Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/cOhgkIDZUSB-UMCTxrDrvsLKmnc.roa
File: cOhgkIDZUSB-UMCTxrDrvsLKmnc.roa (raw, json)
Hash identifier: J8fumuS9RwLV1jOdIP4cqRgqwBElG3GCVerOnC7YBBM=
Subject key identifier: 70:E8:60:90:80:D9:51:20:7E:50:C0:93:C6:B0:EB:BE:C2:CA:9A:77
Certificate issuer: /CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Certificate serial: 019FB291EC59630C4637715972C2F5DCD3B3
Authority key identifier: 91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/cOhgkIDZUSB-UMCTxrDrvsLKmnc.roa
Signing time: Thu 30 Jul 2026 10:28:55 +0000
ROA not before: Thu 30 Jul 2026 10:28:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197856
IP address blocks: 82.112.174.0/24 maxlen: 24
82.112.175.0/24 maxlen: 24
185.143.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b2:91:ec:59:63:0c:46:37:71:59:72:c2:f5:dc:d3:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Validity
Not Before: Jul 30 10:28:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70e8609080d951207e50c093c6b0ebbec2ca9a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:88:eb:de:36:50:78:b3:ed:59:08:74:ac:8f:
e6:e9:31:c6:00:00:be:af:9d:d0:b3:f2:27:45:87:
37:78:ca:5b:70:47:78:bb:dc:d4:48:6b:2c:38:83:
8a:f1:42:01:5b:fb:7e:c3:77:11:a8:4a:e5:2d:b8:
1b:96:f9:76:dc:1b:b3:37:24:18:54:04:f3:fe:9a:
81:96:95:8f:46:c8:77:2e:0f:b4:e1:85:67:b0:ed:
40:cb:cb:9e:7e:7b:44:89:12:c8:82:99:54:d4:7b:
ab:aa:24:43:a7:0a:7e:e9:7e:ee:31:22:d5:ed:68:
46:c1:4e:a5:2e:bb:dc:68:0a:4e:b9:5f:83:6b:af:
a0:70:87:6e:8a:81:8f:95:87:fd:6f:cc:1f:b6:38:
e3:6f:4a:91:a5:36:ba:6b:53:57:b1:9c:fb:84:8d:
95:cb:d8:24:f2:e0:79:32:a4:8e:ea:98:60:e1:ed:
0a:2a:b2:df:7b:f4:2f:c9:bd:90:4c:c6:f1:eb:53:
9e:64:10:9d:54:9a:7c:7d:f7:7d:17:6f:4f:29:07:
e4:04:e4:ce:0d:80:49:f3:3c:1c:bc:d8:ac:94:ce:
cb:e4:ee:7f:06:9a:bb:2c:80:be:76:64:7b:6f:db:
af:84:a1:3a:a3:b2:26:4d:f7:c1:77:ec:6d:df:32:
37:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E8:60:90:80:D9:51:20:7E:50:C0:93:C6:B0:EB:BE:C2:CA:9A:77
X509v3 Authority Key Identifier:
keyid:91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/cOhgkIDZUSB-UMCTxrDrvsLKmnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.112.174.0/23
185.143.78.0/24
Signature Algorithm: sha256WithRSAEncryption
59:4d:64:eb:af:2f:39:1b:95:f2:53:99:6b:65:fa:eb:9e:49:
ba:ca:4c:c1:f4:e7:54:d1:ea:9b:2a:06:09:f2:62:a5:41:89:
b8:38:8a:af:e9:1d:82:df:46:12:fe:33:10:5f:53:49:70:e7:
c6:42:5e:d6:0f:05:de:fb:b8:ca:7f:1d:90:ef:cc:6b:81:e0:
30:67:97:f2:79:db:d5:d6:5d:69:af:cb:7e:17:9d:78:b9:39:
fc:ef:35:5e:8e:93:0b:48:d4:ab:4b:5c:3e:23:30:fc:25:a4:
68:4e:d0:81:63:54:00:03:90:4f:ad:42:45:00:e3:2c:8f:e6:
05:e6:11:26:81:18:c2:df:cd:a2:09:a2:c3:1d:f8:f4:18:7a:
c9:63:74:58:df:a7:0d:66:90:9c:9e:6c:19:6f:f7:b5:6e:55:
ce:1a:e0:fc:49:71:b6:23:bc:cb:d5:0d:94:3d:41:74:9f:56:
53:99:ff:31:1b:f7:c1:e7:1e:a8:47:51:39:f1:36:4b:83:ec:
9e:8c:5c:e9:ed:b0:d8:8a:1e:bf:56:c0:91:b5:a9:55:87:59:
87:25:61:4b:7e:a3:10:cb:c1:78:52:fe:7d:62:fb:da:af:ea:
f5:ac:93:88:00:44:d2:7e:d3:d3:5c:b3:48:64:e9:d5:fd:ec:
d4:ce:fb:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 05:49:38 2026 by rpki-client