Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/O-cCgnAl_EXxSdCrC4tkvkppPd4.roa
File: O-cCgnAl_EXxSdCrC4tkvkppPd4.roa (raw, json)
Hash identifier: WRAqcdEC4BihxMpwxNM+vLeE0V773UMxtKGnjU33uZ4=
Subject key identifier: 3B:E7:02:82:70:25:FC:45:F1:49:D0:AB:0B:8B:64:BE:4A:69:3D:DE
Certificate issuer: /CN=5379208330b98f400b8d8345a02b591c1a172f0a
Certificate serial: 019F2368ABC09D0DAFAF0DE7CF9F36429BE2
Authority key identifier: 53:79:20:83:30:B9:8F:40:0B:8D:83:45:A0:2B:59:1C:1A:17:2F:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3kggzC5j0ALjYNFoCtZHBoXLwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/O-cCgnAl_EXxSdCrC4tkvkppPd4.roa
Signing time: Thu 02 Jul 2026 15:18:10 +0000
ROA not before: Thu 02 Jul 2026 15:18:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208037
IP address blocks: 89.232.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/U3kggzC5j0ALjYNFoCtZHBoXLwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/U3kggzC5j0ALjYNFoCtZHBoXLwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3kggzC5j0ALjYNFoCtZHBoXLwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ab:c0:9d:0d:af:af:0d:e7:cf:9f:36:42:9b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5379208330b98f400b8d8345a02b591c1a172f0a
Validity
Not Before: Jul 2 15:18:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3be702827025fc45f149d0ab0b8b64be4a693dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6b:61:dc:0c:8b:f1:5f:ba:06:dc:51:58:c3:
f6:fe:63:45:3a:ad:e1:c9:f2:d4:d5:57:f8:5d:ca:
6d:12:07:e0:27:a6:87:56:ba:ea:a6:4e:24:ad:41:
ce:67:47:6f:10:f5:f6:6d:4a:af:79:3e:41:8d:c9:
f7:8a:4e:78:11:b4:5b:7f:ac:0e:1c:90:8d:98:d9:
7f:0f:b1:64:c4:ed:78:4d:2f:3b:79:84:f7:e7:68:
b0:4b:ee:03:20:06:f5:fe:8e:34:a4:10:9c:00:bd:
0e:7f:4d:04:1d:8a:6f:28:7c:32:02:3a:15:9e:ee:
da:6f:90:ac:e2:98:1a:02:e7:71:53:ba:c8:70:20:
35:32:c7:b8:dd:a1:4c:51:36:f7:c3:04:44:53:a6:
94:96:7c:23:55:96:53:91:4a:5a:0c:87:cf:f5:53:
6d:11:45:3d:0c:ec:cb:7f:ee:d3:5f:f3:d6:2f:31:
83:46:b1:a4:5c:ac:11:2d:21:5a:c8:60:ee:db:16:
29:81:ec:8a:2c:fb:94:e1:7d:48:b5:dd:fa:5d:64:
4b:af:91:cb:7e:ef:30:2a:e2:6a:d8:aa:5c:16:c5:
ee:0d:19:a0:f3:e4:60:d2:bb:fc:1f:6d:d6:9a:13:
11:1f:9c:83:a6:d6:1a:f4:b9:87:4c:fc:35:fa:cd:
7b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E7:02:82:70:25:FC:45:F1:49:D0:AB:0B:8B:64:BE:4A:69:3D:DE
X509v3 Authority Key Identifier:
keyid:53:79:20:83:30:B9:8F:40:0B:8D:83:45:A0:2B:59:1C:1A:17:2F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3kggzC5j0ALjYNFoCtZHBoXLwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/O-cCgnAl_EXxSdCrC4tkvkppPd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/U3kggzC5j0ALjYNFoCtZHBoXLwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.232.172.0/24
Signature Algorithm: sha256WithRSAEncryption
29:76:45:05:42:04:7a:d1:33:cc:01:ab:25:55:70:f6:eb:47:
95:9e:72:f3:c4:cd:7d:a8:50:db:5c:6f:fc:67:ec:23:a1:d3:
0e:0f:f1:ed:69:73:92:e1:f4:9d:02:cb:b9:dc:a6:21:4a:e1:
3d:2d:2e:44:04:4e:79:a9:ea:b9:09:5e:d3:75:c4:a0:2c:76:
51:58:ff:4d:83:f8:70:52:74:7a:56:5e:5d:67:6f:62:a9:42:
24:bd:70:fd:d1:3d:62:bf:ee:52:a5:b4:c8:9e:13:09:6f:bb:
6c:97:15:e3:97:0b:64:a2:3d:d7:81:4e:53:6f:b5:62:16:0b:
62:2f:fc:88:9d:60:99:8d:ba:46:aa:ec:c1:52:fd:11:5b:e2:
02:83:e3:c2:db:18:1a:41:ca:a8:4b:39:5f:6e:8e:24:8f:18:
6a:09:4f:5b:f2:c4:41:fa:0b:aa:7f:ae:3c:e8:71:7f:54:4a:
fb:3a:d4:b4:d4:31:fd:00:17:0a:fc:94:23:b4:38:ae:0b:90:
8a:86:cd:7d:9a:e2:b8:67:2f:6d:56:a4:40:c9:e8:41:47:26:
80:3e:1b:64:5b:c2:69:3f:98:5a:c2:ce:2d:65:7b:a5:be:fa:
89:ff:3d:54:17:93:e0:18:f4:e5:73:ba:29:21:e4:50:01:4a:
8a:5c:03:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:26:16 2026 by rpki-client