Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/1oQjSm-kGBrxkRotrqHYaPNAYog.roa
File: 1oQjSm-kGBrxkRotrqHYaPNAYog.roa (raw, json)
Hash identifier: IIc8bR6RSqfXsFfLY0BAhVIj/jEYp+IGcje1VI5aU+I=
Subject key identifier: D6:84:23:4A:6F:A4:18:1A:F1:91:1A:2D:AE:A1:D8:68:F3:40:62:88
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 019FD6DCADA3CD2E9F20AD2EE9A1D7B3895C
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/1oQjSm-kGBrxkRotrqHYaPNAYog.roa
Signing time: Thu 06 Aug 2026 11:36:54 +0000
ROA not before: Thu 06 Aug 2026 11:36:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213607
IP address blocks: 195.216.164.0/24 maxlen: 24
195.216.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 18:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:dc:ad:a3:cd:2e:9f:20:ad:2e:e9:a1:d7:b3:89:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Aug 6 11:36:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d684234a6fa4181af1911a2daea1d868f3406288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:79:b1:43:86:75:af:94:41:b8:1b:90:85:84:
9b:ef:0b:92:e1:bc:15:ab:73:c2:67:aa:a8:0c:c1:
48:95:3e:01:80:69:80:b0:90:15:37:e0:c5:04:a7:
de:53:4a:67:9a:ed:e5:59:82:9a:b2:2d:b2:22:19:
77:7a:66:62:4e:99:ca:f9:a4:2b:48:4a:e7:6b:8c:
ac:91:50:34:d1:41:5b:42:93:d2:a0:f1:cf:bb:75:
cd:3c:47:b2:ba:d3:44:7c:c7:40:2c:2e:19:1b:8e:
62:ec:dd:7c:d8:ea:d0:09:8b:f5:59:a4:d9:44:9f:
20:82:13:ee:96:69:eb:5e:fc:7e:be:35:a2:89:af:
07:44:82:0b:2f:65:ee:b5:71:b5:d3:4b:c8:3e:b8:
59:5a:b8:c0:3c:19:7b:0e:2d:6c:16:56:a8:1d:6c:
3a:ae:3a:55:39:d5:6a:4e:98:b6:af:c6:4b:8e:4e:
18:1a:e9:43:af:ab:a6:ce:d7:23:0c:e8:c0:76:9f:
5e:a9:64:f5:fd:32:98:f0:08:cc:1c:16:2a:f9:07:
3b:7c:fe:2c:80:48:eb:c2:97:4f:f0:24:b4:e1:46:
dd:02:d6:8b:c6:51:7e:6d:80:00:ec:f5:01:c6:c8:
0b:d4:cc:36:92:c9:16:bb:03:a8:d1:c1:ce:4a:d9:
d3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:84:23:4A:6F:A4:18:1A:F1:91:1A:2D:AE:A1:D8:68:F3:40:62:88
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/1oQjSm-kGBrxkRotrqHYaPNAYog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.164.0/24
195.216.180.0/24
Signature Algorithm: sha256WithRSAEncryption
80:a2:af:ac:1d:ed:69:49:5e:cd:20:85:9d:80:6a:07:ff:05:
1f:2e:91:1f:3e:45:13:39:f3:8d:d2:25:96:40:e0:fe:f8:e7:
f1:66:02:5f:92:18:f6:0c:c4:b4:da:d4:f6:61:f5:31:1d:b2:
0e:f9:34:93:1e:7f:d6:49:47:ac:e6:43:51:cf:3a:e6:8c:cd:
7b:73:14:84:b9:da:10:22:ea:a7:80:09:e2:d4:f0:f1:a7:33:
dd:25:7f:7c:95:9c:99:90:89:7a:7c:b9:df:85:4e:07:29:38:
78:fe:ac:2c:89:e0:5e:ea:68:9f:08:d6:2b:cd:ed:3b:e7:a6:
eb:06:3f:ac:ab:b6:29:06:e8:c1:38:9a:4d:1f:ae:52:4b:72:
cf:58:38:1b:76:30:1f:82:7d:91:bc:07:65:4f:01:2e:53:7b:
d8:6a:5a:42:28:54:a5:f3:4e:89:de:ba:34:27:b6:3b:28:ae:
2b:d3:6b:ff:dd:13:72:1b:6d:c2:a4:ca:38:9f:9d:1f:8f:33:
a2:8b:83:ae:70:35:64:6a:62:8d:7b:e5:e8:0c:b5:87:e1:0b:
58:3b:cd:53:34:76:73:ba:be:8d:22:e1:3b:70:c1:29:eb:ba:
3d:4a:f8:8c:d1:a0:f3:9f:e9:52:81:d7:fd:21:02:4d:ff:f8:
39:39:99:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 02:47:52 2026 by rpki-client