Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/7OjuKNPsPrUyOFyctO4jTsdEhDw.roa
File: 7OjuKNPsPrUyOFyctO4jTsdEhDw.roa (raw, json)
Hash identifier: 17wDFdv6rscsc5OgsxeGacU+mxe2SfqkfJ3s+NQPz6Y=
Subject key identifier: EC:E8:EE:28:D3:EC:3E:B5:32:38:5C:9C:B4:EE:23:4E:C7:44:84:3C
Certificate issuer: /CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Certificate serial: 01A160F751EF5FD2CDFB017ADACFB5D10F8B
Authority key identifier: AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/7OjuKNPsPrUyOFyctO4jTsdEhDw.roa
Signing time: Thu 22 Oct 2026 00:16:23 +0000
ROA not before: Thu 22 Oct 2026 00:16:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49570
IP address blocks: 91.105.208.0/21 maxlen: 21
185.130.120.0/22 maxlen: 22
185.225.212.0/22 maxlen: 22
185.226.24.0/22 maxlen: 22
2a0c:a87::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:f7:51:ef:5f:d2:cd:fb:01:7a:da:cf:b5:d1:0f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Validity
Not Before: Oct 22 00:16:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ece8ee28d3ec3eb532385c9cb4ee234ec744843c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1a:84:9d:cf:ea:78:b3:70:59:6a:5e:08:6a:
74:4a:67:c0:d4:9a:61:29:6b:7d:8f:4f:a7:c1:2c:
d1:da:df:cf:72:2e:6e:62:df:06:1f:a7:85:12:71:
ac:97:30:6a:83:f3:07:94:ee:42:95:0e:cd:79:ca:
7f:1f:6d:49:34:d4:0c:8d:bd:8b:92:6d:29:62:ec:
56:bb:22:c6:4f:d3:d4:32:78:42:bc:33:56:1d:70:
13:76:1a:90:5c:f4:f5:ea:35:ab:e6:f7:88:ca:37:
40:0f:8a:dc:1a:de:ca:73:57:b0:45:2f:e2:61:14:
7e:52:7e:6f:16:46:af:2d:a9:dc:32:25:4b:91:97:
74:89:2d:5e:6e:13:10:65:b4:4a:8c:fb:02:af:65:
69:a3:fd:8d:17:b2:a9:40:6a:27:37:c7:46:b7:85:
04:f5:c3:fe:4e:c0:41:15:15:87:e6:bd:4a:12:ab:
c1:a3:97:68:03:18:a4:e1:06:f3:f9:e6:2e:73:27:
6f:f2:87:a5:d7:81:70:b6:49:76:d8:37:f7:97:53:
a8:3c:97:43:dc:b4:fb:50:27:91:7a:a2:27:ae:31:
5e:57:d1:cd:91:3e:9a:9f:24:1d:0a:cd:8e:d7:27:
ab:72:66:89:f0:6b:45:f3:60:1e:da:3a:ac:46:54:
ee:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E8:EE:28:D3:EC:3E:B5:32:38:5C:9C:B4:EE:23:4E:C7:44:84:3C
X509v3 Authority Key Identifier:
keyid:AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/7OjuKNPsPrUyOFyctO4jTsdEhDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.105.208.0/21
185.130.120.0/22
185.225.212.0/22
185.226.24.0/22
IPv6:
2a0c:a87::/32
Signature Algorithm: sha256WithRSAEncryption
99:1c:68:29:74:fd:12:dd:0e:d8:2b:91:89:e1:c4:2f:ea:b3:
b4:fc:e9:b3:ce:e4:54:bd:82:a3:bd:42:00:fb:70:10:30:e0:
9d:f5:bd:e7:0d:3d:0c:32:76:19:1c:55:e8:a1:0b:83:67:96:
4c:b5:0f:16:bc:30:63:97:aa:62:26:c4:20:e4:1f:a4:09:d4:
ad:1d:a7:dc:8c:70:b3:83:1a:30:ba:ef:0c:72:92:28:b1:51:
96:e3:54:69:a6:b4:4a:2e:fd:c6:fb:66:fd:6a:2d:e6:7f:75:
2f:5f:a0:4a:81:81:ad:8a:91:da:da:7b:b4:77:4b:af:97:cb:
98:5b:89:27:76:f4:83:29:34:32:92:14:fa:4c:ef:c9:7d:58:
b0:4c:9d:cb:31:b8:3a:f4:cb:a6:d2:95:5b:f2:fd:5a:a5:45:
49:8b:b7:cc:d1:c1:84:1d:86:e9:ae:09:18:c2:f8:d0:78:c0:
bf:ff:da:3c:f9:ee:0c:6e:9b:30:27:77:a8:52:b5:6b:68:af:
22:94:f3:aa:33:bb:4c:42:35:5f:ff:57:0c:64:4c:ea:ac:c5:
f5:9e:f9:1f:d2:e9:78:30:ab:43:52:b9:3e:33:09:35:88:84:
9e:b5:a4:8b:76:65:20:f5:57:2d:dc:5f:97:9c:3e:d3:c7:a0:
81:26:4b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:08:03 2026 by rpki-client