Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/1-OsNQ-5vJPgOeI_eWcWRJz9U2HU.roa
File: 1-OsNQ-5vJPgOeI_eWcWRJz9U2HU.roa (raw, json)
Hash identifier: w6u2qov7OdVcpuJ2RAOrKnYaPXgeHeSBBHrfoYU/V+I=
Subject key identifier: F8:EB:0D:43:EE:6F:24:F8:0E:78:8F:DE:59:C5:91:27:3F:54:D8:75
Certificate issuer: /CN=9a348d83aa63c0f81ce7195f8669e3b786c602a1
Certificate serial: 019DB9545DC38F96A634C3FD61A46D681F90
Authority key identifier: 9A:34:8D:83:AA:63:C0:F8:1C:E7:19:5F:86:69:E3:B7:86:C6:02:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjSNg6pjwPgc5xlfhmnjt4bGAqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/1-OsNQ-5vJPgOeI_eWcWRJz9U2HU.roa
Signing time: Thu 23 Apr 2026 07:53:27 +0000
ROA not before: Thu 23 Apr 2026 07:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 185.136.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/mjSNg6pjwPgc5xlfhmnjt4bGAqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/mjSNg6pjwPgc5xlfhmnjt4bGAqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mjSNg6pjwPgc5xlfhmnjt4bGAqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b9:54:5d:c3:8f:96:a6:34:c3:fd:61:a4:6d:68:1f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a348d83aa63c0f81ce7195f8669e3b786c602a1
Validity
Not Before: Apr 23 07:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8eb0d43ee6f24f80e788fde59c591273f54d875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1c:95:a8:06:5e:b8:29:a1:0c:3a:b8:da:5f:
74:41:28:42:ba:e1:f4:56:6e:37:17:c0:76:21:a2:
33:86:fa:af:70:9f:22:19:40:a7:e4:fc:cc:3a:b1:
22:fc:0b:f9:76:bd:3c:9f:15:3f:f4:a4:c5:58:c5:
d5:ea:33:09:31:2e:76:15:85:fe:d1:f1:87:63:7c:
e8:4d:1e:8f:5f:04:b2:70:49:cd:ab:aa:ea:62:ad:
a3:49:0b:0c:8f:00:27:8e:6a:87:e0:ea:fe:1d:07:
6e:c8:95:e6:a9:7c:34:ea:48:72:30:0c:a5:b1:d8:
8e:d4:b2:1e:7f:7f:9c:70:ae:66:b6:9b:93:03:35:
fa:ed:9b:d5:25:25:f7:63:ce:c3:70:47:ee:4f:ea:
11:d3:4d:52:7b:3e:f9:11:62:68:10:89:dc:dc:1a:
8a:2b:8c:6a:7f:2e:52:41:08:85:fa:47:45:d0:ff:
ad:c7:84:b3:36:c4:70:f7:d2:89:dd:c4:77:2d:e8:
fd:59:1e:5d:33:91:f0:48:06:1c:d5:08:cb:f2:eb:
b6:e5:e2:d4:68:1c:41:c9:38:be:c3:b8:9b:77:e3:
22:44:16:03:06:a0:13:33:ef:bd:cb:20:5a:0e:0f:
bd:74:87:9e:d0:3f:c4:c8:f6:13:d2:09:a3:ed:a9:
43:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EB:0D:43:EE:6F:24:F8:0E:78:8F:DE:59:C5:91:27:3F:54:D8:75
X509v3 Authority Key Identifier:
keyid:9A:34:8D:83:AA:63:C0:F8:1C:E7:19:5F:86:69:E3:B7:86:C6:02:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjSNg6pjwPgc5xlfhmnjt4bGAqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/1-OsNQ-5vJPgOeI_eWcWRJz9U2HU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/fca6c4-e2db-4b9b-ac31-73d8db4ed7db/1/mjSNg6pjwPgc5xlfhmnjt4bGAqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.242.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:ec:e4:7a:7b:2a:23:e9:f8:2a:4b:6e:41:2c:43:51:6a:4e:
cd:93:79:13:5b:7d:2c:9b:a2:f7:72:8a:6a:a5:4b:f6:6f:3d:
79:0e:ea:bd:79:2f:a8:bb:a1:05:70:85:63:4f:8f:3c:8d:2c:
19:7e:9b:de:85:59:47:ad:b7:14:a3:7f:5c:5b:77:97:39:ce:
50:e7:ad:0d:67:a7:31:b8:1a:16:b5:d1:9f:ba:93:84:69:ae:
99:10:66:83:ec:99:f6:bf:36:a5:86:40:e1:81:18:03:60:e6:
f2:a4:1c:4b:a0:d3:f7:bf:42:4b:d3:e5:3d:e5:66:89:12:17:
cd:46:d5:e8:80:b6:76:dd:61:a4:8c:f6:dc:fa:95:3f:34:3f:
6d:d7:f1:45:fa:37:95:59:a6:34:5d:c5:03:97:bf:a8:c0:b6:
6c:5a:17:3b:f4:cd:8c:34:7a:a0:c0:fe:46:5d:61:15:86:74:
80:46:97:3e:c2:10:52:da:5b:66:52:95:a3:ff:77:70:84:17:
56:00:7b:ab:4d:a0:ac:bd:5b:d2:5e:4b:c2:a0:49:e3:db:17:
c7:f8:8a:0d:87:a3:b3:3f:12:ac:9f:9e:2c:9a:fe:0f:22:9f:
9c:db:ac:ba:5d:db:75:0a:93:f1:78:d7:9f:79:ef:f3:17:30:
00:68:20:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:57:27 2026 by rpki-client