Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/O6k9EzZnOEyjb2PmvGJMHvfuWog.roa
File: O6k9EzZnOEyjb2PmvGJMHvfuWog.roa (raw, json)
Hash identifier: 3J9oT2i6VK+p7gFeHTk5mCSBw+oG3uTUHrJ8MJN3jNo=
Subject key identifier: 3B:A9:3D:13:36:67:38:4C:A3:6F:63:E6:BC:62:4C:1E:F7:EE:5A:88
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019FB99BB1004D6E22939F552A2C55F5418F
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/O6k9EzZnOEyjb2PmvGJMHvfuWog.roa
Signing time: Fri 31 Jul 2026 19:16:56 +0000
ROA not before: Fri 31 Jul 2026 19:16:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200169
IP address blocks: 77.67.15.0/24 maxlen: 24
212.189.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b9:9b:b1:00:4d:6e:22:93:9f:55:2a:2c:55:f5:41:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 31 19:16:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ba93d133667384ca36f63e6bc624c1ef7ee5a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5e:54:be:82:4c:06:a2:08:c3:76:8a:57:53:
4f:28:6c:9f:dd:28:18:63:3f:db:0c:f7:ea:ae:4b:
a7:ea:f4:1f:b3:45:66:55:a4:30:20:df:8a:74:fd:
61:ab:ca:03:ec:f4:93:62:93:54:9f:eb:55:f3:e2:
8d:73:c8:e5:93:bb:94:4e:31:9a:31:0e:ac:d0:9f:
59:ac:c1:d7:2d:c8:14:df:d3:80:c0:66:56:e1:70:
01:15:c7:81:2b:58:fb:91:f3:f8:99:1f:93:b7:bc:
35:2a:6b:5c:ac:06:70:a5:08:34:7c:1b:c5:40:e7:
be:06:19:a9:b9:1a:70:5e:4a:da:d0:06:95:4f:24:
13:3e:fc:76:71:a3:5a:ed:23:6e:6f:83:fc:c6:78:
f2:b7:8a:4d:fa:30:fe:3b:d8:31:b7:ef:31:49:68:
06:a9:b6:c7:a5:9b:0e:36:55:a2:5f:b8:b6:f3:1c:
33:ad:e3:fc:0c:c0:52:75:0b:82:cf:65:f0:24:07:
5c:37:01:e4:4b:15:18:55:07:9b:9d:0f:71:61:60:
e3:0e:9e:c8:be:dd:b2:c1:e4:83:d3:4d:75:f4:4f:
66:57:cd:82:41:93:fa:56:f1:da:e4:16:73:d1:6f:
0a:45:65:c7:aa:78:86:c7:ae:e5:45:8e:e4:88:de:
73:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A9:3D:13:36:67:38:4C:A3:6F:63:E6:BC:62:4C:1E:F7:EE:5A:88
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/O6k9EzZnOEyjb2PmvGJMHvfuWog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.15.0/24
212.189.57.0/24
Signature Algorithm: sha256WithRSAEncryption
89:db:91:1e:eb:90:42:d7:95:6f:58:1b:83:4c:72:3a:02:08:
70:84:a1:83:d0:7c:8c:f9:ee:60:64:0d:7e:ba:c1:f2:36:eb:
a3:15:ee:5f:95:a6:15:13:f3:d7:6f:71:f3:26:dd:8f:75:b2:
43:b4:1f:ed:c0:bb:c3:2f:48:67:2d:fe:28:6c:18:b7:4a:d7:
95:6c:be:73:64:87:92:1f:8f:79:1e:98:4c:9f:d3:e2:4b:a9:
5f:9f:62:43:35:c3:80:d1:a5:c2:a5:e9:80:3f:ad:c7:1e:88:
16:c3:5f:1a:42:91:db:3b:69:1f:b3:b3:83:ba:1e:b1:d7:1c:
d2:6e:01:79:8f:92:a8:bd:1b:22:17:b0:96:7a:ed:62:fc:54:
51:d3:f3:60:11:a0:cf:13:37:9c:4d:90:1b:52:a5:69:a3:34:
ec:ea:73:4d:7a:72:66:72:8e:34:41:23:3a:02:54:3e:68:e5:
88:7b:ac:90:08:95:ed:c6:af:df:d3:bf:58:d8:77:c4:bd:28:
5a:91:57:a2:e9:53:4d:d7:65:fd:d0:3b:58:10:16:45:02:96:
97:03:f2:c4:b6:81:59:10:26:32:95:3f:4c:01:2e:7d:ae:3e:
f9:e5:75:b6:9f:d2:13:9b:6d:7a:b6:c8:57:ee:38:0f:5a:0a:
b2:52:4c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:34:29 2026 by rpki-client