Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/9OOu_PgrH_h2NsGuxGEy-OCALZg.roa
File: 9OOu_PgrH_h2NsGuxGEy-OCALZg.roa (raw, json)
Hash identifier: tw2QdzPOYDjoJDh2pvrn7S3JCJnY6cTkV2C1q6vUcU4=
Subject key identifier: F4:E3:AE:FC:F8:2B:1F:F8:76:36:C1:AE:C4:61:32:F8:E0:80:2D:98
Certificate issuer: /CN=e1257eaabbf604d4570055c2cd8ac249bb29c106
Certificate serial: 019DB4773EC6A0F5E9368A4B30145964DAF6
Authority key identifier: E1:25:7E:AA:BB:F6:04:D4:57:00:55:C2:CD:8A:C2:49:BB:29:C1:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SV-qrv2BNRXAFXCzYrCSbspwQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/9OOu_PgrH_h2NsGuxGEy-OCALZg.roa
Signing time: Wed 22 Apr 2026 09:13:26 +0000
ROA not before: Wed 22 Apr 2026 09:13:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214467
IP address blocks: 193.22.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/4SV-qrv2BNRXAFXCzYrCSbspwQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/4SV-qrv2BNRXAFXCzYrCSbspwQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4SV-qrv2BNRXAFXCzYrCSbspwQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b4:77:3e:c6:a0:f5:e9:36:8a:4b:30:14:59:64:da:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1257eaabbf604d4570055c2cd8ac249bb29c106
Validity
Not Before: Apr 22 09:13:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4e3aefcf82b1ff87636c1aec46132f8e0802d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9e:8e:e8:46:1c:4d:81:c3:8c:05:34:43:cc:
34:89:2e:44:ef:a8:b8:6d:41:8a:d7:18:58:31:0a:
d8:04:05:e3:47:78:51:9a:da:df:3d:58:c3:22:5a:
17:6c:a5:06:81:40:4d:9e:84:6f:f6:df:c5:4c:19:
68:9c:05:1d:83:35:ed:98:a5:c9:8f:65:28:86:07:
60:6c:04:bc:ab:7b:d8:51:d6:4d:3d:96:2a:5e:c1:
35:bd:0c:94:c1:cf:fb:a9:63:c8:2c:41:18:eb:3a:
35:2a:2d:26:34:86:26:51:ad:e6:57:8b:e0:f0:9e:
d2:39:4e:52:54:84:17:9a:16:f2:8e:18:fe:50:53:
cb:04:b4:f3:7c:2f:62:19:ad:7f:c1:a4:bc:6d:34:
30:af:df:7e:a4:5f:92:7c:53:a4:ae:6c:14:f6:20:
d4:1c:a9:08:1a:44:9a:ba:4d:0f:f5:b2:b8:a9:78:
d9:2c:56:ac:ac:0d:3b:36:e7:52:c1:c0:46:9e:0b:
77:42:0c:b7:d6:14:a2:70:de:96:c4:fd:2b:32:a7:
31:b4:86:52:ec:2e:11:0e:a2:28:47:d3:3a:a4:b6:
ab:71:a3:dc:13:f3:ba:da:9a:e7:e3:ed:b3:32:84:
db:6f:02:cb:b0:ad:fc:ab:d7:9e:7e:e5:02:c1:93:
55:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E3:AE:FC:F8:2B:1F:F8:76:36:C1:AE:C4:61:32:F8:E0:80:2D:98
X509v3 Authority Key Identifier:
keyid:E1:25:7E:AA:BB:F6:04:D4:57:00:55:C2:CD:8A:C2:49:BB:29:C1:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SV-qrv2BNRXAFXCzYrCSbspwQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/9OOu_PgrH_h2NsGuxGEy-OCALZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/4SV-qrv2BNRXAFXCzYrCSbspwQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.162.0/24
Signature Algorithm: sha256WithRSAEncryption
07:1d:17:99:a7:2c:54:91:1e:a5:7d:66:a9:dd:de:a5:01:51:
13:68:1c:cb:f1:e9:ae:65:83:15:b4:fa:c7:2b:0a:63:a4:e0:
5e:cf:8f:26:54:96:5b:0d:0a:ca:2b:54:97:45:46:d3:d2:e5:
8d:47:d0:6c:25:9b:c2:d6:09:39:3f:04:77:7c:d6:7b:83:de:
b4:37:da:6f:b7:6b:bc:4e:f0:2d:90:c2:7a:13:cc:df:72:27:
48:ec:62:65:28:6d:ca:42:22:1f:90:df:aa:80:f1:00:55:47:
2c:68:47:2e:82:59:70:13:83:7d:68:f9:ea:c9:af:8a:fb:c1:
4f:d6:ba:1c:9f:e2:ae:05:e7:9f:35:4b:4f:3e:e4:b3:16:ef:
88:93:c6:3c:b2:4f:86:7d:12:98:21:9b:4b:c1:01:dd:de:9d:
ae:54:d2:a3:06:33:27:ed:fd:7e:e4:65:97:d8:8f:1f:72:01:
cc:62:8b:cd:c2:0a:f6:59:39:4e:3d:bc:cc:40:1d:38:18:53:
3a:d4:0d:df:e0:5e:9c:29:59:59:0d:91:4a:41:88:91:fb:1f:
e5:94:61:b8:ce:1d:29:38:6f:3b:ff:df:6c:55:01:23:f5:6a:
d0:14:2c:ee:52:18:be:aa:fb:59:11:9e:a6:62:a9:17:90:95:
17:c3:d6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 12:18:00 2026 by rpki-client