Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/3OQGKi2yEQLluY9a4w7by9vEGoo.roa
File: 3OQGKi2yEQLluY9a4w7by9vEGoo.roa (raw, json)
Hash identifier: 3V+WG2AvwjKFm44wV8J0ADqQ7/XrLRRtdCze/Kc9N20=
Subject key identifier: DC:E4:06:2A:2D:B2:11:02:E5:B9:8F:5A:E3:0E:DB:CB:DB:C4:1A:8A
Certificate issuer: /CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Certificate serial: 019FF5AAFBBBDA5106FF2AA404DDAA645899
Authority key identifier: 8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/3OQGKi2yEQLluY9a4w7by9vEGoo.roa
Signing time: Wed 12 Aug 2026 11:10:51 +0000
ROA not before: Wed 12 Aug 2026 11:10:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 195.238.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:aa:fb:bb:da:51:06:ff:2a:a4:04:dd:aa:64:58:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Validity
Not Before: Aug 12 11:10:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dce4062a2db21102e5b98f5ae30edbcbdbc41a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3a:70:79:4e:e7:6d:ea:e5:bb:1c:63:b3:b2:
6a:7b:08:77:40:14:f4:26:15:ff:eb:f5:92:74:68:
1c:52:b6:f3:20:b9:69:99:94:47:b9:59:c9:79:c4:
0f:b9:dd:0b:77:ca:8f:74:e8:eb:60:54:61:49:79:
ec:c7:ec:ac:29:9d:76:07:28:b6:c7:ce:8b:ae:19:
9d:a2:26:17:47:75:d4:3a:b8:a4:37:da:f2:1e:34:
2e:21:d6:09:0f:5d:07:09:7d:e6:af:4d:43:e9:68:
f1:1e:7d:c8:fc:3b:28:4c:a3:79:b5:e8:ed:80:c2:
e1:c9:47:0e:29:ba:ca:1e:7c:c6:51:60:e9:ed:10:
37:3a:c8:a4:f1:73:29:83:07:83:91:57:ac:d6:50:
ef:e7:1b:a0:0c:1e:c0:33:bd:17:14:d5:fd:6f:70:
97:10:6f:a0:37:bb:53:e3:ba:5d:c4:b1:99:00:a4:
67:d3:54:60:81:a7:98:bd:13:55:3c:9e:93:eb:5c:
0a:f7:79:95:fe:15:a1:47:2a:12:58:07:32:9f:0c:
64:16:70:f6:14:f8:65:2c:ee:2b:b2:c2:ad:33:08:
29:34:2c:5a:19:24:eb:97:54:03:f8:6b:77:8d:d6:
6b:96:04:af:78:7a:6c:53:27:dc:1c:b6:4a:32:e3:
15:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E4:06:2A:2D:B2:11:02:E5:B9:8F:5A:E3:0E:DB:CB:DB:C4:1A:8A
X509v3 Authority Key Identifier:
keyid:8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/3OQGKi2yEQLluY9a4w7by9vEGoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.99.0/24
Signature Algorithm: sha256WithRSAEncryption
64:5a:21:35:e5:8c:0e:9f:30:3a:c6:8a:24:bf:b3:ac:2f:7f:
ce:e7:c5:fe:69:56:aa:c5:e8:29:b5:4b:fe:48:a2:16:3f:eb:
17:0c:bb:fe:3d:e5:ac:77:d8:21:0b:a3:2d:c6:4f:9c:6c:1c:
f0:2c:c0:0e:93:31:a7:79:e3:57:b9:f0:0c:9b:15:a8:7c:69:
55:16:83:83:32:1b:36:e8:c4:1a:64:dd:52:50:56:d1:2e:f4:
52:85:f9:f6:4f:2b:fe:0d:45:97:d9:a1:20:6c:92:6b:7c:10:
4d:80:21:4f:6e:82:34:70:9e:76:b4:ef:e5:7e:80:ef:e0:63:
a1:af:99:9d:d0:8b:15:67:b3:27:b2:45:0f:d0:71:60:23:72:
b0:18:a3:a7:69:0b:30:68:01:29:d8:fa:df:4d:ed:4d:98:a8:
8b:08:3c:23:c8:28:28:9a:a9:26:76:6d:b0:76:53:55:ea:e8:
75:e9:f9:e7:ea:f0:95:99:1a:05:0e:15:36:51:3d:01:b7:24:
4d:e1:fc:5d:d3:f5:ed:a1:89:36:4d:3c:75:2f:76:5e:c1:30:
58:c3:65:b0:a6:b1:c6:83:3b:e4:dd:11:78:64:aa:c6:14:99:
81:3f:6c:32:07:2f:92:62:9f:87:52:a3:05:a3:6e:60:8a:57:
f8:40:33:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:52:12 2026 by rpki-client