Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/ON9YWiWt2G9hjCjDsqVcvbX_4s0.roa
File: ON9YWiWt2G9hjCjDsqVcvbX_4s0.roa (raw, json)
Hash identifier: svhW29f3+cdPIBY4o1lLV7CzbwX1eK6CWnZYwYfOyNs=
Subject key identifier: 38:DF:58:5A:25:AD:D8:6F:61:8C:28:C3:B2:A5:5C:BD:B5:FF:E2:CD
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01A016716EBDC46D94196649656235CABA39
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/ON9YWiWt2G9hjCjDsqVcvbX_4s0.roa
Signing time: Tue 18 Aug 2026 19:55:27 +0000
ROA not before: Tue 18 Aug 2026 19:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29713
IP address blocks: 185.240.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:16:71:6e:bd:c4:6d:94:19:66:49:65:62:35:ca:ba:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Aug 18 19:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38df585a25add86f618c28c3b2a55cbdb5ffe2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:10:d3:f1:50:2a:29:a9:22:3d:a2:f2:2d:62:
eb:3b:4a:d7:4c:15:eb:12:73:42:8e:d1:63:c5:05:
6f:d2:94:b3:da:1e:2a:f3:eb:f5:ab:63:7b:8c:4c:
d3:01:34:df:a4:fb:38:19:bf:28:12:23:6e:9d:69:
cb:ad:c7:46:24:1f:c1:32:b8:48:78:4a:8c:6d:6d:
65:df:d9:c9:a7:57:e6:79:3a:e8:b8:1b:c7:e9:e3:
41:95:bb:4e:ea:e0:71:d0:5f:a5:25:d1:97:42:15:
8c:68:99:a5:98:28:b0:66:7e:eb:19:b3:f4:18:c3:
17:16:18:57:76:fb:56:bb:5d:23:a7:46:30:70:d9:
0f:21:6f:69:58:2f:3e:74:d0:2f:11:da:7e:04:8b:
37:e1:f3:e8:ae:6c:8c:8a:e8:b8:e9:ad:ad:a7:3b:
1c:65:54:a6:a3:6d:99:9f:4d:9b:c6:31:cb:14:01:
65:96:92:42:a5:1f:b8:00:da:05:2f:5a:95:dc:7e:
1a:c8:09:fd:3d:17:70:62:68:c8:ba:70:94:7b:14:
83:94:36:63:7b:bd:43:ec:c2:71:bc:8e:c7:03:8c:
9d:61:8c:55:f5:fd:d4:3e:ad:8f:fd:d3:2d:e0:db:
c3:1a:b3:ac:d6:ce:d7:02:77:a8:0c:28:6d:0d:3f:
35:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DF:58:5A:25:AD:D8:6F:61:8C:28:C3:B2:A5:5C:BD:B5:FF:E2:CD
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/ON9YWiWt2G9hjCjDsqVcvbX_4s0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.87.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:43:73:8f:0b:74:93:cd:87:63:95:96:74:f6:6a:99:77:f2:
a9:a5:87:4b:f2:72:6a:ae:b2:10:ba:d5:fe:6e:7c:bd:fc:70:
4c:53:b3:d4:ee:7f:be:a6:04:48:94:68:f5:e3:91:6d:c1:00:
5f:f1:fa:e3:b2:d2:a6:ad:55:86:9f:f8:62:d9:68:c2:79:df:
a1:15:ac:a6:01:3a:f8:4e:44:10:e8:53:61:ec:f3:f4:63:cc:
d3:ff:4f:b6:f0:e0:57:79:f5:91:28:e7:a6:35:d9:af:41:6a:
44:6e:35:45:90:3b:d7:17:6e:9b:67:fb:9e:69:2d:9f:e9:ae:
4e:52:e6:31:43:4f:bc:07:6d:49:08:d1:59:1e:8c:e0:06:24:
08:d0:39:8d:14:79:71:f0:e3:33:b6:27:a2:53:d9:79:5a:c4:
c8:8d:6a:23:87:37:e4:63:b3:6f:4f:c3:32:fa:be:5d:a4:05:
77:1a:bc:59:ab:c8:87:01:8a:b0:2b:ee:25:22:36:2c:36:d0:
01:4b:b5:da:4c:97:c9:5d:5c:45:2b:cc:da:bd:dc:35:4c:1d:
54:3c:99:46:84:e4:aa:6a:d1:21:bb:6c:a3:83:a2:c9:30:fc:
f3:f3:c2:87:28:a9:64:99:10:53:76:f7:90:02:14:05:11:84:
c9:55:cd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:49:32 2026 by rpki-client