Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/70230f-5c0b-4308-ab4e-7af6282c2ce8/1/ou0GbJ1blaoMkgv99wOuI85TEgs.roa
File: ou0GbJ1blaoMkgv99wOuI85TEgs.roa (raw, json)
Hash identifier: oR49PdheVHE66AKe4AhTIFXe+kYWY/wSYwudCN274ZY=
Subject key identifier: A2:ED:06:6C:9D:5B:95:AA:0C:92:0B:FD:F7:03:AE:23:CE:53:12:0B
Certificate issuer: /CN=40a9639e023dfc893ec69da716b84ab5d64ea59c
Certificate serial: 019F363E8A2795ADE331866BC6E523A2EE47
Authority key identifier: 40:A9:63:9E:02:3D:FC:89:3E:C6:9D:A7:16:B8:4A:B5:D6:4E:A5:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKljngI9_Ik-xp2nFrhKtdZOpZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/70230f-5c0b-4308-ab4e-7af6282c2ce8/1/ou0GbJ1blaoMkgv99wOuI85TEgs.roa
Signing time: Mon 06 Jul 2026 07:04:56 +0000
ROA not before: Mon 06 Jul 2026 07:04:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6848
IP address blocks: 193.104.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/70230f-5c0b-4308-ab4e-7af6282c2ce8/1/QKljngI9_Ik-xp2nFrhKtdZOpZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/70230f-5c0b-4308-ab4e-7af6282c2ce8/1/QKljngI9_Ik-xp2nFrhKtdZOpZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QKljngI9_Ik-xp2nFrhKtdZOpZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:3e:8a:27:95:ad:e3:31:86:6b:c6:e5:23:a2:ee:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40a9639e023dfc893ec69da716b84ab5d64ea59c
Validity
Not Before: Jul 6 07:04:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2ed066c9d5b95aa0c920bfdf703ae23ce53120b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0e:6c:b6:d2:90:57:10:ee:17:dd:2f:c8:a2:
4e:ff:8a:b5:af:36:36:22:83:ac:37:b3:e7:50:1b:
7c:08:18:2b:a0:8d:ba:3b:ad:1b:f7:8e:66:89:86:
0b:03:63:f2:8e:f6:70:9f:67:c0:90:58:bd:09:32:
3d:78:c5:3a:85:85:39:de:a9:8a:a4:80:7f:83:91:
c0:6c:93:ef:b6:25:a4:1c:7e:8f:fb:3b:3d:db:af:
95:e5:02:fc:b1:d2:25:75:7c:35:9b:c1:be:b1:4a:
00:4c:46:fd:f4:03:c3:34:05:5e:c0:96:00:80:50:
42:98:86:8a:2b:f5:61:73:4c:f2:86:ba:7f:c8:92:
b2:f0:e9:d4:70:72:68:5b:a6:ba:03:a1:07:d3:9e:
51:4e:7d:00:61:52:8e:c6:5e:e3:35:81:82:b7:f5:
a7:92:c5:38:c7:dd:e8:54:37:17:1e:04:5c:81:c1:
c7:c3:09:2e:a9:e6:f6:fe:a7:b7:d2:e9:04:7d:ab:
98:af:d5:a5:9b:80:ab:78:5c:d8:fb:27:2b:79:30:
26:a0:48:1d:29:a9:be:f1:16:18:17:f3:c3:de:82:
0e:27:bf:50:c8:78:33:18:19:14:56:a1:e7:3d:11:
b4:fc:15:6c:89:4d:6c:20:e5:83:15:35:68:4b:e3:
f6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:ED:06:6C:9D:5B:95:AA:0C:92:0B:FD:F7:03:AE:23:CE:53:12:0B
X509v3 Authority Key Identifier:
keyid:40:A9:63:9E:02:3D:FC:89:3E:C6:9D:A7:16:B8:4A:B5:D6:4E:A5:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKljngI9_Ik-xp2nFrhKtdZOpZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/70230f-5c0b-4308-ab4e-7af6282c2ce8/1/ou0GbJ1blaoMkgv99wOuI85TEgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/70230f-5c0b-4308-ab4e-7af6282c2ce8/1/QKljngI9_Ik-xp2nFrhKtdZOpZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.159.0/24
Signature Algorithm: sha256WithRSAEncryption
08:b0:bc:e1:67:21:36:3c:21:1d:1c:a3:54:d4:2a:7f:bc:7a:
4e:6f:0e:67:2f:88:60:0b:19:d9:97:db:05:f0:5f:6d:0f:6f:
82:34:47:0e:94:f4:3b:5f:d7:e5:e9:77:00:ec:48:d6:75:0d:
ca:81:a0:4a:c2:9a:fa:d1:04:14:2b:dc:e9:73:af:d6:ac:ac:
7b:d7:14:45:d7:99:12:4c:58:fd:80:65:d7:3f:c6:9d:00:2e:
20:87:99:55:1f:93:a0:a9:bf:a5:4a:12:09:fa:37:f5:a5:47:
3c:67:3c:fb:48:9a:6a:98:8c:d2:7d:73:d9:c9:8a:98:bf:6c:
3b:ae:09:83:0f:58:89:c0:96:35:fe:d0:19:57:0b:14:78:e5:
0f:05:dc:23:70:82:f9:6f:8c:e6:26:24:d0:29:31:b6:e4:0a:
12:4c:c4:67:d9:da:b1:2c:8f:fd:e1:66:85:35:a6:3c:c1:49:
30:51:58:c5:ea:50:c9:d5:41:d6:d0:b4:19:3e:98:dc:a5:2e:
76:2a:35:68:07:ee:89:3f:ad:18:36:06:56:ba:d9:f3:52:73:
d2:5e:1b:c3:15:ec:4c:a8:2e:4f:b0:0a:e2:3a:63:b9:92:f1:
e0:59:08:4b:06:66:01:70:0f:a4:ff:dd:a4:2e:d0:83:61:26:
28:67:ff:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:29:19 2026 by rpki-client