:29:1e:88:6a:ff:81:21:6c:
1a:56:87:20:3f:17:00:7d:c7:af:b4:ae:85:b9:64:
5b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DD:8C:3C:7C:BF:19:E6:94:33:DC:12:24:E8:4D:7A:A5:FF:AF:51
X509v3 Authority Key Identifier:
keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/ot2MPHy_GeaUM9wSJOhNeqX_r1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.4.0/22
94.231.230.0/24
94.231.232.0/21
Signature Algorithm: sha256WithRSAEncryption
4a:e1:58:01:c1:8a:92:e4:9c:7d:38:9c:79:81:9e:8e:23:8a:
77:0f:68:88:2e:92:1b:d1:86:e4:5e:e0:4a:ce:b4:6f:92:9c:
39:e7:dd:ff:b3:86:eb:06:db:91:a1:fc:12:39:ea:b4:99:89:
d0:a1:6e:e1:7e:27:1a:20:9d:e4:14:f1:d2:a9:af:f8:14:22:
8e:a1:19:9b:10:85:fd:00:8d:26:69:61:1e:6d:24:2d:87:64:
08:84:69:7e:4c:33:96:c9:f9:b5:8d:9a:6d:77:8b:fc:07:db:
42:8f:66:01:88:05:7d:c5:d1:e8:9b:d2:49:34:2c:a1:66:88:
2d:c1:05:2d:cf:9b:82:07:06:5e:36:40:dd:85:14:c7:de:d2:
d4:22:6a:cd:98:76:60:78:2e:f6:76:5a:fa:07:2c:1a:cd:bd:
19:aa:17:da:d9:b4:c8:42:6e:8e:83:3e:bd:e7:22:9a:59:35:
d4:62:5a:a6:8f:9e:c5:ae:2c:56:3a:79:4f:fc:d7:c4:09:07:
50:13:d1:c4:9b:ee:bc:6a:b8:53:85:f9:b6:ac:d4:d6:37:34:
ba:40:55:c1:1f:25:fb:77:e0:4f:6b:8a:e8:71:9e:d8:26:7b:
97:98:0f:3d:81:42:08:d5:1e:9c:9c:15:26:d2:cf:c9:e2:41:
50:97:fa:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:45:58 2026 by rpki-client