Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/oIFDamMFsaAUv3_QXk-wIETOecI.roa
File: oIFDamMFsaAUv3_QXk-wIETOecI.roa (raw, json)
Hash identifier: R//1hT9e0Lq7We4cMvCWKxDCXrukd4OXlMU1MKxnozg=
Subject key identifier: A0:81:43:6A:63:05:B1:A0:14:BF:7F:D0:5E:4F:B0:20:44:CE:79:C2
Certificate issuer: /CN=f984bce44fa32801d7f10ce9839b06084ddff2ba
Certificate serial: 019B7F842295543FB4A522237D828DE374A3
Authority key identifier: F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/oIFDamMFsaAUv3_QXk-wIETOecI.roa
Signing time: Fri 02 Jan 2026 16:22:04 +0000
ROA not before: Fri 02 Jan 2026 16:22:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211921
IP address blocks: 176.103.212.0/24 maxlen: 24
176.103.213.0/24 maxlen: 24
176.103.214.0/24 maxlen: 24
176.103.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:84:22:95:54:3f:b4:a5:22:23:7d:82:8d:e3:74:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f984bce44fa32801d7f10ce9839b06084ddff2ba
Validity
Not Before: Jan 2 16:22:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a081436a6305b1a014bf7fd05e4fb02044ce79c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0f:96:93:51:9c:27:3b:8d:cb:b1:af:8e:80:
95:48:6d:51:72:3c:c3:52:5d:a5:65:ff:0e:e2:a9:
56:ec:da:18:e6:35:c8:0b:ea:b0:45:b6:f3:42:7a:
f6:a5:2f:b2:7f:b7:e3:66:cd:a3:d0:e1:a1:83:66:
6e:39:a6:7d:79:9e:eb:38:32:2a:34:5a:78:e7:1d:
7f:47:61:f6:be:87:d4:66:26:01:79:cb:4a:20:b5:
03:0c:79:1a:f2:de:16:d1:51:b4:7d:80:a5:85:ff:
e3:bf:e6:94:ad:35:18:6a:89:f8:39:97:06:c3:da:
a2:61:cf:14:92:b9:f2:89:c1:73:3d:a4:f3:e7:10:
9e:42:de:32:72:bf:88:d8:c3:9d:48:3d:77:5c:29:
e1:27:97:2d:36:84:3f:f8:2e:cb:fd:52:e6:e4:7c:
cb:cd:93:73:9d:ec:00:a7:bb:d0:94:25:c1:00:4e:
c2:6e:1c:2f:b3:0d:0c:12:08:11:69:61:07:94:5b:
7d:dc:6d:35:b5:c9:a2:17:ee:83:52:0f:fc:e5:13:
f1:f3:83:3d:18:7d:36:fd:0d:1b:67:07:b2:32:84:
2a:32:90:58:9b:84:5a:89:6a:ae:34:5a:2c:12:07:
c7:9e:92:c9:29:f6:84:c9:c0:0b:b7:a0:55:29:23:
df:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:81:43:6A:63:05:B1:A0:14:BF:7F:D0:5E:4F:B0:20:44:CE:79:C2
X509v3 Authority Key Identifier:
keyid:F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/oIFDamMFsaAUv3_QXk-wIETOecI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.212.0/22
Signature Algorithm: sha256WithRSAEncryption
54:95:5f:de:55:23:55:ef:b2:19:01:50:ea:5d:94:2a:e9:26:
04:cf:3b:4e:65:ee:55:bf:54:02:1f:f3:be:1e:85:c0:cd:e3:
d1:37:4c:e5:f7:fe:8d:bf:26:5e:0f:7c:0d:6d:75:32:09:1e:
7d:e8:ad:05:12:52:de:49:3f:c8:cb:d5:c5:1e:14:09:3f:2f:
7f:77:b0:3a:2c:9a:2c:85:f8:35:a3:ad:e2:41:2b:16:a8:1e:
02:c1:97:eb:1c:49:a7:79:05:35:a7:0a:e2:32:9d:66:27:6d:
c5:6f:a9:73:73:4f:b1:e6:dc:7a:2e:60:af:1f:35:0c:d2:62:
e0:d7:1f:d9:ae:68:1f:d2:75:25:36:1a:69:0d:cb:7f:85:46:
bb:f4:b7:26:19:bb:26:cd:65:ec:f6:40:e4:bc:d5:05:c3:47:
fc:89:72:19:d9:29:b2:87:a4:55:aa:60:38:46:46:93:35:db:
51:46:30:5e:a7:fc:30:e9:02:19:e0:8d:19:83:21:6e:cc:f4:
03:32:95:30:1e:0b:5c:be:76:ae:b8:1c:84:b9:ea:57:05:3e:
99:9f:f3:b0:e9:d2:62:90:79:9c:0d:c5:78:e7:1a:5d:22:2a:
3c:71:8a:37:75:b4:a2:18:c4:0d:96:88:46:f8:5b:72:3e:31:
86:c0:a1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:21:54 2026 by rpki-client