Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/O1_wUijdkUnhfNNSqA2HmfU7NoM.roa
File: O1_wUijdkUnhfNNSqA2HmfU7NoM.roa (raw, json)
Hash identifier: YPe/MGGFEUUBlyFEL2bcnbcftehgD8So60aDYQncEEI=
Subject key identifier: 3B:5F:F0:52:28:DD:91:49:E1:7C:D3:52:A8:0D:87:99:F5:3B:36:83
Certificate issuer: /CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Certificate serial: 019F236891E841B2BC380B33AEFD54D16962
Authority key identifier: 9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/O1_wUijdkUnhfNNSqA2HmfU7NoM.roa
Signing time: Thu 02 Jul 2026 15:18:03 +0000
ROA not before: Thu 02 Jul 2026 15:18:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201426
IP address blocks: 195.184.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:91:e8:41:b2:bc:38:0b:33:ae:fd:54:d1:69:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Validity
Not Before: Jul 2 15:18:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b5ff05228dd9149e17cd352a80d8799f53b3683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3d:5b:ec:47:40:5b:b6:1f:6b:e6:27:da:f0:
fb:00:64:61:a9:1a:a7:13:ba:a3:d1:b6:69:49:8d:
ad:6a:7d:99:7f:0b:b3:89:47:57:d2:e4:9e:56:e5:
73:2a:6b:55:e1:3b:6e:57:86:18:fe:2e:48:28:b3:
14:d0:12:8d:a8:8f:9b:69:d4:ec:99:d7:b4:a6:a4:
5f:b2:46:74:77:ab:76:94:bf:ba:c1:8c:90:64:2f:
b8:f7:fa:6b:b1:6e:15:1a:4b:07:b5:cb:ab:b2:6e:
57:6b:51:85:66:51:b1:9b:87:83:a6:06:50:c9:05:
32:4f:50:c1:aa:5c:25:9d:23:81:60:94:73:f3:09:
c7:c6:86:f3:19:23:77:63:59:e3:e3:3f:83:b5:aa:
b1:45:21:d9:d1:9a:2e:38:8c:11:ff:51:fa:75:8e:
ac:22:c0:c7:21:cd:92:80:73:98:29:ac:f7:5f:84:
6f:21:e2:85:07:96:9c:72:5d:49:a1:16:f5:10:f5:
0b:8d:0f:fc:80:38:0a:78:57:84:02:fb:c3:61:cf:
8a:fd:66:f9:ee:ae:6a:50:02:3c:10:4d:fb:e0:76:
60:78:a3:02:da:98:94:17:9b:7b:94:e5:07:3b:e8:
76:8f:e1:9e:ad:31:bd:2d:d6:23:c1:7d:46:4c:9b:
f9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5F:F0:52:28:DD:91:49:E1:7C:D3:52:A8:0D:87:99:F5:3B:36:83
X509v3 Authority Key Identifier:
keyid:9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/O1_wUijdkUnhfNNSqA2HmfU7NoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.184.73.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:8d:ed:ac:fc:7c:fe:57:ef:39:46:c9:43:7c:9d:42:85:35:
79:02:66:98:00:3a:aa:0b:3c:08:cd:35:c2:a0:3b:ac:f6:d0:
ad:5c:5d:58:0f:11:06:7b:02:da:ee:c1:f0:dc:f4:47:d5:6c:
48:c5:b5:da:ac:e6:39:fe:4b:44:6a:5c:ce:e6:ef:e7:02:f8:
6c:8a:67:c8:43:62:89:a3:2f:7e:5b:be:b5:95:72:52:04:53:
ec:af:37:ce:74:08:37:09:70:40:e8:77:c1:f1:75:c1:b3:b6:
7d:2f:45:66:5c:bb:df:1c:f2:32:7b:0c:87:6e:1b:79:35:c1:
e2:46:40:16:64:78:e8:4d:b4:99:fb:d4:56:5a:48:13:73:a9:
ac:23:54:21:d0:76:82:72:ff:16:30:fe:07:11:be:fa:45:1b:
38:8d:f7:dc:d4:54:d3:5e:92:4d:4a:be:d5:df:87:0d:78:09:
d7:1e:52:bf:b3:ab:1b:31:35:af:e6:68:6d:d9:31:8e:42:83:
ce:d3:a6:55:79:bf:e2:8e:86:bc:cc:f5:5c:da:83:65:6c:fa:
ab:3b:89:17:b9:6d:2f:a5:4c:67:07:2e:da:47:92:2a:91:19:
4a:9b:05:55:2a:b5:c7:58:f5:38:ca:c2:76:07:4c:1a:1c:d5:
fa:8b:3c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 08:45:16 2026 by rpki-client