Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/O9sZuea9ueIX-lBdeStJj66-2JI.roa
File: O9sZuea9ueIX-lBdeStJj66-2JI.roa (raw, json)
Hash identifier: B1HtqKm4bakXSo5Bvqf1h8mPwoWz2JJwr3pKb7a7K4Y=
Subject key identifier: 3B:DB:19:B9:E6:BD:B9:E2:17:FA:50:5D:79:2B:49:8F:AE:BE:D8:92
Certificate issuer: /CN=eef5314aeef51323194fd8629858ad20fb92dfe7
Certificate serial: 019F23689CC4C93CF6B0FD5D03026486689C
Authority key identifier: EE:F5:31:4A:EE:F5:13:23:19:4F:D8:62:98:58:AD:20:FB:92:DF:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/O9sZuea9ueIX-lBdeStJj66-2JI.roa
Signing time: Thu 02 Jul 2026 15:18:06 +0000
ROA not before: Thu 02 Jul 2026 15:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215759
IP address blocks: 79.110.171.0/24 maxlen: 24
217.145.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:9c:c4:c9:3c:f6:b0:fd:5d:03:02:64:86:68:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eef5314aeef51323194fd8629858ad20fb92dfe7
Validity
Not Before: Jul 2 15:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3bdb19b9e6bdb9e217fa505d792b498faebed892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:60:9a:ed:6e:8c:3e:ed:8a:e2:64:f9:8c:db:
e2:ad:64:ea:b1:c6:fd:5c:75:7a:a1:8a:ba:d8:ac:
d5:d0:2c:d8:f5:56:1a:25:47:ea:c5:72:7d:e0:8e:
ca:61:7b:9f:e0:97:f5:04:5f:93:84:63:3c:87:e3:
13:04:35:5c:14:97:b2:26:fc:d9:a6:9d:7d:7c:7b:
b9:ef:9f:a3:a7:2b:01:75:b7:5f:be:13:e6:ed:3b:
a5:83:d9:c8:b6:f6:eb:61:dc:56:0c:b6:7f:b4:da:
61:5e:fc:5c:c7:73:c8:62:f8:5b:b9:e4:2d:56:12:
80:b5:c6:9c:33:5e:ac:a0:00:1f:ac:40:35:00:4d:
e3:8a:b5:71:f2:2c:9b:6a:c1:1f:77:4c:f3:95:2c:
22:66:91:0c:95:8c:ff:4c:8a:b3:15:c2:8f:26:e9:
eb:cc:9e:f4:2c:82:fb:96:f5:91:ba:f2:48:fa:f0:
2c:a8:64:76:dc:82:d0:5c:fe:7e:a9:8c:be:d8:78:
6b:10:17:f9:1e:31:a7:e3:db:f0:16:31:3b:5f:50:
d0:6b:b5:b3:96:3c:dc:66:65:96:7a:63:fc:7e:87:
00:df:5d:b7:c9:ee:08:b4:45:0d:7e:6b:35:e7:53:
93:3e:13:7c:70:dc:e1:31:8b:e1:1a:76:31:35:08:
d3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DB:19:B9:E6:BD:B9:E2:17:FA:50:5D:79:2B:49:8F:AE:BE:D8:92
X509v3 Authority Key Identifier:
keyid:EE:F5:31:4A:EE:F5:13:23:19:4F:D8:62:98:58:AD:20:FB:92:DF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/O9sZuea9ueIX-lBdeStJj66-2JI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.171.0/24
217.145.237.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:1a:59:b6:b2:c5:20:dc:3b:b4:b6:21:da:2a:fc:67:31:2a:
06:79:ce:24:39:10:7a:e5:63:4b:98:3a:6e:ce:4a:ef:ff:70:
88:fc:b0:16:51:c8:11:01:ed:65:4a:38:3b:60:b7:2e:81:8d:
c9:fa:c1:0e:83:1e:18:aa:76:02:0d:ed:b6:87:32:70:6e:30:
93:13:b5:44:dd:c2:a7:1e:ad:b3:7c:1e:34:06:38:7a:1c:16:
6b:d3:f6:a8:39:00:54:32:fb:ca:89:61:88:8c:8c:70:77:eb:
91:19:05:0e:83:7f:64:46:b9:70:b7:a8:0c:96:ad:5d:fe:a0:
94:46:77:a1:f4:de:c6:ed:7c:64:64:20:24:41:bc:63:77:d7:
ff:12:f9:36:58:79:39:2f:c0:79:0b:eb:90:66:dc:0c:41:d3:
43:30:5d:40:15:f2:bb:d6:81:0a:76:46:bc:fa:51:91:18:2e:
af:97:63:13:ec:89:f1:5d:2a:e5:ae:1e:95:fd:e3:eb:4e:fb:
38:e1:76:7e:56:2e:6e:01:23:3c:91:55:4f:32:c3:d5:98:25:
45:f8:42:61:fb:09:f2:dc:ea:60:7f:43:fd:cf:72:2b:c5:b2:
8e:46:2a:40:7f:23:72:6f:8d:3b:e3:99:be:ea:04:6c:cc:0c:
40:43:12:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:41:02 2026 by rpki-client