Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OXUN4DlsQg0ZHGrhDuvTNJhRYow.roa
File: OXUN4DlsQg0ZHGrhDuvTNJhRYow.roa (raw, json)
Hash identifier: HwTcQNIUy4mS7mn4qfHpp44KZZACoKGoBztgc2oTgCQ=
Subject key identifier: 39:75:0D:E0:39:6C:42:0D:19:1C:6A:E1:0E:EB:D3:34:98:51:62:8C
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019FC7E95D05BCEF3C94FA4F4EAF9C34CEDD
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OXUN4DlsQg0ZHGrhDuvTNJhRYow.roa
Signing time: Mon 03 Aug 2026 13:56:27 +0000
ROA not before: Mon 03 Aug 2026 13:56:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134494
IP address blocks: 185.218.20.0/24 maxlen: 24
193.8.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 13:56:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c7:e9:5d:05:bc:ef:3c:94:fa:4f:4e:af:9c:34:ce:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 3 13:56:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39750de0396c420d191c6ae10eebd3349851628c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1e:44:17:7c:44:00:78:ad:e6:3a:2d:60:81:
cd:38:36:d4:be:88:82:13:4f:51:8b:20:ce:22:30:
a9:c6:43:95:05:86:da:42:dc:b7:85:74:e4:6f:f7:
8a:b7:3b:92:5a:78:cf:c8:9b:dd:69:36:fe:b7:31:
aa:d4:76:a6:2b:bb:d5:6c:de:77:a4:69:98:21:f0:
86:e2:42:d4:d9:c7:bd:df:1a:1b:f1:34:56:4a:51:
5e:7d:85:ae:3c:27:17:c2:a4:2f:ed:0e:e3:6d:88:
56:5c:51:ec:c8:f0:19:07:b4:ad:af:98:ba:b1:c7:
62:78:32:c5:47:73:c2:a8:2d:83:d7:3c:07:32:61:
9a:1b:7b:1c:50:16:09:c4:05:29:56:32:49:de:80:
ea:39:a5:d0:a8:a7:3f:27:bf:ef:18:dc:9e:45:be:
dc:70:55:5b:fa:de:1a:44:20:c7:a3:0f:40:f5:64:
24:b2:fa:98:23:5d:bf:de:4c:a3:0b:d1:9d:86:1c:
26:d7:79:10:32:c4:8b:33:78:ca:82:a2:64:83:d8:
4d:b9:b1:16:8c:0b:4c:84:8d:f0:16:1a:7d:bc:c6:
97:61:9d:ce:a0:a4:8a:74:13:46:1d:74:9c:77:2e:
ea:04:2f:4d:6f:8a:72:98:e9:7a:53:c7:69:08:9c:
8c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:75:0D:E0:39:6C:42:0D:19:1C:6A:E1:0E:EB:D3:34:98:51:62:8C
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OXUN4DlsQg0ZHGrhDuvTNJhRYow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.20.0/24
193.8.114.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:56:af:cc:10:2c:30:10:8a:a4:20:fc:59:ba:5d:3e:57:2b:
a8:66:fe:5e:f7:50:bb:6a:bb:d8:a7:f0:fc:4b:22:50:cd:74:
83:fd:1f:e6:ac:d9:0a:1c:c9:71:56:6a:ce:da:3c:59:5b:83:
c8:e0:5b:e0:55:66:9a:ac:b9:57:3d:d9:b6:6c:ee:25:80:79:
a9:a8:91:b8:4c:79:0f:a9:67:9a:24:5e:6e:84:da:fd:6b:f2:
91:b9:36:13:8e:6c:e4:f6:5a:fa:3d:9f:58:60:d2:de:d2:60:
39:14:30:07:f5:c9:e0:e9:48:33:33:50:73:62:bd:7b:12:ff:
70:82:5c:7d:09:b5:d4:39:7d:43:bc:4f:e8:38:ef:85:e8:29:
4a:84:53:d6:b7:c9:37:56:78:dc:15:c2:14:eb:77:cf:2e:d9:
65:19:ef:77:94:45:2a:b3:f4:7b:5e:d5:46:24:5f:36:0e:8a:
41:10:7a:3f:da:31:1c:13:9f:55:a1:4f:14:77:16:d9:40:1a:
32:b9:65:36:d9:4b:79:f1:84:d3:b6:36:5d:5e:50:38:d5:a3:
be:75:59:ff:94:02:23:26:aa:ca:17:c9:ea:ca:dc:71:79:6d:
90:42:3a:fe:ea:14:cd:72:a0:ce:a0:10:2a:bc:db:dd:95:92:
d6:82:61:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 16:39:54 2026 by rpki-client