Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/OVbjzchmmu2Qrkw5yeVUSj5tVKw.roa
File: OVbjzchmmu2Qrkw5yeVUSj5tVKw.roa (raw, json)
Hash identifier: M37SrtNrwin6S4Eir4UhLeKzt1Yigst0TgfMm5OBHWc=
Subject key identifier: 39:56:E3:CD:C8:66:9A:ED:90:AE:4C:39:C9:E5:54:4A:3E:6D:54:AC
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A057B12DE52BDD5B747F2387273FACD884
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/OVbjzchmmu2Qrkw5yeVUSj5tVKw.roa
Signing time: Mon 31 Aug 2026 12:00:24 +0000
ROA not before: Mon 31 Aug 2026 12:00:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216078
IP address blocks: 193.178.226.0/24 maxlen: 24
193.200.78.0/24 maxlen: 24
2a06:5fc0::/29 maxlen: 29
2a0f:9b40::/29 maxlen: 29
2a10:b40::/29 maxlen: 29
2a13:c340::/29 maxlen: 29
2a14:1100::/29 maxlen: 29
2a14:6a40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:b1:2d:e5:2b:dd:5b:74:7f:23:87:27:3f:ac:d8:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Aug 31 12:00:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3956e3cdc8669aed90ae4c39c9e5544a3e6d54ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:38:55:23:40:16:07:06:5c:0c:07:f5:db:94:
14:d2:0c:94:f6:cc:86:98:92:2a:63:ff:81:a8:c9:
03:c2:89:32:ef:9d:19:6c:70:81:b6:14:71:4e:1f:
96:63:80:99:5a:a9:d0:7e:60:e3:2b:df:a6:2f:7e:
36:63:c9:78:86:90:4a:0d:10:5d:0e:69:ec:ef:e8:
9b:15:32:06:9d:4f:48:ee:50:06:f2:52:0e:97:fa:
a9:ae:97:7a:5a:e6:9d:57:3d:f7:e2:28:be:95:55:
56:bd:c5:93:c8:63:6a:59:69:85:50:16:99:bb:5a:
03:7a:70:98:da:0c:5b:ab:65:33:0f:4d:ac:76:80:
eb:f5:51:36:44:d4:56:91:6a:c3:46:e3:6d:af:a8:
a9:45:f1:e3:59:ec:45:10:52:23:e3:de:9f:ba:24:
44:8e:9d:f1:67:3a:64:49:3d:54:19:e6:9c:fd:0a:
0c:e4:d5:3a:34:9f:49:8c:14:6c:5e:7c:0d:55:7a:
30:87:b6:4f:80:65:b0:13:67:09:3f:0d:61:5a:ab:
bd:e8:48:18:b7:e8:82:77:f9:b3:4b:bc:b3:83:2f:
d3:70:2c:80:9a:bc:40:1f:46:da:8e:d3:49:44:72:
c1:69:5c:3a:1e:fd:2b:44:0b:6b:ee:80:4f:12:cd:
00:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:56:E3:CD:C8:66:9A:ED:90:AE:4C:39:C9:E5:54:4A:3E:6D:54:AC
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/OVbjzchmmu2Qrkw5yeVUSj5tVKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.226.0/24
193.200.78.0/24
IPv6:
2a06:5fc0::/29
2a0f:9b40::/29
2a10:b40::/29
2a13:c340::/29
2a14:1100::/29
2a14:6a40::/29
Signature Algorithm: sha256WithRSAEncryption
b7:fe:aa:98:53:9a:5f:ce:df:b0:34:8e:91:9f:f8:06:f2:43:
8a:68:68:6b:41:f1:d7:4e:92:8d:06:2c:f0:56:73:34:98:11:
85:3f:f9:88:fc:87:ba:37:39:66:55:5e:45:b9:c7:1d:dd:2b:
26:10:59:f1:28:84:6d:a4:1f:30:21:c8:81:68:ed:ec:61:e3:
8a:fb:58:da:6e:d7:2d:a7:d2:91:cc:9f:b0:6b:f9:ed:20:d1:
95:bc:bb:6c:72:49:d3:21:43:77:91:e1:fb:a5:03:4a:94:bf:
23:f4:6c:54:38:f8:1e:99:13:65:9f:ba:c4:62:44:59:40:a2:
3d:ae:9e:b4:c8:74:b4:e4:8c:6b:41:fa:cd:14:14:30:0f:06:
d9:11:9b:40:77:68:d0:18:be:ed:c8:68:d6:97:55:bc:93:31:
cd:59:94:3b:eb:09:0a:ea:74:ba:1d:2d:d9:d6:08:3d:99:64:
06:4b:52:51:80:6a:7c:29:2e:9c:6b:a4:60:27:ee:c8:d2:39:
5d:fe:e0:56:4b:e4:63:a4:4b:96:b6:61:8a:72:cf:a8:0c:24:
0a:18:22:b7:8d:a8:97:c3:19:96:19:c3:16:94:9d:77:4f:80:
aa:64:75:5f:5d:c9:30:bf:3d:3d:32:0b:30:a4:bf:3a:ff:c3:
74:47:1c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 22:57:51 2026 by rpki-client