Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/oNWYrmCfvQ9fOOq0cyXOZETggfE.roa
File: oNWYrmCfvQ9fOOq0cyXOZETggfE.roa (raw, json)
Hash identifier: v+CSB0gNTcNM6s+tJxfYQkWpEfpEwgg1ZSVVpqSiysg=
Subject key identifier: A0:D5:98:AE:60:9F:BD:0F:5F:38:EA:B4:73:25:CE:64:44:E0:81:F1
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 019F236944F67334E3FE3251D737B03749F6
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/oNWYrmCfvQ9fOOq0cyXOZETggfE.roa
Signing time: Thu 02 Jul 2026 15:18:49 +0000
ROA not before: Thu 02 Jul 2026 15:18:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50835
IP address blocks: 37.97.121.0/24 maxlen: 24
46.173.248.0/22 maxlen: 24
46.173.254.0/23 maxlen: 23
77.36.58.0/24 maxlen: 24
77.36.66.0/23 maxlen: 23
81.161.48.0/22 maxlen: 22
91.193.30.0/23 maxlen: 23
91.233.200.0/24 maxlen: 24
91.236.76.0/24 maxlen: 24
91.239.226.0/24 maxlen: 24
91.246.203.0/24 maxlen: 24
93.120.34.0/23 maxlen: 23
93.120.40.0/23 maxlen: 23
109.207.128.0/24 maxlen: 24
109.207.130.0/24 maxlen: 24
109.207.132.0/24 maxlen: 24
176.116.236.0/24 maxlen: 24
176.121.108.0/23 maxlen: 24
194.33.66.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 06:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:44:f6:73:34:e3:fe:32:51:d7:37:b0:37:49:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Jul 2 15:18:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0d598ae609fbd0f5f38eab47325ce6444e081f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:34:d3:dd:46:85:85:9d:09:93:56:ed:06:b4:
85:75:d0:3c:41:fc:55:c9:2e:31:b6:48:94:19:a6:
87:7d:0b:cd:2c:db:41:3b:4c:31:48:69:26:08:7a:
ad:d0:4b:57:59:8f:1e:9c:b6:ed:ed:d2:5a:3c:53:
a7:44:d5:37:25:a5:b5:5c:23:c3:fe:f4:68:31:50:
0b:eb:3b:95:e5:e3:32:be:a8:6e:27:46:2d:81:1b:
48:da:c7:31:6c:b2:53:9e:07:b5:48:c6:5d:e5:6b:
55:0c:01:42:ba:33:4f:b9:09:80:d2:e0:b9:63:1c:
67:ee:23:9a:fe:de:3e:aa:42:3d:1e:90:81:2c:ee:
e9:09:d2:3b:0f:b5:b9:ad:28:89:61:9d:90:be:01:
34:ce:15:2b:43:0c:34:d4:68:c2:88:56:fa:7c:4b:
a3:17:b2:f9:5a:3a:bc:81:4d:b6:65:92:67:b7:96:
73:ca:49:65:e5:9b:6a:0c:ec:fb:dd:b8:a5:cc:90:
fa:dc:45:84:18:c1:6b:4f:2b:ff:12:fe:c0:64:60:
21:9f:c8:eb:df:17:39:02:f8:ba:4d:fc:32:4f:09:
8e:58:3e:bc:4e:30:f1:88:01:9b:d5:90:e2:06:c4:
5f:62:99:65:58:c3:99:01:55:1f:21:4e:7f:e6:6c:
8b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D5:98:AE:60:9F:BD:0F:5F:38:EA:B4:73:25:CE:64:44:E0:81:F1
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/oNWYrmCfvQ9fOOq0cyXOZETggfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.97.121.0/24
46.173.248.0/22
46.173.254.0/23
77.36.58.0/24
77.36.66.0/23
81.161.48.0/22
91.193.30.0/23
91.233.200.0/24
91.236.76.0/24
91.239.226.0/24
91.246.203.0/24
93.120.34.0/23
93.120.40.0/23
109.207.128.0/24
109.207.130.0/24
109.207.132.0/24
176.116.236.0/24
176.121.108.0/23
194.33.66.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:10:1b:f1:62:51:68:ae:b0:a3:b6:af:3f:a3:91:b1:5c:eb:
51:7b:94:fb:8b:57:e0:ad:e9:5c:70:48:46:ae:d4:0e:d1:41:
72:f8:12:33:a2:20:ca:16:2b:4e:71:6c:c8:6e:d8:c6:4b:29:
76:df:6b:04:c7:a5:17:3d:f3:a5:6b:7e:f0:f2:a9:5b:00:fe:
ee:bb:35:16:1e:3f:8d:56:f5:e2:e7:cb:57:3e:75:dd:07:95:
20:50:13:f1:a8:2a:e4:86:e5:87:53:9d:30:b7:11:9e:43:32:
bf:67:01:4c:81:eb:5c:bc:98:1a:a6:ee:5c:8a:32:dd:d6:1c:
93:a9:cd:5f:33:a2:8e:af:8c:6f:15:4f:8b:f2:9d:91:ea:33:
20:7f:6b:e1:31:05:7f:8e:a4:ed:aa:99:4c:37:1a:d9:34:de:
93:e4:da:be:91:e0:ab:19:13:81:91:6b:b7:90:94:51:ab:3d:
06:e5:a7:17:87:e9:36:a7:38:1e:25:e4:4d:09:da:42:42:ed:
cf:e3:e1:b3:f9:7d:b2:56:82:f2:e4:77:2f:42:42:d5:fc:05:
a1:d3:00:33:68:a7:33:44:11:83:2c:14:3d:4b:39:a2:a6:38:
e8:63:1b:c2:d3:aa:39:12:5d:80:4f:9c:a1:ea:6c:4e:de:88:
28:35:a4:b1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 14 15:23:05 2026 by rpki-client