Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/oXRKH5b-T-CRxs2hxBp_XOCDBZY.roa
File: oXRKH5b-T-CRxs2hxBp_XOCDBZY.roa (raw, json)
Hash identifier: CXD7uTJndYpsuBoJT2/svXnMWPhH6ma+JfEwHCQE7gU=
Subject key identifier: A1:74:4A:1F:96:FE:4F:E0:91:C6:CD:A1:C4:1A:7F:5C:E0:83:05:96
Certificate issuer: /CN=84d509259f700cdc4448f1fbf530c19e40754ec4
Certificate serial: 019C0532EB279082C5BBB56F5036551B0147
Authority key identifier: 84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/oXRKH5b-T-CRxs2hxBp_XOCDBZY.roa
Signing time: Wed 28 Jan 2026 15:22:28 +0000
ROA not before: Wed 28 Jan 2026 15:22:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59689
IP address blocks: 185.3.128.0/22 maxlen: 22
185.106.117.0/24 maxlen: 24
2a02:5cc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:05:32:eb:27:90:82:c5:bb:b5:6f:50:36:55:1b:01:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d509259f700cdc4448f1fbf530c19e40754ec4
Validity
Not Before: Jan 28 15:22:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1744a1f96fe4fe091c6cda1c41a7f5ce0830596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d0:f4:76:e6:a5:29:c9:0e:23:d1:86:ef:0c:
71:02:5e:11:47:22:31:75:7c:9a:e6:a6:18:20:98:
b7:6f:03:b3:1f:ff:0b:07:65:30:e6:c4:fd:e3:b9:
17:0c:6a:f7:18:8b:86:5d:a6:d7:ed:b0:94:c4:96:
30:d5:02:43:7f:6e:6f:d7:55:ab:d0:0e:18:28:f3:
4b:53:68:44:04:ef:c3:36:d4:c1:b4:be:7f:8f:3a:
a0:c3:ba:8b:7d:41:35:28:f4:b5:fc:aa:04:87:c3:
c4:ae:9e:ca:c1:a3:87:ba:36:1e:d8:e2:63:03:2e:
3c:1c:4a:98:8c:5d:05:0a:27:11:b4:f3:d1:87:ce:
b9:6e:16:46:b5:42:a5:60:99:6f:5b:fe:aa:7b:da:
da:c3:87:96:72:e9:37:1d:3a:d0:77:8c:70:6e:5b:
6c:18:57:e3:52:94:0e:c5:98:5c:0d:e8:19:de:d1:
b9:f8:73:22:fd:f2:28:5a:65:2b:ff:26:5c:27:90:
19:78:64:1b:d4:10:e2:24:b1:03:ef:68:1c:ed:5e:
59:79:c0:0c:86:54:b9:20:77:06:b9:96:30:83:67:
18:63:3c:66:6d:00:ca:ea:b4:ca:14:02:3c:e9:12:
8b:86:83:fd:00:73:c1:3f:82:cb:d1:16:b2:ec:7a:
09:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:74:4A:1F:96:FE:4F:E0:91:C6:CD:A1:C4:1A:7F:5C:E0:83:05:96
X509v3 Authority Key Identifier:
keyid:84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/oXRKH5b-T-CRxs2hxBp_XOCDBZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.128.0/22
185.106.117.0/24
IPv6:
2a02:5cc0::/32
Signature Algorithm: sha256WithRSAEncryption
9a:16:86:27:50:f1:b4:b9:fa:cb:23:47:9a:57:37:d9:0a:8e:
f8:a4:40:2a:ed:e0:6a:94:30:2c:0b:a4:3e:dd:fb:cd:bc:96:
62:70:4c:f3:1d:55:0f:2e:45:37:f6:c6:40:53:f4:20:ba:b0:
a3:c4:94:7d:ce:89:08:05:c2:9b:61:03:69:1b:e9:c0:06:8b:
53:13:5c:30:26:91:41:cc:63:2e:f1:29:dd:09:f4:55:56:4e:
64:b6:f9:f8:b6:3c:a1:c5:37:19:58:14:8f:2a:7d:c1:79:5c:
12:db:be:ac:27:64:e1:77:c6:87:6b:84:43:80:30:75:3b:46:
d2:6a:b5:42:07:39:b3:16:0f:19:d0:32:16:19:d1:24:f2:d6:
72:a5:9a:e5:0a:06:04:69:30:0d:13:96:20:94:ee:53:38:7e:
ea:ac:ab:1e:ee:ef:0e:50:00:05:a0:ac:67:d3:29:14:ce:c7:
87:26:83:ec:50:8c:5c:ae:59:0f:c4:df:55:f4:ea:d3:54:d8:
ff:4b:07:fc:5e:f4:3d:78:85:4c:d6:15:ab:3f:06:03:02:60:
b7:45:d7:8f:b8:ca:63:4f:fc:e2:fa:43:fd:1b:cf:c4:c5:d7:
b3:69:b8:25:12:cb:5b:da:c8:41:30:85:85:84:f6:de:5f:68:
11:cd:3c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:42:27 2026 by rpki-client