Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/OQWnp_Md2x4cxVjg7bXO2DQDpBU.roa
File: OQWnp_Md2x4cxVjg7bXO2DQDpBU.roa (raw, json)
Hash identifier: 5YQc8eOwUXds57acJ8XOpZbZXhOQVU7W0l0d5AFhQVY=
Subject key identifier: 39:05:A7:A7:F3:1D:DB:1E:1C:C5:58:E0:ED:B5:CE:D8:34:03:A4:15
Certificate issuer: /CN=2ef67b74ce8f2a4ca350163a7b3e13c37173c7ae
Certificate serial: 01A049C12F1BF38B13B56EAB8E4305AED402
Authority key identifier: 2E:F6:7B:74:CE:8F:2A:4C:A3:50:16:3A:7B:3E:13:C3:71:73:C7:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/OQWnp_Md2x4cxVjg7bXO2DQDpBU.roa
Signing time: Fri 28 Aug 2026 19:03:12 +0000
ROA not before: Fri 28 Aug 2026 19:03:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62240
IP address blocks: 136.176.201.0/24 maxlen: 24
136.176.209.0/24 maxlen: 24
136.176.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.mft
rsync://rpki.ripe.net/repository/DEFAULT/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 18:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:49:c1:2f:1b:f3:8b:13:b5:6e:ab:8e:43:05:ae:d4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ef67b74ce8f2a4ca350163a7b3e13c37173c7ae
Validity
Not Before: Aug 28 19:03:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3905a7a7f31ddb1e1cc558e0edb5ced83403a415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7f:aa:b9:c9:e9:e9:88:e8:2f:02:90:24:8a:
77:cc:69:7d:c0:b2:19:5e:3f:8f:42:47:3c:8b:4f:
86:e1:d4:53:de:01:92:60:75:87:b8:b0:93:2a:a0:
c3:f8:eb:b5:95:d0:ec:82:fa:1b:fc:24:8e:71:f5:
35:3e:5c:31:b0:38:39:de:b2:bf:50:d7:4d:c2:d4:
cf:eb:22:71:5f:5a:88:63:19:74:17:45:c4:3c:8e:
a6:33:6c:57:93:26:8d:c2:18:52:e4:39:5c:e5:03:
4e:df:29:e4:a9:73:40:8c:21:de:75:00:90:91:92:
36:11:a3:b4:81:b8:78:fd:38:f8:04:38:7a:84:00:
02:89:75:4d:27:79:ac:e3:5a:27:c1:78:ba:10:84:
9d:e3:98:c6:57:c8:df:78:8c:6b:41:8b:ff:b5:8e:
2c:84:e4:83:5c:e0:58:d9:be:77:17:41:dd:06:83:
ad:b8:67:9c:c2:71:95:57:10:b7:64:dd:5f:35:28:
ca:27:83:2d:a8:44:cc:2c:cb:f3:21:49:0e:4e:b0:
4d:6a:ac:ed:d0:54:fe:ff:83:ca:48:ae:29:09:7e:
3e:1e:9f:d8:9a:87:f3:94:8e:3a:52:16:43:08:71:
93:1f:e3:49:30:18:6e:f1:68:72:82:0d:f6:cd:8b:
e0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:05:A7:A7:F3:1D:DB:1E:1C:C5:58:E0:ED:B5:CE:D8:34:03:A4:15
X509v3 Authority Key Identifier:
keyid:2E:F6:7B:74:CE:8F:2A:4C:A3:50:16:3A:7B:3E:13:C3:71:73:C7:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/OQWnp_Md2x4cxVjg7bXO2DQDpBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.176.201.0/24
136.176.209.0/24
136.176.217.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:d2:db:54:99:fa:1e:80:a0:10:ba:06:ec:27:c1:55:79:22:
09:8e:2a:8f:f9:72:22:ff:bf:08:53:57:cd:c6:29:38:c1:d6:
34:79:8b:ec:a5:e5:7b:46:e8:ab:30:5c:07:32:65:67:e4:2d:
2c:d3:e0:8e:ad:0b:aa:39:51:22:2b:45:0d:a6:71:b3:3d:4e:
f6:a1:c1:47:e6:75:d8:96:59:47:e8:90:8e:ed:fa:25:dc:e8:
3c:a2:df:35:31:52:a8:dc:f4:90:09:52:1c:80:27:62:8b:d9:
02:f5:e8:b5:73:7a:48:a6:f0:23:a4:b8:c6:9c:52:ca:e1:46:
c5:51:39:c4:8e:a3:ec:6c:03:f8:b1:82:e9:a9:c3:97:d7:7f:
eb:0a:1f:5e:1f:d2:b7:12:67:54:a8:e0:2f:5f:3a:f7:62:3d:
3a:49:12:c7:96:8b:7c:a9:67:bd:44:f2:25:f0:d5:f9:9e:42:
bb:46:d3:ce:72:fa:c5:ff:cb:8e:74:1e:54:f7:aa:12:24:d2:
b9:58:89:67:84:86:a2:19:98:4b:90:7f:f9:19:f6:b1:5e:84:
87:34:c3:16:58:a9:db:09:e3:06:3b:ff:92:09:d3:cf:51:5a:
86:c1:16:f2:43:8f:c0:60:67:4b:3b:20:37:99:2b:41:10:ec:
a7:24:31:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 01:40:44 2026 by rpki-client