Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/ovKU-7fIoHEbxGnC8uK3B7AE7ls.roa
File: ovKU-7fIoHEbxGnC8uK3B7AE7ls.roa (raw, json)
Hash identifier: 0NX/3qhIuInCzT512TWVoFDQGXKd3nViP8eLecNLz/c=
Subject key identifier: A2:F2:94:FB:B7:C8:A0:71:1B:C4:69:C2:F2:E2:B7:07:B0:04:EE:5B
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 019FC65AD3100712F185312A6F6F8F71650F
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/ovKU-7fIoHEbxGnC8uK3B7AE7ls.roa
Signing time: Mon 03 Aug 2026 06:41:08 +0000
ROA not before: Mon 03 Aug 2026 06:41:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 93.89.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:5a:d3:10:07:12:f1:85:31:2a:6f:6f:8f:71:65:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Aug 3 06:41:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2f294fbb7c8a0711bc469c2f2e2b707b004ee5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2c:a7:f0:05:ef:85:6f:0d:07:73:5f:57:43:
06:d5:8e:01:79:fc:ec:2f:de:e7:55:5a:6e:a1:35:
86:51:14:6e:4e:c2:51:b4:89:04:7c:7d:8e:a5:2a:
d1:61:b8:88:2c:77:d1:89:60:ae:a9:ea:2e:a8:f6:
08:d3:c7:c2:4b:22:7e:db:95:77:d1:75:74:aa:09:
25:c9:d1:b2:45:17:35:26:38:8d:37:a0:4a:3a:59:
07:c9:ed:f6:91:01:bf:b3:d9:4f:dc:10:9f:40:db:
fa:32:8f:82:13:81:94:ba:dc:01:3e:36:b8:cf:ff:
71:dd:cf:19:74:23:88:fd:f3:a9:1b:b1:0d:e4:a0:
32:db:1e:11:74:74:0c:97:69:1a:f3:77:34:54:f8:
11:49:36:ed:61:44:70:e2:a6:c5:bb:38:9e:b8:f9:
5e:e5:8c:2b:5d:14:a2:46:05:05:92:35:eb:9e:ca:
b7:f8:6a:a3:53:cf:00:33:19:ae:08:aa:77:9b:8d:
1b:cf:89:6b:f0:c7:3b:b6:86:af:f6:72:e4:1c:62:
32:83:f0:0b:12:d4:90:5e:ae:a6:eb:2b:fb:49:30:
60:6a:a8:99:1c:0e:f3:37:05:72:1b:59:e5:e9:1a:
be:9b:92:6b:99:07:f7:10:f1:15:71:fb:fa:2f:50:
36:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F2:94:FB:B7:C8:A0:71:1B:C4:69:C2:F2:E2:B7:07:B0:04:EE:5B
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/ovKU-7fIoHEbxGnC8uK3B7AE7ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.223.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:5e:ad:fb:5c:65:3c:64:7d:a1:64:9f:52:a4:4a:99:f1:df:
2b:f9:66:d8:86:f3:47:a5:5f:6f:c4:a2:aa:a9:5a:70:16:d3:
7b:27:73:e7:43:c1:91:a3:da:05:c7:39:6c:35:6f:b0:0d:d5:
c1:b6:37:e6:e5:54:14:68:ff:cf:1c:cf:63:6e:8b:da:75:ce:
40:4f:cb:86:e2:7d:39:32:e9:8f:0c:fa:5d:45:0a:d0:bb:10:
8c:c7:fd:c4:f5:f7:5f:bc:4a:dc:f5:d3:96:16:e1:55:c6:67:
be:0a:5a:e7:28:ac:5d:e4:3f:31:dd:32:d5:d1:7f:f5:d8:ce:
e6:4f:4d:ee:62:14:cf:ab:68:1b:79:c6:c7:60:43:64:ec:a8:
0a:6d:25:c0:ab:c7:90:80:b3:53:b4:e2:a7:11:ab:b6:d1:82:
b6:a9:f6:e4:01:fb:87:52:3b:17:49:16:42:bb:9e:92:59:86:
d7:0e:c4:16:bb:bd:2d:4e:24:0c:32:00:d2:88:90:26:b7:54:
42:8b:de:74:aa:49:dd:9c:00:5b:7e:c2:0f:de:0c:45:1a:f9:
26:b7:0f:47:33:94:8d:01:8a:70:0f:a1:30:ff:83:18:40:12:
94:b7:87:e9:b5:74:5b:76:cb:7f:48:28:38:b2:df:89:46:22:
57:1b:b9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 16:13:14 2026 by rpki-client