Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/OXB7jvhizKh_U4xlO_0CoK92HAw.roa
File: OXB7jvhizKh_U4xlO_0CoK92HAw.roa (raw, json)
Hash identifier: VoXwzFtyMKo3BvbVrn81wKv/iAi0DKiDMm3nV3WCrPI=
Subject key identifier: 39:70:7B:8E:F8:62:CC:A8:7F:53:8C:65:3B:FD:02:A0:AF:76:1C:0C
Certificate issuer: /CN=b286e9f08848e480b1f3e9a9c06a832d48ce37ad
Certificate serial: 019FFF6B460958FFC367FA98502944431E2B
Authority key identifier: B2:86:E9:F0:88:48:E4:80:B1:F3:E9:A9:C0:6A:83:2D:48:CE:37:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/OXB7jvhizKh_U4xlO_0CoK92HAw.roa
Signing time: Fri 14 Aug 2026 08:37:27 +0000
ROA not before: Fri 14 Aug 2026 08:37:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204921
IP address blocks: 177.177.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.mft
rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ff:6b:46:09:58:ff:c3:67:fa:98:50:29:44:43:1e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b286e9f08848e480b1f3e9a9c06a832d48ce37ad
Validity
Not Before: Aug 14 08:37:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39707b8ef862cca87f538c653bfd02a0af761c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d4:f8:b9:68:6b:ea:d9:0f:10:1f:0e:47:7a:
1c:fe:4d:e8:42:81:29:ca:1b:1e:83:69:0d:7c:7c:
67:ce:30:41:a5:21:2e:34:7b:6e:c3:f4:c5:f0:07:
c9:fd:18:53:57:82:6c:ef:76:49:84:d6:b1:19:14:
f1:56:43:c9:0c:c1:08:29:5a:c6:05:95:f3:ae:b3:
96:08:55:58:07:e1:ed:5d:1e:36:cf:91:90:87:1e:
a7:1b:bc:2c:ab:01:ec:68:55:0d:0c:16:cc:12:8e:
33:27:f4:6a:8b:cc:ad:b1:e0:a4:4e:20:d6:b3:89:
44:e7:1d:2b:8c:93:4a:ac:0f:c3:d4:0e:61:f1:45:
65:a8:c7:b1:47:50:3f:a7:11:34:42:86:49:9a:1f:
be:27:16:2f:0c:bc:2e:12:7b:d0:52:b5:66:3b:80:
00:f2:2f:00:da:e0:9a:95:09:fb:89:8d:ac:4a:07:
28:a8:1f:2c:b6:6a:5e:c4:05:79:84:da:fe:fd:b7:
58:c4:06:14:f0:d8:8b:82:a6:94:c8:d3:ed:a8:30:
25:74:93:a9:41:4b:a4:cc:4b:e0:1b:df:ef:f6:4d:
ba:41:48:b3:20:55:12:e1:29:13:ae:35:57:44:d3:
a5:a5:46:93:00:fd:95:16:8f:7e:67:7f:69:b0:61:
75:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:70:7B:8E:F8:62:CC:A8:7F:53:8C:65:3B:FD:02:A0:AF:76:1C:0C
X509v3 Authority Key Identifier:
keyid:B2:86:E9:F0:88:48:E4:80:B1:F3:E9:A9:C0:6A:83:2D:48:CE:37:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/OXB7jvhizKh_U4xlO_0CoK92HAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.177.80.0/22
Signature Algorithm: sha256WithRSAEncryption
77:d8:74:5a:bd:f5:0e:fe:81:21:b9:b3:17:27:73:e5:ec:a5:
