Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/OKg9lDRnR4jN86ZPv2a9kDmE6ko.roa
File: OKg9lDRnR4jN86ZPv2a9kDmE6ko.roa (raw, json)
Hash identifier: wivGX1Ju7hjNkdPElNOh+99tkUZ/3DE5nZF6Omx8P8Q=
Subject key identifier: 38:A8:3D:94:34:67:47:88:CD:F3:A6:4F:BF:66:BD:90:39:84:EA:4A
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 019F23685B36ED738975D2412E7AF3007A4D
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/OKg9lDRnR4jN86ZPv2a9kDmE6ko.roa
Signing time: Thu 02 Jul 2026 15:17:49 +0000
ROA not before: Thu 02 Jul 2026 15:17:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35682
IP address blocks: 189.74.96.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:5b:36:ed:73:89:75:d2:41:2e:7a:f3:00:7a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Jul 2 15:17:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38a83d9434674788cdf3a64fbf66bd903984ea4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ea:7b:1b:c0:c9:03:51:be:64:87:e4:75:40:
cb:85:3e:e8:0c:0a:fa:bc:02:1a:13:f4:14:3f:38:
c6:d6:de:3f:f3:c9:96:e9:de:7d:65:3a:54:7e:ae:
f9:88:18:2d:a0:3c:c3:f4:d9:50:85:db:05:ac:8f:
54:5b:15:86:13:ba:37:17:0f:b0:0b:6a:3d:15:d5:
09:5d:5e:85:78:60:2c:5a:7b:fb:02:47:7b:4e:1c:
97:de:69:84:91:3d:f4:08:3f:2f:1a:a0:ca:bb:01:
5e:38:e1:8a:56:86:b4:36:30:a9:34:09:93:7e:5e:
65:7b:af:ed:b6:1e:1d:19:0e:06:d6:30:86:b1:fc:
55:7f:3f:ff:ee:a8:31:e8:11:07:b7:50:68:f4:76:
40:1f:54:51:c1:78:f9:0f:b7:d2:db:78:06:2b:d1:
b7:a3:18:4e:6c:46:56:10:ff:86:15:2f:b2:90:b2:
87:d2:d5:b3:32:96:6d:e9:56:bf:93:f9:76:88:3a:
c7:bc:c1:09:d4:42:30:f8:de:24:8c:f6:9d:24:10:
55:88:25:c7:92:23:6e:b5:fb:58:92:91:98:92:86:
01:6a:11:95:ab:d2:6d:bc:b0:1d:1d:1d:68:2d:f6:
aa:a1:6d:1e:3d:72:b9:28:bc:76:06:d7:3d:36:7e:
cd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A8:3D:94:34:67:47:88:CD:F3:A6:4F:BF:66:BD:90:39:84:EA:4A
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/OKg9lDRnR4jN86ZPv2a9kDmE6ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.74.96.0/21
Signature Algorithm: sha256WithRSAEncryption
75:87:a7:7e:3a:3a:6a:c5:ef:47:a6:0f:db:cf:ab:68:29:3d:
b8:d5:83:22:36:a8:84:46:13:9a:81:be:5e:54:e1:17:14:05:
b4:c0:a8:0f:58:50:e8:85:e8:d1:30:50:a7:4f:56:4b:93:87:
67:4c:48:7f:d5:ab:12:37:2a:bb:49:a9:d2:4c:b9:2e:95:72:
4d:14:8e:da:82:d5:6d:93:99:db:e7:a5:e1:7c:04:91:b4:20:
e1:aa:f7:dd:85:e0:2d:54:36:17:f0:f8:d7:bd:cf:96:fe:d8:
0b:e1:e2:d7:83:49:8d:35:f5:51:65:74:c9:53:7b:81:9a:3e:
03:db:16:58:33:d7:67:cc:e2:b5:e7:a6:f9:0e:97:d4:de:8d:
e4:14:52:c5:0d:4d:6c:1c:ff:d2:41:ec:5d:22:df:4e:0e:cc:
d6:98:56:a8:97:9c:80:9e:9c:50:ae:8b:77:2e:59:df:71:ce:
e0:39:b5:0b:6f:8e:60:a9:f3:f4:a1:2a:66:8f:3a:1b:78:47:
e6:02:40:0b:a7:19:60:4d:76:ef:66:46:2a:f6:87:b8:c1:bc:
22:b6:cb:18:f4:63:f1:c7:7e:ff:4c:1d:8b:ba:c4:5d:ac:7f:
61:f1:ae:48:7c:d6:43:0a:03:bd:b1:4c:7b:9f:69:33:fb:72:
9e:de:e6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:26:36 2026 by rpki-client