Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/o2ujZ5WYldu5AZ-vxsOFgZG5-2g.roa
File: o2ujZ5WYldu5AZ-vxsOFgZG5-2g.roa (raw, json)
Hash identifier: WLtxFHhgeLjy2SQKVLToiGcZPrDlIVzRMO9KiBUqjsc=
Subject key identifier: A3:6B:A3:67:95:98:95:DB:B9:01:9F:AF:C6:C3:85:81:91:B9:FB:68
Certificate issuer: /CN=79d437584abdb48213630dcaa5f00c9d2c3cc179
Certificate serial: 019B7F807FA4BE04100BADF4651412AD2E20
Authority key identifier: 79:D4:37:58:4A:BD:B4:82:13:63:0D:CA:A5:F0:0C:9D:2C:3C:C1:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edQ3WEq9tIITYw3KpfAMnSw8wXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/o2ujZ5WYldu5AZ-vxsOFgZG5-2g.roa
Signing time: Fri 02 Jan 2026 16:18:06 +0000
ROA not before: Fri 02 Jan 2026 16:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203183
IP address blocks: 144.2.160.0/22 maxlen: 24
185.143.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/edQ3WEq9tIITYw3KpfAMnSw8wXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:80:7f:a4:be:04:10:0b:ad:f4:65:14:12:ad:2e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d437584abdb48213630dcaa5f00c9d2c3cc179
Validity
Not Before: Jan 2 16:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a36ba367959895dbb9019fafc6c3858191b9fb68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8b:1a:43:3b:4d:d7:a7:84:e0:05:43:01:b6:
74:2e:45:da:7e:2d:2e:87:d0:d8:bc:eb:11:fc:4f:
1f:5f:c4:6a:4a:bc:cb:9b:93:5c:7a:33:b6:73:f1:
3a:e1:76:0b:c5:4e:ea:96:10:54:58:2d:2a:fa:ec:
78:cd:aa:db:5f:55:d0:c2:aa:8d:d4:4f:59:c0:82:
6a:f2:d5:c6:3f:70:57:e6:27:29:9a:1a:44:3e:93:
a3:6e:1b:0d:07:da:23:75:7c:c0:e2:a7:84:b2:37:
e0:c6:7b:a7:97:d1:f2:35:a3:b3:c5:98:65:7f:21:
1e:1a:40:d2:e9:78:0d:e8:67:28:86:35:ea:f5:c3:
a5:f2:71:e2:dd:9d:9c:79:1f:0f:79:61:55:e0:9d:
43:14:57:06:c7:dd:ab:fa:43:3b:f3:fc:8f:55:f9:
0b:ee:34:ef:66:97:24:61:ef:0f:5e:12:84:cc:8d:
07:d9:e3:61:f2:33:c8:41:77:1b:77:5f:7b:31:ed:
e1:51:8e:b5:21:82:4c:a4:ec:3a:04:c8:5d:0d:1a:
25:f5:56:2f:bf:5d:f1:96:5c:87:03:8f:5b:22:ea:
d4:27:4d:61:5e:4e:af:e4:e1:0d:f9:66:af:f6:cd:
bf:20:52:85:1b:2b:ea:89:be:aa:f5:71:4b:7e:18:
1e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6B:A3:67:95:98:95:DB:B9:01:9F:AF:C6:C3:85:81:91:B9:FB:68
X509v3 Authority Key Identifier:
keyid:79:D4:37:58:4A:BD:B4:82:13:63:0D:CA:A5:F0:0C:9D:2C:3C:C1:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edQ3WEq9tIITYw3KpfAMnSw8wXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/o2ujZ5WYldu5AZ-vxsOFgZG5-2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.2.160.0/22
185.143.92.0/22
Signature Algorithm: sha256WithRSAEncryption
91:b8:51:70:89:95:42:88:7d:19:91:aa:ea:08:90:cf:e7:5a:
2e:96:29:c1:6b:18:fd:39:21:9a:a8:e5:f4:35:1e:a0:2e:e4:
dc:48:ba:54:d1:8d:4e:96:ab:1c:01:b5:f0:f4:b5:f3:9d:ee:
51:d3:06:71:d6:94:38:14:ef:d2:d3:4a:d8:68:e5:7d:c4:7d:
e1:eb:f4:7d:35:25:98:2a:14:b8:3c:50:5e:02:05:80:2b:08:
0e:53:bf:84:e6:21:49:a1:33:a4:78:37:3e:5a:5e:6f:f8:28:
c1:bd:3a:57:78:e3:fc:c3:bb:60:cf:7c:ac:7a:7d:49:aa:f2:
ea:9d:eb:36:e8:28:67:f8:2e:c4:67:bd:ba:5f:0f:92:54:b9:
45:57:a3:95:00:8c:a9:49:9b:3a:56:a3:9c:ba:9b:b1:5c:ed:
11:05:c5:2b:ae:97:a7:1b:c0:12:1d:2e:88:ee:d9:a6:1e:48:
f2:b7:91:cc:a9:c4:f9:e4:ab:49:89:88:2e:67:c7:ea:1d:35:
4b:d9:e0:84:52:7e:1a:4b:8d:f7:99:fb:35:9a:94:ad:7c:32:
b3:88:65:63:d0:76:82:31:1a:7b:d7:89:00:f9:fe:52:2d:b2:
4e:b4:b2:53:4e:45:a6:15:c9:04:c7:7f:f7:e5:de:ba:bc:72:
a5:1d:0b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:32:31 2026 by rpki-client