Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/onnGlPSTJbj1RVY_IG3cpmctQEo.roa
File: onnGlPSTJbj1RVY_IG3cpmctQEo.roa (raw, json)
Hash identifier: zrJcdgycHyjKfq6lbaH4TcXdk5wjeaGcpawOKYvmdnc=
Subject key identifier: A2:79:C6:94:F4:93:25:B8:F5:45:56:3F:20:6D:DC:A6:67:2D:40:4A
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FB75E93552F5A39E1E34714F45158ED67
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/onnGlPSTJbj1RVY_IG3cpmctQEo.roa
Signing time: Fri 31 Jul 2026 08:50:56 +0000
ROA not before: Fri 31 Jul 2026 08:50:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 37.98.146.0/24 maxlen: 24
77.93.136.0/24 maxlen: 24
81.5.189.0/24 maxlen: 24
81.168.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b7:5e:93:55:2f:5a:39:e1:e3:47:14:f4:51:58:ed:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 31 08:50:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a279c694f49325b8f545563f206ddca6672d404a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:30:8f:04:08:7a:5e:f3:da:9a:16:c3:5c:c0:
d8:30:a1:3a:66:0d:47:c7:b1:80:50:e2:1d:4c:79:
47:75:26:e7:df:10:2e:a7:d1:10:e7:35:5c:2c:f7:
29:3e:80:94:8b:ee:cb:f4:4c:6c:28:e4:a1:76:3e:
2c:dd:eb:89:39:75:77:4d:e8:f5:24:1f:df:99:aa:
ae:88:0c:ad:0a:a7:d1:7a:92:5a:a5:5c:87:3e:01:
b8:1d:f9:e1:dd:0d:e3:28:f7:dd:28:58:de:fc:48:
c7:11:42:ec:ef:70:7a:da:79:a9:b9:a2:e2:4e:1b:
26:6b:36:75:27:22:13:1d:bf:84:6a:60:dd:e3:8a:
3f:2a:43:ab:2e:2c:15:ba:32:cd:9f:72:76:3a:43:
3c:1a:97:29:b0:3d:5c:ee:68:fc:ba:d2:73:dd:5e:
65:26:da:bc:b5:a5:55:29:0b:d3:c5:97:75:bb:f6:
72:85:77:9d:d8:2a:44:d5:20:17:9c:54:fc:2d:99:
e0:9d:bc:ed:51:d5:ce:4d:36:6e:b7:d5:3e:a6:fa:
ed:ac:e7:14:b6:3a:69:90:47:2d:cc:15:60:32:40:
d5:7f:3a:28:c8:5f:b6:41:d1:33:04:fa:1f:e8:b3:
4f:08:dc:24:60:8f:66:0c:11:52:a1:74:bc:b8:99:
0e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:79:C6:94:F4:93:25:B8:F5:45:56:3F:20:6D:DC:A6:67:2D:40:4A
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/onnGlPSTJbj1RVY_IG3cpmctQEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.146.0/24
77.93.136.0/24
81.5.189.0/24
81.168.10.0/24
Signature Algorithm: sha256WithRSAEncryption
23:e7:81:db:ee:36:9b:90:a5:93:a0:34:9a:a5:25:10:2f:7c:
e9:2d:4d:ab:0a:8b:f5:ab:12:6d:24:9e:0d:aa:ae:5d:27:31:
88:49:01:a9:e7:c1:fe:55:a4:78:a7:90:93:69:0b:45:63:7d:
10:04:1d:0b:48:a0:41:0a:5f:94:a5:30:66:9c:35:4d:a0:07:
81:1b:f3:4d:18:91:26:2d:f8:54:37:55:2b:83:3f:6b:1a:ac:
99:1c:2d:5c:de:71:48:0a:af:9c:a8:97:3d:c0:f4:e8:29:cd:
1a:e3:c4:df:51:5c:7c:ac:46:4e:ac:f8:7c:04:32:16:30:6d:
5d:8a:86:2e:68:d3:ab:53:f7:f1:31:cd:b6:69:2e:22:b0:45:
7a:44:f7:d8:68:00:92:ef:c7:16:11:e9:a2:05:0c:20:36:7b:
7b:3a:0d:2a:e6:1b:ff:bd:ce:8f:1c:86:3f:d3:ca:5b:59:50:
87:b2:30:d2:13:1c:fa:f2:ec:91:38:ea:91:72:0a:ad:4f:09:
02:fd:4a:04:7e:1d:85:fa:79:2a:cb:be:10:cd:68:3f:dd:12:
42:69:49:25:22:9d:92:6a:0c:f9:37:88:c8:f9:e5:56:2b:ff:
3a:c5:fa:29:46:0c:2c:7b:a9:f4:52:d9:03:73:f3:6e:17:57:
1a:e3:18:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:09:59 2026 by rpki-client