Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ogEqZMZbyVureFd2OGlT4QAAUrU.roa
File: ogEqZMZbyVureFd2OGlT4QAAUrU.roa (raw, json)
Hash identifier: YAwjE2vpuA0G9dDb5kaY+Ku8AfSRn9KXV8shet1OweY=
Subject key identifier: A2:01:2A:64:C6:5B:C9:5B:AB:78:57:76:38:69:53:E1:00:00:52:B5
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019FE12D041DBE53B8628D9ED8E2D1FB9BF6
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ogEqZMZbyVureFd2OGlT4QAAUrU.roa
Signing time: Sat 08 Aug 2026 11:40:51 +0000
ROA not before: Sat 08 Aug 2026 11:40:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213702
IP address blocks: 31.207.7.0/24 maxlen: 24
89.125.13.0/24 maxlen: 24
89.125.37.0/24 maxlen: 24
89.125.43.0/24 maxlen: 24
89.125.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e1:2d:04:1d:be:53:b8:62:8d:9e:d8:e2:d1:fb:9b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 8 11:40:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2012a64c65bc95bab785776386953e1000052b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:41:fe:2a:7e:82:78:d5:88:5d:3f:06:e3:b6:
63:b5:81:39:c2:97:20:3f:f7:ae:ea:d6:f1:c5:fa:
ea:53:ee:18:cd:6b:4b:83:21:5a:07:8c:ae:af:d1:
af:44:ea:c1:95:4d:5c:30:90:d2:e2:e3:ad:ad:92:
1d:c6:31:f8:3c:ab:c3:e9:01:89:69:40:97:76:42:
1d:29:ba:ca:d7:a5:20:d7:22:7f:a2:17:16:73:66:
cb:27:af:72:f7:d7:18:91:2a:c6:b9:64:1e:40:b9:
db:e6:4b:00:84:23:b3:be:51:4c:4c:f4:0b:7a:18:
f2:1e:00:1a:99:7e:07:df:7f:3e:4d:4a:ad:67:2f:
82:07:a3:aa:d6:71:cb:1d:5b:f8:d0:a2:b5:ed:de:
20:bf:9b:3d:cb:8c:b0:5d:5b:c2:76:18:52:08:ee:
b8:2d:e8:eb:ca:88:2c:63:da:fd:37:bb:70:d3:a6:
1f:03:f4:fe:cc:ff:b4:2a:da:4f:ee:db:ef:88:8b:
03:53:b5:58:eb:f8:15:bc:2b:49:b7:dd:3e:98:7a:
a9:dd:cf:9b:ac:5f:07:e0:3a:76:62:61:da:01:75:
7a:33:64:32:66:5c:74:7f:b5:93:c9:b3:48:91:dc:
11:a9:42:2f:ab:9a:98:d8:c4:ef:7a:8d:24:9a:42:
22:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:01:2A:64:C6:5B:C9:5B:AB:78:57:76:38:69:53:E1:00:00:52:B5
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ogEqZMZbyVureFd2OGlT4QAAUrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.207.7.0/24
89.125.13.0/24
89.125.37.0/24
89.125.43.0/24
89.125.48.0/24
Signature Algorithm: sha256WithRSAEncryption
97:5e:11:f9:80:84:b5:ae:88:1c:21:87:8b:b5:32:ff:d6:0a:
c4:d1:8b:27:af:98:62:f7:bc:4c:8f:8f:e4:7b:0f:18:9e:ee:
c0:04:d6:0c:37:77:88:71:20:bd:c8:ee:ee:4a:f4:c4:7b:50:
3a:b4:3b:20:a6:42:91:4e:1f:c4:23:fd:49:a6:9f:80:f7:08:
9b:2f:32:a1:07:21:17:c5:96:58:e6:a9:36:b5:24:04:fa:b0:
80:71:3f:37:0d:8f:83:b1:31:94:02:26:89:13:c8:2a:d8:4f:
8c:33:b0:52:b9:f5:22:97:4e:06:87:08:26:14:36:94:8f:06:
11:e5:56:22:97:47:aa:00:b8:2f:a0:c7:a8:a0:9a:54:5c:29:
3f:e6:d3:ba:ba:25:f5:5f:75:da:3c:b2:7d:cd:3b:16:ed:99:
d7:0d:59:66:12:fe:a3:b8:4b:82:12:ef:d1:d5:cd:c8:62:bf:
98:01:b5:45:aa:62:45:50:ff:c2:1e:56:d5:5e:73:8e:c4:09:
0b:04:f9:ae:19:c4:5d:c0:5f:61:13:cf:f8:f6:fe:7b:19:e3:
a4:71:dd:03:b5:8e:1b:aa:a7:b4:09:8d:cd:70:fb:7e:70:09:
11:a6:17:91:bc:c0:cb:0f:2c:e6:85:2d:48:81:bc:3e:82:b0:
83:cb:f7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:23:32 2026 by rpki-client