Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/oG-V3mS8FXINK5dLiUq9PS14fEI.roa
File: oG-V3mS8FXINK5dLiUq9PS14fEI.roa (raw, json)
Hash identifier: twzc56zK2YOKx21kaOpueK1AEy7dTcgjp64pyEqdiaI=
Subject key identifier: A0:6F:95:DE:64:BC:15:72:0D:2B:97:4B:89:4A:BD:3D:2D:78:7C:42
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F2368FB845FC47C1C15050C735FA907C0
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/oG-V3mS8FXINK5dLiUq9PS14fEI.roa
Signing time: Thu 02 Jul 2026 15:18:30 +0000
ROA not before: Thu 02 Jul 2026 15:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29166
IP address blocks: 195.65.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fb:84:5f:c4:7c:1c:15:05:0c:73:5f:a9:07:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a06f95de64bc15720d2b974b894abd3d2d787c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f5:3c:7f:fb:0c:49:08:f7:56:f8:9f:f8:89:
a3:18:c5:69:5f:50:56:17:8e:97:b8:be:6c:92:50:
69:eb:ac:83:3d:71:64:07:16:4d:a2:b3:bd:30:51:
3e:78:b9:b6:ee:49:1a:10:fa:29:51:33:f4:dc:9a:
7e:32:b8:1a:4b:e6:00:6c:df:bf:65:e8:80:ad:0f:
79:65:2d:0d:0c:51:1b:4c:1a:72:3b:15:09:e8:ea:
7f:74:81:41:32:8d:1c:ed:10:17:05:91:61:0d:4e:
ec:c5:fb:7a:1c:e2:31:54:6b:89:ee:71:31:de:9d:
79:4b:2b:8a:0c:99:c9:08:5d:8f:75:9a:4c:5d:e6:
2c:d9:4a:6b:37:f9:3e:0e:7a:db:de:9f:b7:c3:a9:
2e:a3:e1:9a:bc:e9:db:79:a9:c2:73:11:c5:24:fe:
ec:8e:02:96:57:6a:ba:65:8e:b9:9e:45:91:3e:9e:
2b:57:ab:0e:68:29:c4:82:6b:d3:8f:c7:54:81:33:
7d:ec:d2:13:c1:eb:dd:a9:3f:9c:0a:5c:d6:cc:bf:
62:4f:59:87:27:ae:9e:26:db:5b:06:05:67:df:91:
ec:a5:ba:f2:16:27:26:74:6b:5e:3e:f5:f1:7b:7b:
b7:1c:8e:27:d1:f2:65:32:60:25:cf:3d:3d:43:47:
46:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6F:95:DE:64:BC:15:72:0D:2B:97:4B:89:4A:BD:3D:2D:78:7C:42
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/oG-V3mS8FXINK5dLiUq9PS14fEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.65.148.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:6a:ec:42:12:c8:07:c3:e8:a4:88:a5:91:d9:78:fa:60:79:
c2:24:0d:69:7e:04:b3:ad:f0:e3:34:f3:33:56:f7:05:89:cc:
6c:2c:aa:af:5f:a7:b9:4f:0f:49:69:d2:12:91:7b:4e:59:56:
3e:a1:89:54:57:dd:7f:78:84:6b:7c:cb:eb:2e:eb:81:9c:66:
1a:40:33:52:55:8a:b0:20:c7:8d:13:13:86:ac:e2:a1:fd:d5:
14:5d:dd:c8:1f:e7:06:da:4e:5b:0c:0e:a5:45:14:ab:8b:91:
c1:52:6a:77:58:f1:a9:18:c8:68:16:41:44:cb:02:5e:b7:ee:
38:ea:f2:12:f0:3a:c5:56:a3:97:98:07:ff:d0:ad:28:2b:0e:
ec:20:e6:e2:5e:f3:fa:bb:23:25:b3:fb:40:78:82:59:e0:34:
e7:b7:f2:82:15:a7:8f:8b:c1:1b:f7:56:8b:61:2d:9d:a8:5c:
de:83:7d:37:2a:2e:55:2f:00:c2:1e:71:49:7e:1c:a1:58:63:
fa:84:a1:22:fe:79:52:98:59:b2:9e:1f:2c:d7:25:26:59:fd:
00:c7:c4:17:5b:ae:e3:30:97:11:27:e7:4d:ba:10:01:fd:36:
96:52:6e:d7:de:34:cf:4b:ad:67:58:73:c6:22:75:28:e0:8a:
cb:2d:2f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:54:57 2026 by rpki-client