Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/OI5EhOJCNnbBRSuXNvgjvNEPq1Y.roa
File: OI5EhOJCNnbBRSuXNvgjvNEPq1Y.roa (raw, json)
Hash identifier: oD26JJOT6DwdR4GxVKpP9CnRulkt+gNmlzlwVyBAeto=
Subject key identifier: 38:8E:44:84:E2:42:36:76:C1:45:2B:97:36:F8:23:BC:D1:0F:AB:56
Certificate issuer: /CN=95608722905d8352a40caa46a06112ea6a44600e
Certificate serial: 019F2368C81A2C3F125B11873AC882F8A40D
Authority key identifier: 95:60:87:22:90:5D:83:52:A4:0C:AA:46:A0:61:12:EA:6A:44:60:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWCHIpBdg1KkDKpGoGES6mpEYA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/OI5EhOJCNnbBRSuXNvgjvNEPq1Y.roa
Signing time: Thu 02 Jul 2026 15:18:17 +0000
ROA not before: Thu 02 Jul 2026 15:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197753
IP address blocks: 92.118.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/lWCHIpBdg1KkDKpGoGES6mpEYA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/lWCHIpBdg1KkDKpGoGES6mpEYA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWCHIpBdg1KkDKpGoGES6mpEYA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c8:1a:2c:3f:12:5b:11:87:3a:c8:82:f8:a4:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95608722905d8352a40caa46a06112ea6a44600e
Validity
Not Before: Jul 2 15:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=388e4484e2423676c1452b9736f823bcd10fab56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c2:c2:c7:0a:51:3a:a7:ca:00:ff:c7:c1:1c:
c4:17:56:8e:70:37:a2:81:49:c9:d7:61:50:7a:0b:
82:d8:2e:c3:4a:70:f6:65:00:28:f7:96:4a:af:51:
a7:05:eb:b3:50:70:ea:81:fd:0d:b8:d9:92:df:e9:
7c:60:e1:29:83:8a:a3:22:b4:dd:65:05:65:98:a6:
c7:90:c7:34:aa:9f:96:70:cb:ed:f4:f0:98:85:54:
fe:16:a0:23:d6:88:55:9d:1a:12:3b:69:33:ea:61:
3d:4f:b9:21:f4:58:81:4f:08:f2:bc:a7:5e:77:45:
a8:09:1b:14:1d:86:05:08:47:e9:c7:1e:97:e5:a4:
84:11:ba:89:14:04:41:58:45:3e:1d:c2:63:1a:18:
1c:e9:97:d0:b3:2f:3e:36:45:33:9c:7c:2b:9a:f0:
75:64:0b:56:72:0b:0a:cd:fc:61:20:ee:61:7c:22:
e8:5e:4f:d8:25:f0:6f:5a:50:25:b4:ae:57:15:c1:
61:25:72:fb:93:44:a6:cb:48:72:c1:f8:49:56:66:
76:7b:75:dd:c2:0a:08:99:12:ee:5d:20:b4:d6:c9:
c8:78:35:43:5a:6c:b6:17:4c:e7:3b:16:fd:53:50:
0d:e9:2f:7f:eb:cc:85:fe:5c:f9:9d:81:61:38:03:
e1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8E:44:84:E2:42:36:76:C1:45:2B:97:36:F8:23:BC:D1:0F:AB:56
X509v3 Authority Key Identifier:
keyid:95:60:87:22:90:5D:83:52:A4:0C:AA:46:A0:61:12:EA:6A:44:60:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWCHIpBdg1KkDKpGoGES6mpEYA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/OI5EhOJCNnbBRSuXNvgjvNEPq1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/lWCHIpBdg1KkDKpGoGES6mpEYA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.31.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:31:7b:20:0d:ce:e0:36:8f:e9:15:06:cc:b6:39:9f:7e:68:
ef:b7:8b:5f:71:f6:aa:15:fe:6d:8c:e5:34:76:73:45:18:b7:
36:3b:8e:f9:fa:f7:75:bf:7d:8f:81:01:e8:a6:9a:69:5b:40:
2f:e5:12:ea:d1:8b:5a:04:2f:79:19:fb:12:15:6c:20:7f:5f:
52:b6:63:7a:26:12:dd:9a:8c:64:e2:48:22:b5:8d:08:55:1e:
41:be:e7:1d:b9:f8:82:70:7c:39:0c:1b:a5:e1:44:be:ad:57:
ba:62:33:de:a7:bf:86:02:8b:3a:90:8a:cb:45:ec:ed:e8:a2:
f1:00:93:8d:ed:83:25:f0:c1:dd:cc:d9:34:21:5b:9a:b4:f3:
98:ca:80:8f:4f:8e:ab:d5:d7:31:c7:42:3c:04:d6:6b:75:22:
98:0c:45:3f:c1:2f:85:fd:9c:fd:65:23:33:dd:f4:58:97:59:
2d:7d:9e:ec:b4:b9:f4:b7:b9:83:04:76:fd:4e:32:98:a4:06:
cb:e5:94:49:04:78:08:4f:0d:ec:1b:0e:88:dc:da:3f:5e:3a:
e4:e8:d6:cb:8c:e4:79:1c:4a:b2:36:55:f0:01:71:ca:bb:68:
e6:a5:d4:1e:d7:b3:9d:07:4c:79:2a:d6:17:29:da:4f:6b:76:
cf:02:b9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 05:29:29 2026 by rpki-client