Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/9OWOKSpLigen3wmL7mhYnOHGp20.roa
File: 9OWOKSpLigen3wmL7mhYnOHGp20.roa (raw, json)
Hash identifier: RW363Lgc9ijutZ++Br9twiDa8reB4RMvt+oPMke+fMw=
Subject key identifier: F4:E5:8E:29:2A:4B:8A:07:A7:DF:09:8B:EE:68:58:9C:E1:C6:A7:6D
Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial: 019F6F229C8E36DED31D555F302BEDB09918
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/9OWOKSpLigen3wmL7mhYnOHGp20.roa
Signing time: Fri 17 Jul 2026 08:12:47 +0000
ROA not before: Fri 17 Jul 2026 08:12:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154132
IP address blocks: 185.191.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6f:22:9c:8e:36:de:d3:1d:55:5f:30:2b:ed:b0:99:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
Validity
Not Before: Jul 17 08:12:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4e58e292a4b8a07a7df098bee68589ce1c6a76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a7:7a:4a:74:01:7c:28:bf:03:13:f3:23:a9:
aa:9b:6c:7d:69:f4:d5:68:19:49:91:26:dd:10:de:
92:6d:2b:f6:3b:72:22:f9:a4:4a:9f:89:9c:12:cc:
d0:16:cf:02:e4:d2:e1:2b:2d:04:0b:36:89:11:bc:
d3:6d:61:67:73:a4:1f:5c:f2:68:b8:af:f2:59:a5:
e6:1a:dd:31:c3:e7:fa:32:6d:2c:fa:7f:9b:88:33:
8f:b3:29:f1:43:da:de:25:8f:67:71:85:68:62:ff:
a0:5e:c1:d0:20:d0:20:fd:a2:2d:41:d0:02:f9:c2:
ff:7d:2e:ae:c3:67:c3:32:fd:61:6a:43:6b:e6:e6:
b3:32:fe:5f:e7:87:ef:35:b1:83:64:c8:84:32:ee:
8b:ee:18:f5:03:2d:31:9d:2c:27:73:2f:2c:1c:d0:
af:a1:29:a6:46:7a:53:65:10:33:c7:ec:71:f7:de:
60:02:49:58:db:1a:9e:c6:71:d5:53:01:73:15:a5:
ac:82:2f:7b:38:2a:a8:b4:3f:6b:b2:6e:2f:40:1d:
b9:90:64:44:20:6d:64:27:4f:d1:50:eb:ac:26:ed:
65:9b:b4:bd:c4:49:41:8f:ae:ae:04:4b:fa:6a:4c:
d6:a7:4d:58:cf:f6:a0:55:48:8a:e8:71:49:7d:67:
63:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E5:8E:29:2A:4B:8A:07:A7:DF:09:8B:EE:68:58:9C:E1:C6:A7:6D
X509v3 Authority Key Identifier:
keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/9OWOKSpLigen3wmL7mhYnOHGp20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.21.0/24
Signature Algorithm: sha256WithRSAEncryption
87:68:d4:aa:bc:ee:6f:b6:28:22:f4:8b:3b:08:46:6a:02:eb:
50:cd:de:05:05:e4:fd:d3:fe:ca:01:43:36:35:dd:b0:15:2b:
c0:bb:c9:f8:27:41:73:a4:40:5b:7a:ed:86:c7:5d:ea:13:87:
46:e0:f5:a8:a0:10:75:6e:81:9f:0d:48:8f:76:61:95:f7:11:
0b:32:7d:c5:4d:fb:2a:a9:53:aa:62:6a:b0:74:b7:d1:6a:e0:
ac:f4:69:40:83:d2:57:e0:ba:b6:83:50:14:78:32:f0:25:40:
ea:e1:ce:2b:2a:e1:f1:ef:da:6f:6d:3b:bf:51:3c:be:c9:fa:
88:f6:7d:85:6e:d0:f8:0d:53:91:07:75:2a:1d:d5:fa:e9:33:
64:41:98:3a:2c:f0:4c:02:d8:e4:ac:72:e4:0c:54:5c:89:79:
9d:cb:52:f8:01:37:5d:8e:f6:09:15:9d:57:d5:a4:ef:0b:f1:
b4:bf:fd:e1:bc:7a:83:b9:aa:2c:d5:01:1c:13:1c:fe:3b:d0:
2b:27:f6:7b:1b:44:3d:29:9f:0b:5a:00:9e:6d:5b:0b:28:fb:
54:6d:32:29:bb:34:3a:fb:d0:18:fc:c5:fb:41:33:50:d2:a0:
6f:46:60:81:c9:2d:9e:14:e8:c0:69:ef:4b:79:2f:01:1a:ce:
2b:dc:44:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:33 2026 by rpki-client