Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/a0OAcZfUpJ_at-NAiRWnugtXHZs.roa
File: a0OAcZfUpJ_at-NAiRWnugtXHZs.roa (raw, json)
Hash identifier: CX3pL+do0k62/x9rzFqYTy+gZPu9+b2sUZEH679CN44=
Subject key identifier: 6B:43:80:71:97:D4:A4:9F:DA:B7:E3:40:89:15:A7:BA:0B:57:1D:9B
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 01A09C47B0764A7E979BC9B3849726FCB8A6
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/a0OAcZfUpJ_at-NAiRWnugtXHZs.roa
Signing time: Sun 13 Sep 2026 19:38:58 +0000
ROA not before: Sun 13 Sep 2026 19:38:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56381
IP address blocks: 141.98.136.0/24 maxlen: 24
141.98.139.0/24 maxlen: 24
2a09:11c0::/48 maxlen: 48
2a09:11c0:1000::/36 maxlen: 36
2a09:11c0:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9c:47:b0:76:4a:7e:97:9b:c9:b3:84:97:26:fc:b8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Sep 13 19:38:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b43807197d4a49fdab7e3408915a7ba0b571d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:02:55:e3:26:5c:08:64:53:36:42:10:fb:e1:
4c:e8:a2:c3:8a:ba:ef:ba:f2:ab:45:cc:5e:f1:92:
e9:76:e3:26:ac:a5:e1:b8:d5:4d:5d:57:4d:a8:48:
c7:31:2a:43:ec:fb:d3:8e:28:26:25:83:d0:10:5a:
e2:62:f9:7e:bf:05:36:ce:1d:7b:10:65:87:b8:16:
2c:78:dc:a3:ac:e4:4f:ef:85:aa:9c:d2:80:d4:54:
f1:8c:f4:54:a6:1e:bc:cd:d5:37:52:4c:42:b5:ec:
a1:06:fb:25:54:6a:c5:5c:33:67:b9:f2:e6:65:88:
66:e5:a2:aa:f8:39:48:db:15:9a:4c:77:8e:ad:45:
32:a5:cc:3e:2a:1c:75:2b:3f:c9:ea:ce:fb:fa:71:
17:c8:22:fe:10:c8:d1:5d:52:cb:28:56:7b:2b:3e:
db:48:df:6a:b9:45:b7:28:af:55:ac:19:95:f7:bd:
26:08:eb:53:ec:62:91:79:9d:0e:ca:7e:1a:d4:cb:
d4:81:cc:85:ea:ef:90:0d:8c:7c:3b:06:b3:d0:94:
be:3a:c6:e3:9b:f0:ce:fe:19:f7:ca:58:7a:ab:53:
c1:4c:97:62:4a:ca:4c:ba:16:eb:7b:c8:86:b5:14:
54:09:db:92:54:d6:e1:7d:3d:89:4c:9f:78:4a:ec:
3f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:43:80:71:97:D4:A4:9F:DA:B7:E3:40:89:15:A7:BA:0B:57:1D:9B
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/a0OAcZfUpJ_at-NAiRWnugtXHZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.136.0/24
141.98.139.0/24
IPv6:
2a09:11c0::/48
2a09:11c0:1000::-2a09:11c0:2fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2d:8b:d2:60:b6:f0:11:a6:1b:69:69:08:8b:de:88:3a:6c:7e:
1d:fc:5a:fa:f9:09:cd:b5:59:16:9c:12:c6:59:ee:a8:37:56:
ff:c7:56:06:a0:23:7c:06:9b:c7:bf:58:93:00:47:30:d7:ea:
41:95:ac:f5:ab:64:af:1c:e4:b7:5c:c3:d2:bc:5b:87:83:b1:
31:a4:49:a9:12:3c:ca:37:8f:12:f3:b9:51:20:12:6a:0e:7a:
b7:ea:61:bf:3d:a1:4b:a0:06:b7:aa:a7:83:0d:3d:0c:64:25:
51:c5:a0:72:49:68:91:be:10:79:c5:54:62:74:6a:9a:72:88:
38:b1:f3:20:04:aa:51:1d:ed:b9:77:ec:15:3e:79:9a:d8:92:
d2:9d:5a:b9:90:ae:b1:65:1a:81:a3:2d:0d:7b:ef:72:26:92:
3c:9f:3b:19:a7:75:07:b9:ad:ca:99:11:aa:5e:a9:76:4b:a1:
ab:43:4b:72:a4:b9:ff:7b:4a:fd:92:9e:37:cf:ad:6a:a4:03:
13:5b:aa:d7:98:83:e1:40:aa:da:47:f7:2f:11:34:90:e2:2e:
9e:f8:97:69:f6:3a:8e:3f:02:e0:3a:d2:96:8b:0b:60:88:84:
7f:e2:86:b7:31:b9:6a:d5:76:45:c1:5e:7c:56:08:f4:09:84:
89:5c:ff:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:35:09 2026 by rpki-client