26:6f:27:ce:43:72:7d:99:4c:28:9d:18:00:f7:4e:9c:b1:80:
b3:87:da:0f:c2:a6:fc:09:c3:ac:d0:c3:4d:2c:d5:06:14:b9:
9c:00:c9:64:70:2b:2e:53:34:64:f7:fe:00:43:d0:c3:5b:67:
5e:b4:2c:40:04:08:91:7f:35:f2:6d:d1:c1:f7:b8:5a:a2:64:
b8:ec:3c:5a:3d:6c:fe:58:0a:af:73:00:d3:0e:ad:40:c5:d9:
75:c5:05:ee:df:27:d3:59:32:ca:5b:1c:f2:52:f1:0e:8f:26:
7c:67:db:ce:61:a1:5e:47:7b:3d:45:16:60:f9:29:cd:1d:8f:
08:59:45:f2:4a:93:e0:41:8c:aa:b7:d7:30:62:c7:26:50:ef:
a7:fa:b1:73:57:cf:aa:97:0a:48:52:e1:c5:f3:20:c0:59:3e:
f3:62:5b:18:09:05:65:9a:cf:75:a4:56:9a:8c:e8:84:90:3d:
49:00:6f:8e:fb:03:b2:ed:bf:32:35:39:0b:0a:7f:f7:fe:36:
ec:ff:1a:5b:fb:16:20:f5:23:a5:ef:4a:c9:c8:55:17:b1:49:
45:3d:60:f2:82:dc:2e:9c:0f:be:7e:f5:fb:2d:30:64:62:35:
7b:41:ea:ae
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ//a0YJWP/DZ/qYUClEQx4rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyODZlOWYwODg0OGU0ODBiMWYzZTlhOWMwNmE4MzJkNDhj
ZTM3YWQwHhcNMjYwODE0MDgzNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTcwN2I4ZWY4NjJjY2E4N2Y1MzhjNjUzYmZkMDJhMGFmNzYxYzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNT4uWhr6tkPEB8OR3oc/k3oQoEp
yhseg2kNfHxnzjBBpSEuNHtuw/TF8AfJ/RhTV4Js73ZJhNaxGRTxVkPJDMEIKVrG
BZXzrrOWCFVYB+HtXR42z5GQhx6nG7wsqwHsaFUNDBbMEo4zJ/Rqi8ytseCkTiDW
s4lE5x0rjJNKrA/D1A5h8UVlqMexR1A/pxE0QoZJmh++JxYvDLwuEnvQUrVmO4AA
8i8A2uCalQn7iY2sSgcoqB8stmpexAV5hNr+/bdYxAYU8NiLgqaUyNPtqDAldJOp
QUukzEvgG9/v9k26QUizIFUS4SkTrjVXRNOlpUaTAP2VFo9+Z39psGF1JwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDlwe474Ysyof1OMZTv9AqCvdhwMMB8GA1UdIwQY
MBaAFLKG6fCISOSAsfPpqcBqgy1IzjetMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc29icDhJaEk1SUN4OC1tcHdHcURMVWpPTjYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC85MDA3MDQtNmI0Ny00MDE3LWI5N2Yt
NDYwMTY4MDE3M2FhLzEvT1hCN2p2aGl6S2hfVTR4bE9fMENvSzkySEF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC85MDA3MDQtNmI0Ny00MDE3LWI5N2YtNDYwMTY4MDE3M2Fh
LzEvc29icDhJaEk1SUN4OC1tcHdHcURMVWpPTjYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsbFQMA0G
CSqGSIb3DQEBCwUAA4IBAQB32HRavfUO/oEhubMXJ3Pl7KUmbyfOQ3J9mUwonRgA
906csYCzh9oPwqb8CcOs0MNNLNUGFLmcAMlkcCsuUzRk9/4AQ9DDW2detCxABAiR
fzXybdHB97haomS47DxaPWz+WAqvcwDTDq1Axdl1xQXu3yfTWTLKWxzyUvEOjyZ8
Z9vOYaFeR3s9RRZg+SnNHY8IWUXySpPgQYyqt9cwYscmUO+n+rFzV8+qlwpIUuHF
8yDAWT7zYlsYCQVlms91pFaajOiEkD1JAG+O+wOy7b8yNTkLCn/3/jbs/xpb+xYg
9SOl70rJyFUXsUlFPWDygtwunA++fvX7LTBkYjV7Qequ
-----END CERTIFICATE-----
Generated at Fri Aug 21 07:27:22 2026 by rpki-client