Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/oGynhP4aXvthVu259k5PADuu7eI.roa
File: oGynhP4aXvthVu259k5PADuu7eI.roa (raw, json)
Hash identifier: oFg8RD6YZkwg8VcybZyXsgYWwcUBqNDlpQuxw8vIo6c=
Subject key identifier: A0:6C:A7:84:FE:1A:5E:FB:61:56:ED:B9:F6:4E:4F:00:3B:AE:ED:E2
Certificate issuer: /CN=eef5314aeef51323194fd8629858ad20fb92dfe7
Certificate serial: 019F236897C377BD7A7123B3B328ECCFF94D
Authority key identifier: EE:F5:31:4A:EE:F5:13:23:19:4F:D8:62:98:58:AD:20:FB:92:DF:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/oGynhP4aXvthVu259k5PADuu7eI.roa
Signing time: Thu 02 Jul 2026 15:18:04 +0000
ROA not before: Thu 02 Jul 2026 15:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202314
IP address blocks: 139.28.206.0/24 maxlen: 24
2a06:1e86::/32 maxlen: 48
2a0d:1a41:cafe::/48 maxlen: 48
2a0d:1a45:666::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:97:c3:77:bd:7a:71:23:b3:b3:28:ec:cf:f9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eef5314aeef51323194fd8629858ad20fb92dfe7
Validity
Not Before: Jul 2 15:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a06ca784fe1a5efb6156edb9f64e4f003baeede2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8a:1a:07:13:15:14:5f:12:fa:78:b8:0e:2e:
8b:92:53:71:01:b8:78:e9:ee:13:3f:dd:27:3c:5c:
a2:53:76:49:6c:39:70:3c:c1:f8:39:bf:94:8d:6c:
ef:ae:e7:23:45:ff:90:25:c1:d2:1e:c9:3e:a1:7e:
7b:3c:49:b8:23:3c:4a:bb:ef:cf:ea:79:61:62:0c:
03:9f:4c:78:d6:da:d9:d4:c3:6a:67:77:20:c2:9c:
9a:64:17:2a:26:f5:53:e1:d5:3b:86:9e:bc:28:7f:
28:19:4b:7b:35:60:e7:25:ec:ec:fb:2c:05:6e:1f:
34:9e:3a:24:58:18:19:77:3c:cb:0b:1b:48:a2:55:
3b:8f:5f:6c:de:b7:48:c7:91:bd:96:37:ca:0c:3a:
d7:cd:7d:9b:c4:91:dc:91:01:ed:89:68:83:74:c1:
de:13:f1:3e:a7:c4:b3:d9:86:55:5a:83:ec:18:4d:
e0:b0:af:98:a3:47:9d:50:1f:94:4f:5b:f3:77:ca:
01:7c:cd:06:6f:d4:d5:70:e4:0c:df:15:66:6e:2c:
e8:3d:e5:bf:77:c5:30:26:75:af:e9:f8:8e:d2:a4:
66:87:dc:bf:6e:0f:3e:16:dd:50:5b:d8:85:e5:f8:
8d:4d:33:f7:5f:6a:99:c6:58:6f:12:0d:c5:7c:8d:
29:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6C:A7:84:FE:1A:5E:FB:61:56:ED:B9:F6:4E:4F:00:3B:AE:ED:E2
X509v3 Authority Key Identifier:
keyid:EE:F5:31:4A:EE:F5:13:23:19:4F:D8:62:98:58:AD:20:FB:92:DF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/oGynhP4aXvthVu259k5PADuu7eI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.206.0/24
IPv6:
2a06:1e86::/32
2a0d:1a41:cafe::/48
2a0d:1a45:666::/48
Signature Algorithm: sha256WithRSAEncryption
30:c7:0a:f3:31:9a:29:b7:24:fb:25:76:2b:03:7e:da:bf:5d:
66:5e:72:53:da:a4:6d:a3:ce:f1:7c:5d:91:30:da:47:60:fb:
98:c0:69:29:2d:d3:f7:e2:0b:7a:2c:a2:05:04:d0:2e:1f:e1:
fe:d2:52:27:b0:e1:5f:e6:39:c2:be:c9:9b:59:13:7a:3f:5b:
1a:32:f5:df:9d:14:09:af:bf:04:16:7a:72:8b:6d:c2:37:88:
bf:bf:13:ee:5f:82:96:11:74:e5:6a:73:16:d7:d0:d1:31:33:
0b:27:fd:97:29:6b:a3:e6:4c:42:ed:0f:23:5e:87:3c:9a:b6:
1a:0f:61:a1:ad:58:3a:43:93:b9:88:b3:b9:1a:8e:59:d5:4b:
f2:80:cb:7d:67:bc:3b:b4:c3:fa:b7:65:50:9c:4b:92:e3:48:
c3:de:4d:0d:55:d8:d3:ab:47:fa:8b:23:59:fe:a6:18:14:5d:
e1:a4:be:5d:98:de:ba:fb:75:5b:86:ae:ac:d1:11:27:0e:94:
bd:91:e4:a9:ea:73:ea:b3:88:1c:91:81:fe:79:b4:d6:41:e3:
6b:38:bf:39:65:12:9f:6a:c4:68:db:eb:65:15:c1:75:81:15:
d1:98:c9:62:30:d2:41:a6:3d:3d:56:1c:25:c6:36:a8:fb:15:
2c:15:ec:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:41:29 2026 by rpki-client