Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/OzlTlRoWn5cc25-dXVQJqnuNVWI.roa
File: OzlTlRoWn5cc25-dXVQJqnuNVWI.roa (raw, json)
Hash identifier: gpwe7PSf4ZMGqja8Dph79jtivNxj0CXuECLccBRZLj4=
Subject key identifier: 3B:39:53:95:1A:16:9F:97:1C:DB:9F:9D:5D:54:09:AA:7B:8D:55:62
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019FEBD549F6E1DA95A02A3982E68D2C4706
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/OzlTlRoWn5cc25-dXVQJqnuNVWI.roa
Signing time: Mon 10 Aug 2026 13:20:51 +0000
ROA not before: Mon 10 Aug 2026 13:20:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395793
IP address blocks: 185.193.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:d5:49:f6:e1:da:95:a0:2a:39:82:e6:8d:2c:47:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 10 13:20:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b3953951a169f971cdb9f9d5d5409aa7b8d5562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:22:77:d9:4a:e1:98:38:f1:03:e0:8f:2b:64:
df:c1:3a:13:63:e2:75:ad:e6:e6:34:ad:5c:11:e1:
03:d5:c2:b1:18:03:3c:65:91:62:ef:11:fe:1d:22:
dd:ec:5a:68:b6:39:e5:39:93:a1:21:f7:88:e6:8a:
bc:79:cc:39:f2:10:3e:f4:ef:1f:6c:a2:60:7d:48:
8b:25:75:9f:56:21:75:22:24:5f:93:1a:5f:7e:a2:
4c:b6:e5:a0:52:a4:df:3c:a6:22:2e:cb:5a:a6:00:
c8:17:0c:04:df:7a:33:b9:fb:95:e4:1a:22:a8:1a:
53:57:bf:c6:81:f7:6f:6f:e2:45:04:e5:db:5a:50:
08:62:47:5d:2a:1d:f5:6a:e4:88:75:cd:7d:91:4f:
27:85:c9:ea:7b:76:c4:ea:63:ca:c7:63:31:1a:bf:
19:e9:9d:f2:55:1f:11:a3:b6:57:6d:e1:69:2e:be:
a3:81:98:2a:af:fe:90:f9:43:fc:89:9f:fd:81:0d:
e0:81:42:0c:8f:b4:9b:2b:96:c5:84:f0:99:e2:ff:
72:33:69:aa:ec:13:f6:b9:78:2c:06:fc:ad:96:75:
77:4a:d9:35:78:ce:11:0f:ae:f2:b8:7d:74:b3:f1:
d2:e5:75:1d:6d:08:df:8c:03:01:d4:1c:68:38:88:
d2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:39:53:95:1A:16:9F:97:1C:DB:9F:9D:5D:54:09:AA:7B:8D:55:62
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/OzlTlRoWn5cc25-dXVQJqnuNVWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.103.0/24
Signature Algorithm: sha256WithRSAEncryption
59:d2:3b:2c:e0:51:11:a6:6b:dc:a2:f5:cb:4d:91:04:6c:e2:
69:78:d4:e5:6f:e6:62:e3:b3:fd:dc:da:ab:d5:02:9a:e9:43:
7c:1d:5d:4a:40:0d:7f:55:3f:70:77:fd:22:24:e5:65:8f:23:
b7:48:35:5d:d3:e2:04:07:6d:05:b0:31:0b:d9:e1:55:be:4a:
05:a2:d0:74:58:d9:12:54:2f:46:a9:7d:97:d6:ed:49:ae:1c:
3a:aa:ef:aa:e6:f4:9e:4d:d4:a4:e8:7e:0f:25:f4:ea:78:99:
bb:24:cb:e5:d4:5e:37:2e:82:90:f8:98:82:86:65:72:6d:b0:
65:6d:a2:72:0a:5b:64:29:39:d9:b1:0b:12:55:9f:01:e0:af:
60:3d:48:12:36:3f:0a:10:0f:40:5c:88:89:5b:c9:72:f9:0c:
2f:2d:3a:49:e2:c5:91:51:f7:90:16:e9:de:7e:bf:d0:cd:6d:
c5:1d:c3:2d:e7:ae:e6:a3:0e:d0:fe:d2:da:f2:35:84:90:4c:
37:d1:e5:20:d6:be:32:3b:35:c2:0d:be:c7:89:00:95:ad:c9:
ac:a0:bf:4d:85:e1:d5:0b:c8:3a:e5:a8:8a:0e:bf:cd:f5:7f:
f8:9e:89:12:3b:6b:76:12:e3:a2:64:7e:8b:eb:73:c0:f9:99:
6f:76:84:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:52:10 2026 by rpki-client