Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/oks3_RVrF800lHTQh6RbiRwmHFg.roa
File: oks3_RVrF800lHTQh6RbiRwmHFg.roa (raw, json)
Hash identifier: Jmo+Qi60IgNCJtKQXXC/TcLtu3ZrVLhRiKuEi66S2pg=
Subject key identifier: A2:4B:37:FD:15:6B:17:CD:34:94:74:D0:87:A4:5B:89:1C:26:1C:58
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A0B359E4E19E53C8D26F41B87EA51B4982
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/oks3_RVrF800lHTQh6RbiRwmHFg.roa
Signing time: Fri 18 Sep 2026 07:10:07 +0000
ROA not before: Fri 18 Sep 2026 07:10:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51396
IP address blocks: 45.128.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:59:e4:e1:9e:53:c8:d2:6f:41:b8:7e:a5:1b:49:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 18 07:10:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a24b37fd156b17cd349474d087a45b891c261c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e9:a9:6d:9f:cb:d3:58:6f:ad:f7:70:d9:5f:
04:a9:58:70:95:76:8c:bc:30:95:5e:64:a9:b3:19:
31:88:8e:1f:70:22:ac:46:df:31:b9:17:0b:94:23:
70:1d:58:e2:d0:09:19:91:57:fb:96:e0:2a:03:a8:
3f:e4:59:b4:bb:0d:87:01:98:8e:28:2b:d0:f8:10:
6d:b5:31:78:4c:95:ff:9a:73:b7:f4:1c:a9:0c:18:
e4:21:e9:84:c6:1a:eb:b2:fb:40:6f:7c:b7:c0:14:
56:87:46:b9:5a:27:4d:06:f9:6a:67:be:f0:b9:b3:
ee:b4:d7:39:20:b9:38:90:30:35:24:dd:bb:3f:c8:
22:bf:fc:68:bf:b4:eb:6d:f5:a0:63:dc:be:7f:cb:
52:6f:98:4c:d9:b1:4d:8a:63:3b:19:da:f3:72:ef:
8b:d9:8f:e2:e5:64:8f:fd:65:5d:f1:b8:1b:cc:df:
34:17:9b:51:a3:3d:4e:8d:e3:5d:5d:8b:c7:b3:b0:
46:f5:9a:d5:94:eb:7c:f6:4e:f6:2a:ae:ea:3b:b0:
76:dc:02:9e:29:91:64:e3:d7:73:c3:af:da:a8:08:
ac:5c:3a:fd:76:3d:3e:26:fa:2c:63:36:ff:b4:a6:
6e:1c:40:24:ed:a7:64:d4:d7:73:b5:d8:cc:92:d3:
44:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4B:37:FD:15:6B:17:CD:34:94:74:D0:87:A4:5B:89:1C:26:1C:58
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/oks3_RVrF800lHTQh6RbiRwmHFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.77.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:cf:f1:19:ff:90:e9:6d:df:af:c6:ae:28:56:3c:77:9f:e4:
ae:6c:a9:30:c1:75:6f:43:cd:e5:ee:a1:4a:c3:fc:77:61:c6:
a2:84:2c:c6:86:bf:ca:ee:9d:a1:a7:72:78:40:8b:3e:a2:5c:
58:19:22:d4:ec:cc:1c:32:ac:5a:f4:2e:d6:a8:b4:99:83:1d:
df:3c:4d:60:64:9b:e1:d5:b3:3b:8f:a1:41:d9:52:7d:b2:00:
fe:13:12:50:3a:f6:10:19:49:a4:90:52:da:1a:c8:f9:d8:9f:
bc:e6:6b:3d:8e:3e:47:4b:8f:d6:e3:2d:5c:9c:0e:b0:91:41:
76:c7:e5:28:d6:f4:61:e5:34:af:b7:39:5b:cc:0e:45:4c:35:
f9:ef:fb:1a:ea:da:1e:71:57:a1:5a:0a:f9:63:28:b0:27:73:
9b:d1:e3:fd:70:8b:c8:58:13:ca:17:a0:46:a5:11:c3:99:16:
65:cd:2c:aa:55:9b:e3:1b:c9:7a:db:47:55:12:cb:c6:d2:00:
45:09:72:8b:6b:56:de:ff:30:88:4c:fe:5b:cc:8f:3a:77:23:
ee:41:93:13:03:6f:31:c7:7a:6f:af:62:f7:a6:6f:a8:d1:fd:
ef:85:73:8c:77:31:a3:f3:8a:ee:d6:6c:4b:91:7c:a1:a0:56:
19:1e:31:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:23:14 2026 by rpki-client