Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/RaOgAx7z_BoGsJCyVvWXc3WyVrw.roa
File: RaOgAx7z_BoGsJCyVvWXc3WyVrw.roa (raw, json)
Hash identifier: H3mZYu57zkJacQjG3m40A6yiDRjQz42LgSYFK6KQrLI=
Subject key identifier: 45:A3:A0:03:1E:F3:FC:1A:06:B0:90:B2:56:F5:97:73:75:B2:56:BC
Certificate issuer: /CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Certificate serial: 01A02E9453E630AB675D7CC99931AF21CB77
Authority key identifier: 60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/RaOgAx7z_BoGsJCyVvWXc3WyVrw.roa
Signing time: Sun 23 Aug 2026 12:24:27 +0000
ROA not before: Sun 23 Aug 2026 12:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219142
IP address blocks: 109.95.65.0/24 maxlen: 24
109.95.66.0/24 maxlen: 24
109.95.67.0/24 maxlen: 24
109.95.68.0/24 maxlen: 24
109.95.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2e:94:53:e6:30:ab:67:5d:7c:c9:99:31:af:21:cb:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Validity
Not Before: Aug 23 12:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45a3a0031ef3fc1a06b090b256f5977375b256bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:91:7d:41:b7:0d:af:59:cb:44:49:98:e0:8e:
08:e5:a1:e4:39:6c:cc:24:e6:f7:57:ef:2e:1a:79:
a6:7f:97:f8:61:12:55:cc:5f:d7:b6:ca:95:2a:be:
b9:c5:56:74:ee:6a:ae:2f:1f:25:b1:cc:7b:54:fc:
ab:e8:7f:76:47:d8:f3:33:88:7b:3b:38:d5:e9:8e:
90:23:19:ef:a2:8f:ff:7a:b7:87:f5:83:bc:2e:02:
30:f6:2f:2c:c1:81:5c:0c:ae:cb:4a:7a:34:4e:ef:
24:0f:69:10:06:82:ea:71:0a:36:5e:57:7d:d5:d2:
fe:34:a9:14:94:79:8c:11:29:37:84:65:f1:26:c2:
f7:4f:ce:24:07:61:ae:aa:7a:0d:cd:45:b7:45:95:
9d:69:c2:b6:3f:13:07:3d:3e:b1:b3:91:1c:59:fe:
64:c4:e8:ab:ca:c6:b0:48:28:a8:db:74:9a:31:c0:
ae:6f:a4:43:5b:71:02:e9:fa:42:1b:b4:14:86:d3:
c5:73:2e:8c:1d:f0:3b:05:73:52:bc:9b:dc:83:e4:
75:33:a9:f0:54:92:55:ae:f8:46:a6:7a:03:80:38:
6d:92:78:c3:2c:d6:17:45:17:d5:a5:8e:15:49:0a:
07:99:71:19:ed:21:14:0b:ba:ae:22:7b:ba:fd:ee:
8b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A3:A0:03:1E:F3:FC:1A:06:B0:90:B2:56:F5:97:73:75:B2:56:BC
X509v3 Authority Key Identifier:
keyid:60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/RaOgAx7z_BoGsJCyVvWXc3WyVrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.65.0-109.95.68.255
109.95.70.0/24
Signature Algorithm: sha256WithRSAEncryption
23:b4:dc:46:df:40:d4:94:84:d9:2e:b8:9b:4c:07:94:63:01:
50:b7:1f:87:df:73:a1:65:c5:01:49:e8:fb:8e:9b:38:91:54:
53:75:96:20:8b:6a:80:d6:eb:b0:68:c1:3f:8d:34:30:38:a0:
32:d0:c5:37:25:f6:59:fc:84:85:47:64:37:d4:ea:b7:75:b4:
50:6c:d9:a9:14:82:93:d9:3f:77:88:7b:1a:7e:b6:53:8d:b5:
2c:3f:b9:93:66:4b:d1:0f:e8:fa:05:51:e2:d3:f2:22:92:55:
ea:7d:80:5a:9a:99:a3:2a:b5:cf:92:60:b9:ef:82:e5:d5:a9:
3f:15:13:21:5f:a5:85:01:d6:12:98:61:7d:84:dc:22:2a:50:
38:b5:84:c3:86:a9:31:b5:85:e7:28:74:4d:60:17:da:16:52:
06:eb:3c:c1:0d:73:a1:0f:cc:53:c3:2f:3c:b5:3b:2e:ae:54:
9a:81:0a:0c:f2:0c:59:81:28:e7:b1:6e:a4:c2:bb:f2:60:70:
5e:ef:7c:22:24:72:5c:03:00:a2:56:2b:7a:7f:c2:33:0e:b3:
e1:6a:0f:4e:ba:cb:aa:44:aa:27:04:11:9a:00:d1:34:ed:d5:
02:e3:98:69:3d:97:35:0a:ac:00:79:02:1b:ab:16:30:53:49:
f4:c0:46:80
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:44:10 2026 by rpki-client