Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/bKOziSP_XttR6KXVx43_hKvo5UM.roa
File: bKOziSP_XttR6KXVx43_hKvo5UM.roa (raw, json)
Hash identifier: 4QTv2mKHqsuXG6X8b61ridnXdKspO+S1hN2ZP7mulZY=
Subject key identifier: 6C:A3:B3:89:23:FF:5E:DB:51:E8:A5:D5:C7:8D:FF:84:AB:E8:E5:43
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01A0C8E33072CCBEC31F148C6D4574C99CEC
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/bKOziSP_XttR6KXVx43_hKvo5UM.roa
Signing time: Tue 22 Sep 2026 11:32:07 +0000
ROA not before: Tue 22 Sep 2026 11:32:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138415
IP address blocks: 77.246.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:e3:30:72:cc:be:c3:1f:14:8c:6d:45:74:c9:9c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Sep 22 11:32:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ca3b38923ff5edb51e8a5d5c78dff84abe8e543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:80:84:53:43:6e:7f:bf:6c:c5:12:75:01:3b:
23:41:36:f4:91:aa:5d:ec:b6:ce:79:3f:8b:a6:d6:
6d:e0:ba:d2:e5:87:80:ee:f4:86:ab:b0:61:f7:f7:
75:cd:3e:3f:b0:ca:0d:df:74:f4:51:e4:fa:ff:f6:
dd:8d:4f:e9:35:75:a2:fe:29:01:d0:26:9e:9a:ab:
8b:64:dc:f3:f5:74:04:a9:10:cd:55:ad:27:a2:89:
67:2f:3d:ea:d0:22:94:6f:62:1b:67:20:92:90:4c:
42:42:4f:dd:c0:6a:dd:40:46:b1:2a:d0:51:5e:69:
d9:a3:e0:6f:d9:31:77:c6:1b:3d:c7:e1:df:4d:be:
26:3e:a4:98:ad:5f:bc:ff:f5:52:cd:6e:ab:27:18:
91:bb:6e:e2:2d:09:24:b9:da:86:e2:76:f3:fd:d8:
d1:7a:84:01:a3:b9:74:41:8d:54:8c:7b:a6:52:95:
da:c0:fa:9b:07:59:3d:56:84:7e:ff:12:5d:45:3c:
a2:70:49:76:d7:c4:82:a4:2a:ed:9d:54:b3:cb:a1:
bd:7f:fd:7d:b0:70:61:00:af:5e:c2:eb:9a:28:f0:
ab:b5:27:f1:c0:df:6a:ba:db:0d:71:d3:7c:97:8a:
e0:af:06:de:6c:9a:15:e3:94:77:7c:6b:e4:20:68:
8b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A3:B3:89:23:FF:5E:DB:51:E8:A5:D5:C7:8D:FF:84:AB:E8:E5:43
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/bKOziSP_XttR6KXVx43_hKvo5UM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.223.0/24
Signature Algorithm: sha256WithRSAEncryption
13:da:59:3b:55:e9:44:48:4b:c3:90:d4:0c:71:3a:5d:73:17:
64:9f:73:47:f6:6e:16:96:03:9b:e4:c5:a5:31:d6:c1:09:da:
b6:97:33:12:b5:86:7f:b3:77:76:27:95:55:7c:83:37:d2:69:
b8:7e:d7:8a:ba:f3:b3:f8:d6:54:0c:c3:b1:38:e4:b6:ba:6d:
20:0d:a3:03:ea:65:b8:3a:2c:c1:41:0f:a2:bf:87:ae:88:bd:
81:15:99:85:1e:da:d0:5f:b5:dd:af:e3:83:1f:fc:ae:05:a4:
bc:15:bc:ae:60:87:74:46:15:bf:f2:a7:ce:d8:68:46:fb:13:
3f:68:d3:00:19:ae:87:79:27:b1:0f:c5:98:25:7e:dc:63:96:
96:3d:b9:a6:c5:8b:20:59:f5:c7:18:71:3a:d1:5f:75:40:b7:
62:7a:b5:7a:f9:a9:b9:77:7e:a5:2b:60:25:ad:55:a2:6f:5e:
2f:47:f7:56:19:95:c1:c6:d2:1a:aa:c8:45:3e:a6:96:bf:41:
d8:c0:11:83:8f:d8:7f:40:f4:d3:d2:07:69:19:90:7d:70:23:
a8:0f:09:69:3e:58:5e:39:9f:dd:5d:dc:2c:ae:51:79:1f:f6:
7d:4a:47:9f:a7:71:e1:2e:4d:76:35:b6:44:c3:0f:eb:51:6f:
a5:ca:fe:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:35:22 2026 by rpki-client