Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/Oa1C2BiJUB2DPinZHDtphEprA0w.roa
File: Oa1C2BiJUB2DPinZHDtphEprA0w.roa (raw, json)
Hash identifier: INR06IqVsKSdmdf46tvWiLyHqQeLCDTxEJjybjAgDxs=
Subject key identifier: 39:AD:42:D8:18:89:50:1D:83:3E:29:D9:1C:3B:69:84:4A:6B:03:4C
Certificate issuer: /CN=731aff1ad98f5b1a58c0ed7bf5954d46ac69a97d
Certificate serial: 019F2368FBB998A1D9263037E111BAB34BDF
Authority key identifier: 73:1A:FF:1A:D9:8F:5B:1A:58:C0:ED:7B:F5:95:4D:46:AC:69:A9:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxr_GtmPWxpYwO179ZVNRqxpqX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/Oa1C2BiJUB2DPinZHDtphEprA0w.roa
Signing time: Thu 02 Jul 2026 15:18:30 +0000
ROA not before: Thu 02 Jul 2026 15:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 264658
IP address blocks: 194.247.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/cxr_GtmPWxpYwO179ZVNRqxpqX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/cxr_GtmPWxpYwO179ZVNRqxpqX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxr_GtmPWxpYwO179ZVNRqxpqX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 19:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fb:b9:98:a1:d9:26:30:37:e1:11:ba:b3:4b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731aff1ad98f5b1a58c0ed7bf5954d46ac69a97d
Validity
Not Before: Jul 2 15:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39ad42d81889501d833e29d91c3b69844a6b034c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3a:d1:22:63:5d:6a:d2:dc:79:22:78:b3:5f:
c7:ef:2a:37:b7:38:76:25:44:32:17:a0:64:11:bf:
1d:ec:22:86:f4:dd:7b:ff:6c:70:ef:18:17:6b:7e:
18:93:21:7e:6c:42:ae:d0:0a:62:d1:8e:78:35:b0:
e4:5e:a3:3b:41:5b:79:be:de:e2:e9:21:5a:44:74:
92:3e:57:44:02:71:1e:63:00:37:56:04:e5:9f:2c:
87:73:28:ad:1e:e6:0f:c6:e3:a6:16:b0:60:aa:8f:
f3:f8:09:63:8a:7e:2c:76:06:88:76:a0:e9:c4:62:
06:5e:39:00:99:f3:82:bc:2e:fb:7f:94:3b:bc:33:
1a:cb:b8:bc:4a:6a:26:f6:5d:c9:8f:11:86:cb:7c:
da:0a:8e:06:c3:90:83:8b:13:84:d2:4b:61:a9:b6:
94:42:c2:d0:ab:86:79:0f:37:41:30:f4:45:89:d0:
09:0c:8e:b3:a8:2d:1f:e9:08:70:5f:54:78:83:1e:
04:da:19:52:35:3e:f1:22:1d:17:34:05:ee:aa:0b:
02:00:f1:5e:52:2d:67:04:3a:41:45:1e:a8:fc:6d:
8d:d6:e6:6d:5d:f7:b1:34:1f:d9:51:4b:3f:38:41:
7e:4e:c7:30:11:61:0d:b7:04:2d:e5:99:0d:ad:1f:
d2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:AD:42:D8:18:89:50:1D:83:3E:29:D9:1C:3B:69:84:4A:6B:03:4C
X509v3 Authority Key Identifier:
keyid:73:1A:FF:1A:D9:8F:5B:1A:58:C0:ED:7B:F5:95:4D:46:AC:69:A9:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxr_GtmPWxpYwO179ZVNRqxpqX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/Oa1C2BiJUB2DPinZHDtphEprA0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/cxr_GtmPWxpYwO179ZVNRqxpqX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.247.178.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:24:28:3a:0a:55:f0:ae:86:e3:c6:eb:a8:17:f8:e8:33:7f:
99:81:99:29:00:14:92:a0:71:62:a4:b0:70:90:d2:c0:df:ce:
57:25:b9:b8:7d:18:51:5a:47:7b:55:99:2d:7e:43:01:48:b7:
af:08:58:f8:11:d8:cf:49:1c:5d:9b:47:21:dd:12:3f:33:e0:
c0:b6:b8:68:c5:23:1e:93:c8:2e:2a:29:fc:e1:fb:05:bc:28:
5a:22:a6:a5:b9:94:ea:d7:55:9b:0f:ae:87:09:f3:47:e7:3c:
0e:7e:6d:2b:56:57:71:20:d9:de:a9:36:15:a4:0d:65:18:6d:
e8:cd:8b:ab:42:af:1c:53:b9:5c:8b:f4:62:1c:7c:ce:2c:30:
6e:81:a1:ea:8c:86:fb:db:15:45:a9:f3:44:4e:59:79:e0:ba:
71:af:8c:6a:de:6e:65:e3:30:b5:c4:5b:3e:e0:99:d1:e9:68:
7e:6f:df:e8:44:11:a4:e4:b7:b0:e0:81:44:39:6f:c4:20:76:
90:16:f0:8e:00:18:9d:59:c5:3d:2b:e4:0e:f8:2b:1e:da:e9:
07:15:3e:fb:b5:51:cf:8e:2c:9b:00:05:37:3a:6c:5d:41:50:
b2:15:b5:53:c5:f4:d5:ee:32:d0:14:11:3a:af:8b:81:92:89:
a1:e5:e6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 00:13:55 2026 by rpki-client