Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/Of6AglNJHlgcluYUlIjfioWiCKI.roa
File: Of6AglNJHlgcluYUlIjfioWiCKI.roa (raw, json)
Hash identifier: sDgKEq0ut0vUDDCpX/3A3ZadxIlIok7qphOucEB2uLE=
Subject key identifier: 39:FE:80:82:53:49:1E:58:1C:96:E6:14:94:88:DF:8A:85:A2:08:A2
Certificate issuer: /CN=11774f8a998e0f2af18f75279e32654813694488
Certificate serial: 019F86057BE51E873D9B1A7487A402694DE4
Authority key identifier: 11:77:4F:8A:99:8E:0F:2A:F1:8F:75:27:9E:32:65:48:13:69:44:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/Of6AglNJHlgcluYUlIjfioWiCKI.roa
Signing time: Tue 21 Jul 2026 18:52:14 +0000
ROA not before: Tue 21 Jul 2026 18:52:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198709
IP address blocks: 176.114.232.0/21 maxlen: 21
185.237.140.0/22 maxlen: 22
185.237.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:05:7b:e5:1e:87:3d:9b:1a:74:87:a4:02:69:4d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11774f8a998e0f2af18f75279e32654813694488
Validity
Not Before: Jul 21 18:52:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39fe808253491e581c96e6149488df8a85a208a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:63:64:9a:86:90:4f:f5:da:c8:f8:1d:2d:48:
3b:94:96:ff:e1:1a:a5:2b:9a:a9:2d:64:fd:dd:9d:
d4:a3:e8:76:95:0e:ca:6a:f9:27:0d:bb:32:07:e7:
6d:c8:b6:b0:44:02:ab:75:7f:fa:3d:eb:70:37:f8:
2a:fa:ee:36:0c:bb:f7:39:f1:c3:6d:09:28:42:82:
63:f4:96:32:a8:4b:56:6a:b5:92:9d:f2:cf:c8:8d:
9f:1a:80:88:df:00:c3:60:35:18:2a:19:0b:7c:dd:
dd:20:ef:95:f9:de:d0:78:21:ad:26:0f:e4:86:96:
7f:58:d6:ba:72:85:ea:91:98:39:92:1b:9c:33:82:
80:05:39:39:06:57:08:3d:78:cc:9e:6c:58:66:71:
ee:7f:b9:8f:ef:ce:ae:ba:4b:68:4f:a7:03:14:7d:
bf:19:f0:d2:22:4c:d7:28:6c:af:c1:dd:b4:eb:b7:
d2:c4:98:a3:38:45:4a:58:69:cb:f4:c1:87:bf:77:
f1:3a:8e:0f:a5:f2:6a:22:0b:d1:a3:10:ed:0a:19:
98:7e:76:57:c2:20:c9:99:2f:3f:c9:0b:c9:52:ca:
1a:c1:43:d2:9c:a8:01:11:7d:62:6b:1f:7f:24:8c:
93:15:6a:d1:d0:81:44:1e:04:5a:77:e4:73:39:e7:
82:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FE:80:82:53:49:1E:58:1C:96:E6:14:94:88:DF:8A:85:A2:08:A2
X509v3 Authority Key Identifier:
keyid:11:77:4F:8A:99:8E:0F:2A:F1:8F:75:27:9E:32:65:48:13:69:44:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/Of6AglNJHlgcluYUlIjfioWiCKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.114.232.0/21
185.237.140.0/22
Signature Algorithm: sha256WithRSAEncryption
54:f8:ec:50:e2:4e:58:d4:f0:af:2c:4c:e8:1b:1b:98:41:50:
68:d9:f3:6e:c6:cd:cf:80:c6:92:e6:55:ba:79:67:cb:ec:85:
e2:43:2a:05:a2:17:f6:1b:e4:23:a0:ea:4a:3a:d3:e1:cc:db:
40:af:fc:13:64:a3:61:94:da:01:d5:c7:ce:58:fe:b8:c7:d0:
7d:d6:30:65:ac:ad:da:29:24:bb:ff:d1:30:c2:a1:70:bd:4d:
34:fe:67:2b:de:60:2a:86:c0:61:ec:f5:16:31:c5:d5:38:fa:
5b:c5:58:48:40:85:b2:88:91:07:52:b5:f1:6a:22:13:a2:83:
48:46:be:75:e6:19:56:2c:31:4e:ba:79:e7:37:3c:e0:55:a1:
3c:e2:b6:8c:11:9f:34:b1:06:94:0b:d4:2f:4e:04:64:c4:29:
d5:e9:90:d8:a3:cc:92:01:d4:b7:a9:de:6e:ac:a7:a5:84:5b:
d2:85:4a:5b:6d:c6:16:5d:30:56:ad:ee:36:41:f9:c0:48:11:
1a:c3:65:73:5a:8e:97:25:59:30:a8:f3:cb:7c:7f:0a:7e:ae:
89:3f:e5:ab:ea:08:7b:d7:a4:57:9a:ac:5f:7a:13:bb:b3:dd:
f8:43:7e:2a:29:a2:16:cc:9f:be:db:e3:ba:3b:d1:38:ec:36:
27:9c:b5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:28:42 2026 by rpki-client