Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/ofNgTsLhFlgEDsvKiZ412P7DFYU.roa
File: ofNgTsLhFlgEDsvKiZ412P7DFYU.roa (raw, json)
Hash identifier: Y0fzRm6M3eBgwY7R7sV9GwjMfy4rcRNq36cv43Bb05s=
Subject key identifier: A1:F3:60:4E:C2:E1:16:58:04:0E:CB:CA:89:9E:35:D8:FE:C3:15:85
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01A01638ABC2221775FD31405C855BCA17D4
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/ofNgTsLhFlgEDsvKiZ412P7DFYU.roa
Signing time: Tue 18 Aug 2026 18:53:27 +0000
ROA not before: Tue 18 Aug 2026 18:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58232
IP address blocks: 185.113.10.0/24 maxlen: 24
195.254.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:16:38:ab:c2:22:17:75:fd:31:40:5c:85:5b:ca:17:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Aug 18 18:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1f3604ec2e11658040ecbca899e35d8fec31585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:81:5c:57:fe:db:6b:37:41:b6:bf:00:37:82:
c2:1c:e7:ea:95:6e:61:98:6b:1d:c8:74:27:3a:9b:
58:f9:3a:fb:4d:67:68:e9:0e:60:49:7b:43:db:9f:
65:62:13:94:81:5b:d2:9b:3b:24:61:39:74:77:7b:
c9:4d:ab:92:57:e4:be:03:7e:4c:d4:5a:63:6c:54:
b0:fa:cf:19:5f:21:62:a0:ac:bd:7d:d4:ab:5a:d4:
ff:2c:10:3a:45:90:9e:d6:70:eb:26:70:fb:a4:9f:
84:fe:ce:7c:11:72:1f:a6:66:4e:70:9c:4d:6c:d2:
e2:47:f3:18:ec:96:d0:8b:8a:0a:3b:c9:21:c9:34:
54:d7:d5:c2:fe:c4:2b:f6:45:ad:9a:56:c8:50:eb:
c2:b3:ff:0c:66:13:5f:89:b0:f0:fd:70:b0:48:9e:
a9:d6:94:c5:9b:8e:90:fb:78:2a:16:9b:a7:d8:27:
90:ca:df:7b:f1:7c:9b:b0:a9:2a:f1:a7:39:e1:d5:
62:29:43:5e:fd:f1:2e:60:f1:a6:9c:f1:cb:96:f8:
14:d0:96:5d:4d:f9:51:08:be:e1:81:88:12:22:99:
2d:2e:4c:36:c4:79:92:b7:a6:1d:de:3e:76:88:9d:
a8:13:bb:69:e3:44:a5:54:f9:18:7d:8e:fb:6c:05:
7a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F3:60:4E:C2:E1:16:58:04:0E:CB:CA:89:9E:35:D8:FE:C3:15:85
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/ofNgTsLhFlgEDsvKiZ412P7DFYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.10.0/24
195.254.165.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:6e:9f:49:1c:61:73:41:81:19:61:1c:39:01:d7:7e:48:45:
ef:30:a5:d3:e9:84:73:ea:1a:45:de:3a:0c:6f:e8:f1:b0:53:
b4:d3:99:df:33:2f:7f:62:bc:c6:af:fd:81:ae:9f:b4:40:84:
06:ee:03:db:e9:25:76:63:d6:20:09:12:b9:a0:80:02:00:73:
59:8a:6d:5d:0c:37:3d:21:96:d8:bc:17:5b:71:73:99:be:ea:
d0:4b:30:02:4c:61:35:84:27:71:4e:44:31:70:37:b6:da:ae:
42:04:6e:cc:6a:54:19:a4:d8:22:9e:1e:2d:22:6d:00:3c:50:
90:b6:c9:31:fd:a6:77:d3:83:22:07:50:f9:df:74:e3:3a:61:
44:ef:17:9a:f7:9f:b6:37:e4:9d:e3:26:3d:fe:f5:4a:10:3c:
9e:b3:c9:19:81:f9:88:0f:5e:a9:bb:d1:f6:be:c0:84:44:f8:
ae:ca:a0:65:b6:d3:2d:f6:1b:03:41:96:8a:7c:e8:48:db:33:
a2:93:50:b5:8a:0c:fc:8e:c3:a7:50:a5:6e:93:cc:ec:b9:f5:
86:bc:e8:64:8d:61:0f:ac:b2:8e:db:35:17:88:ff:2d:95:ca:
fe:4e:16:3b:c8:58:03:d7:2b:45:79:5b:94:0b:34:3c:5e:82:
7e:af:00:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 11:58:44 2026 by rpki-client