Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/Og-5zJ_ffVwWp_P12R4MedKsFnc.roa
File: Og-5zJ_ffVwWp_P12R4MedKsFnc.roa (raw, json)
Hash identifier: weh/jk4Ior1YsJThb7qxCkRz4+I3ZVN/BDqO1luSjqk=
Subject key identifier: 3A:0F:B9:CC:9F:DF:7D:5C:16:A7:F3:F5:D9:1E:0C:79:D2:AC:16:77
Certificate issuer: /CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Certificate serial: 019F23690ECE3C5A4774CBF41095903E56AE
Authority key identifier: 5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/Og-5zJ_ffVwWp_P12R4MedKsFnc.roa
Signing time: Thu 02 Jul 2026 15:18:35 +0000
ROA not before: Thu 02 Jul 2026 15:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214036
IP address blocks: 89.187.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 19:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0e:ce:3c:5a:47:74:cb:f4:10:95:90:3e:56:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Validity
Not Before: Jul 2 15:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a0fb9cc9fdf7d5c16a7f3f5d91e0c79d2ac1677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:33:eb:7c:33:11:f7:3f:06:71:83:7c:02:07:
61:30:cf:48:0f:56:7a:b9:d7:95:06:4b:db:9d:78:
35:45:48:ae:1a:9b:39:4f:c5:07:09:3b:74:3e:a1:
28:bd:58:85:25:87:84:a2:ee:2c:69:5d:49:0c:10:
50:69:a0:18:48:3b:a8:59:07:ed:ed:ed:1e:f2:72:
56:1c:b2:cc:ce:10:ee:14:b5:62:c4:bf:18:49:46:
ea:f3:eb:b6:35:43:50:32:61:46:fa:4d:19:82:1d:
ac:4c:56:72:e0:c7:19:eb:1f:16:be:de:31:76:4e:
3e:d3:c5:3c:e1:bb:8c:f7:64:a1:a7:56:6a:78:91:
a4:95:83:b3:8b:3b:e1:35:cc:c2:c5:48:2b:84:79:
17:c1:ce:ff:00:4f:c5:8b:7f:95:fd:66:6e:e0:c3:
1e:cf:94:2b:4e:0a:22:91:fe:86:2c:da:7c:49:e9:
21:fc:ca:d8:2d:10:11:bf:09:58:49:46:0c:cf:2c:
05:f0:5d:2a:84:6f:5c:7d:9d:7f:6a:c6:84:04:fe:
8a:20:13:12:44:ef:f5:3b:fb:c1:d2:ee:69:87:0c:
18:a3:9c:09:76:7a:22:d7:2c:db:44:02:cc:06:cf:
89:3a:a0:79:0f:8e:35:f5:0f:67:66:7c:93:af:d1:
52:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0F:B9:CC:9F:DF:7D:5C:16:A7:F3:F5:D9:1E:0C:79:D2:AC:16:77
X509v3 Authority Key Identifier:
keyid:5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/Og-5zJ_ffVwWp_P12R4MedKsFnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.25.0/24
Signature Algorithm: sha256WithRSAEncryption
19:c5:d4:23:f4:c7:02:af:6c:2c:26:2d:14:3d:1f:9c:5e:ad:
34:59:0a:31:43:9b:81:03:b2:4f:b1:d7:a0:29:eb:f2:67:9f:
4c:1f:c0:30:00:3b:75:cf:de:e0:8a:ee:fb:ff:e5:f3:07:8f:
43:f4:07:fb:5f:da:5e:24:e7:27:4e:b2:01:f7:19:95:39:3b:
fc:5b:ad:5f:97:f9:ea:bd:cc:be:0a:48:f7:ae:00:d1:c4:08:
39:29:aa:1d:18:70:dc:23:c1:a6:0b:41:95:46:1a:7b:41:e9:
97:3e:eb:64:5c:70:63:22:0f:91:9c:2d:e7:62:c8:11:fb:51:
de:21:67:e7:44:ec:6c:69:46:c9:da:c5:ef:2e:2d:f3:9e:be:
03:46:7c:a3:1f:04:15:7d:12:92:c6:e9:ea:e0:7b:e3:0f:13:
65:e5:d3:dc:e9:10:53:f8:d7:52:95:20:c6:41:6a:7f:80:7f:
ee:8f:b8:54:49:64:bc:31:95:34:b3:7d:c2:1f:39:bc:e9:da:
a0:96:41:a6:73:61:81:c8:0b:00:b2:d2:3e:88:48:6f:31:4f:
d9:7f:9c:01:23:aa:15:77:d4:92:7e:2e:01:f5:7a:f4:56:67:
0b:e2:7c:28:c1:54:38:bf:26:02:f5:0a:99:4d:d0:ae:aa:94:
55:9b:50:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 00:09:16 2026 by rpki-client