Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/dOH2Swi-EI1bGKqjtPsLcUa9PnM.roa
File: dOH2Swi-EI1bGKqjtPsLcUa9PnM.roa (raw, json)
Hash identifier: 2uMrxTRrZKBm5w9QVdyqQ0PMfu0UrouZnk+izTYWJdM=
Subject key identifier: 74:E1:F6:4B:08:BE:10:8D:5B:18:AA:A3:B4:FB:0B:71:46:BD:3E:73
Certificate issuer: /CN=3972c3a9dd4f8e006b3b5ff891b4a3761edce413
Certificate serial: 019F2369222D8D46212771AD3AE5EB843CC7
Authority key identifier: 39:72:C3:A9:DD:4F:8E:00:6B:3B:5F:F8:91:B4:A3:76:1E:DC:E4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXLDqd1PjgBrO1_4kbSjdh7c5BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/dOH2Swi-EI1bGKqjtPsLcUa9PnM.roa
Signing time: Thu 02 Jul 2026 15:18:40 +0000
ROA not before: Thu 02 Jul 2026 15:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41696
IP address blocks: 89.221.176.0/20 maxlen: 24
2a02:e28::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/OXLDqd1PjgBrO1_4kbSjdh7c5BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/OXLDqd1PjgBrO1_4kbSjdh7c5BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXLDqd1PjgBrO1_4kbSjdh7c5BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 09:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:22:2d:8d:46:21:27:71:ad:3a:e5:eb:84:3c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3972c3a9dd4f8e006b3b5ff891b4a3761edce413
Validity
Not Before: Jul 2 15:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74e1f64b08be108d5b18aaa3b4fb0b7146bd3e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3f:9e:76:c3:e5:f2:f5:f3:6e:1b:76:61:a1:
55:5a:3b:e0:6b:8d:50:65:93:33:c6:49:05:77:a9:
13:79:7d:6a:fa:35:46:9c:ef:4f:a2:3c:31:bc:22:
ea:76:27:e8:ce:4e:2a:d1:a7:4e:da:93:8d:69:45:
2a:89:5f:88:4f:13:ee:50:73:a6:90:07:35:80:a4:
8f:92:e8:e7:e7:51:8b:5e:fa:76:65:21:fc:ca:c9:
02:f4:57:fc:68:6e:d5:1a:d3:9e:c4:85:11:42:c7:
8c:bb:6a:ad:85:25:cc:00:bb:3b:b6:a7:5c:b8:4f:
34:7b:ee:7f:83:d9:85:1e:f6:4d:7f:0f:2d:0a:19:
24:58:1c:7f:2c:29:e3:ea:12:3e:c1:05:5b:1e:1d:
7c:de:d6:dd:9b:8c:72:88:b7:a8:31:06:5c:a3:b8:
17:8b:79:6e:e0:3e:a1:f4:7a:9f:73:26:ba:e8:14:
0c:c9:a3:ae:15:0d:13:e9:96:9e:cc:c5:96:35:cd:
65:f2:72:46:0e:55:30:16:a0:67:3a:4e:64:15:fa:
37:02:35:00:1a:33:a7:97:65:18:fc:95:56:f4:66:
33:a8:b8:43:d2:47:b2:41:79:16:58:de:1d:3d:f6:
04:fb:a0:4e:54:e6:85:89:e0:7b:0b:03:29:71:2e:
3b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E1:F6:4B:08:BE:10:8D:5B:18:AA:A3:B4:FB:0B:71:46:BD:3E:73
X509v3 Authority Key Identifier:
keyid:39:72:C3:A9:DD:4F:8E:00:6B:3B:5F:F8:91:B4:A3:76:1E:DC:E4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXLDqd1PjgBrO1_4kbSjdh7c5BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/dOH2Swi-EI1bGKqjtPsLcUa9PnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/OXLDqd1PjgBrO1_4kbSjdh7c5BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.221.176.0/20
IPv6:
2a02:e28::/32
Signature Algorithm: sha256WithRSAEncryption
2d:3f:3f:f2:f9:75:cd:78:79:38:9b:a1:37:c3:26:e0:b3:0e:
f4:67:c7:5a:2f:7a:41:02:0a:98:50:9e:b7:78:21:f8:0c:8f:
22:d6:5b:6c:88:4d:69:6f:b4:21:08:6a:d3:be:06:85:4d:7e:
f1:ee:09:c5:1d:34:04:7e:a0:d0:a1:87:be:27:b0:a1:38:60:
63:e3:3c:e1:f1:8a:9a:de:ee:68:7f:4c:1b:6a:c8:79:96:f9:
61:da:a1:fb:c4:a3:7b:52:df:67:0d:90:3b:e5:f1:2a:6d:b9:
86:3a:b8:84:30:61:df:bd:28:79:93:44:a8:a6:ad:08:87:b9:
8f:73:3d:ba:36:69:be:b1:1d:aa:b3:7b:06:be:d1:86:26:49:
70:07:f9:52:c9:cb:f7:d8:b0:9f:06:c1:a5:d7:85:73:aa:8f:
14:8e:2e:b6:d7:c2:23:32:b2:f7:d8:61:b6:f4:3a:f5:9b:b6:
3a:d4:0c:88:52:8a:53:0b:07:99:21:7a:dc:4d:6a:cb:3e:5d:
9d:1f:f5:9d:32:f8:73:f9:98:b8:73:03:7e:30:e2:49:4f:a8:
84:e1:25:7f:9c:15:c5:90:6e:dc:4a:23:df:c3:b0:c4:ff:2c:
4a:b7:e7:fd:d0:9b:c4:08:fb:00:18:d2:c2:0e:ea:4c:ea:6f:
e1:20:c1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:09:59 2026 by rpki-client