Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/OesZpvhT-oO994A_4tv5DJqvWfU.roa
File: OesZpvhT-oO994A_4tv5DJqvWfU.roa (raw, json)
Hash identifier: B7UJAtlP/vyW0WOdCEGlZbPav3sjUZXMiDGA9Xb+jNU=
Subject key identifier: 39:EB:19:A6:F8:53:FA:83:BD:F7:80:3F:E2:DB:F9:0C:9A:AF:59:F5
Certificate issuer: /CN=b9762db1282ffd084761232038f81f5d29e640d5
Certificate serial: 01A0C4ABC736D9FB01A015FC99BE614E3C1D
Authority key identifier: B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/OesZpvhT-oO994A_4tv5DJqvWfU.roa
Signing time: Mon 21 Sep 2026 15:53:07 +0000
ROA not before: Mon 21 Sep 2026 15:53:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 185.139.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:ab:c7:36:d9:fb:01:a0:15:fc:99:be:61:4e:3c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9762db1282ffd084761232038f81f5d29e640d5
Validity
Not Before: Sep 21 15:53:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39eb19a6f853fa83bdf7803fe2dbf90c9aaf59f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f9:d0:3c:a7:5c:89:ee:ed:ac:b5:4a:0a:8b:
bc:5e:31:92:d1:0f:14:86:f6:e7:2c:c9:a9:25:bb:
60:a8:05:ea:9e:bd:51:a8:03:15:d2:d4:2d:53:c5:
78:68:c3:2b:01:4a:ed:3c:35:d4:be:15:e1:ea:e9:
de:d2:33:e5:6c:3b:f5:30:95:bd:12:c6:cc:db:e3:
40:48:2e:08:1c:e9:51:0e:fa:79:4e:e7:a0:83:42:
22:55:ae:22:12:4b:23:fa:60:b3:c9:5c:94:4b:8f:
6a:4c:8c:56:6e:94:24:3a:38:c1:55:7d:5f:90:21:
e4:c2:32:a1:3a:c4:90:1a:6c:08:1c:87:c4:23:8c:
a4:0e:1c:5d:ba:a6:19:81:ba:de:77:29:d3:f0:1b:
1c:1c:0d:54:8a:c4:03:f2:8f:a2:10:16:56:fa:2e:
45:1a:65:39:08:2a:6b:c9:13:4c:68:c0:67:00:cd:
33:01:74:51:71:31:de:d4:02:e7:03:7c:ed:66:1d:
e5:be:cc:14:03:0e:f2:0b:fa:49:c7:71:12:d4:95:
96:a9:e3:a2:45:e8:b3:57:d9:15:1a:d8:62:ce:93:
d8:5c:50:2a:7f:45:7a:ea:99:cc:f3:0c:10:c6:6b:
78:e7:c6:33:b1:74:92:af:bd:79:3e:29:17:7e:84:
35:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:EB:19:A6:F8:53:FA:83:BD:F7:80:3F:E2:DB:F9:0C:9A:AF:59:F5
X509v3 Authority Key Identifier:
keyid:B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/OesZpvhT-oO994A_4tv5DJqvWfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.35.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:43:89:b8:b5:65:b5:27:50:f9:0a:5a:f3:cb:8e:f8:ec:d1:
c5:71:c4:63:dd:4c:46:83:18:7d:92:67:54:f1:47:ff:0e:11:
b2:fd:57:de:cc:98:85:ac:49:4f:17:0a:6c:41:7a:09:9b:d0:
ab:c8:9a:ca:26:0f:7c:1c:94:9a:71:f6:7f:d9:fa:d5:df:84:
b3:d2:51:37:c3:f7:46:77:72:78:9d:4e:7d:00:fa:e2:88:70:
25:dd:28:61:1b:b5:45:e2:c0:ac:82:89:ab:1b:eb:2c:ef:53:
2e:da:ef:b3:45:aa:e2:28:97:47:eb:58:45:0a:7a:5f:9e:26:
c5:a8:ed:89:b1:23:85:c2:f2:39:2a:57:ce:7a:cb:08:66:76:
be:76:b6:29:cf:24:81:ae:97:cf:f6:21:69:2a:64:54:35:f6:
2f:6d:90:16:a6:d5:c6:72:b0:cf:28:b9:e4:77:a3:db:1e:23:
72:18:6d:71:0b:5a:32:ea:d8:f1:05:5b:cd:bd:56:7c:af:87:
91:80:97:71:34:3a:84:0e:a2:44:eb:2a:ca:ac:a9:e3:25:f7:
7c:b3:d6:4b:24:b5:73:30:c0:e1:0c:7c:f1:74:7b:5e:13:97:
15:b5:49:0a:55:cf:a7:37:21:18:82:10:8c:6e:14:b7:77:b2:
29:43:69:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 13:34:26 2026 by rpki-client