Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/O0d4AJLZUHgcGy1VxJh3yfRZ8JM.roa
File: O0d4AJLZUHgcGy1VxJh3yfRZ8JM.roa (raw, json)
Hash identifier: mRjHVDH2yxnkGdxPRkyTQ4ZPW9vJVfEatCU81GhzSgo=
Subject key identifier: 3B:47:78:00:92:D9:50:78:1C:1B:2D:55:C4:98:77:C9:F4:59:F0:93
Certificate issuer: /CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9
Certificate serial: 019EE2590FC911B974203211FCCA92A7799C
Authority key identifier: 48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/O0d4AJLZUHgcGy1VxJh3yfRZ8JM.roa
Signing time: Sat 20 Jun 2026 00:05:48 +0000
ROA not before: Sat 20 Jun 2026 00:05:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209365
IP address blocks: 185.206.62.0/24 maxlen: 24
185.206.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Jul 2026 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e2:59:0f:c9:11:b9:74:20:32:11:fc:ca:92:a7:79:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9
Validity
Not Before: Jun 20 00:05:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b47780092d950781c1b2d55c49877c9f459f093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:64:ea:d5:de:d3:37:14:14:83:0b:ad:83:06:
54:6c:ff:32:c9:e8:af:f2:bd:53:b4:ab:8f:60:cc:
82:92:7c:9f:3e:0d:74:e7:43:43:bb:80:be:59:44:
d5:75:33:2f:f7:d5:a7:d5:18:69:a4:03:86:0c:0e:
5d:fd:40:27:3c:56:c5:a1:95:89:89:73:ba:22:b6:
73:5f:e9:1b:34:31:3c:5c:a1:23:70:b1:90:3f:23:
71:6a:8b:81:c6:bf:a2:02:bb:e1:14:a1:1e:16:ee:
86:fd:e9:2e:b0:fe:bd:22:e8:3a:77:ca:a2:f5:fc:
11:f4:6b:69:76:32:94:90:df:01:45:b6:8a:ea:da:
8e:5d:de:df:0a:77:23:4d:75:3d:31:64:eb:a2:9f:
57:d2:cb:47:8a:c9:87:5b:1b:73:0e:60:7a:79:c6:
c3:4d:dd:22:83:c3:b1:5d:de:85:5a:01:8a:ac:33:
6c:1d:a1:66:c0:8a:43:51:db:22:87:20:06:81:77:
68:b6:18:f5:c7:bf:b9:ab:98:ea:11:2e:51:a2:ff:
3c:eb:d2:80:32:cf:00:c2:cd:27:c2:a9:14:da:cd:
a0:ea:fa:84:90:b1:fe:22:1d:8e:2e:0d:6c:6b:9a:
0f:37:c6:13:e6:d0:ef:72:b4:e4:d7:fd:86:42:0b:
82:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:47:78:00:92:D9:50:78:1C:1B:2D:55:C4:98:77:C9:F4:59:F0:93
X509v3 Authority Key Identifier:
keyid:48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/O0d4AJLZUHgcGy1VxJh3yfRZ8JM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.62.0/23
Signature Algorithm: sha256WithRSAEncryption
59:df:4a:a3:61:f8:a0:61:92:1e:2a:c2:48:d1:7e:ba:df:a0:
00:43:aa:12:66:47:50:1b:37:fe:9b:32:3a:a8:47:3e:af:3b:
ec:e1:de:b5:02:fd:43:60:36:46:df:94:9e:88:43:96:54:2a:
2e:aa:90:46:d2:4c:fa:9c:83:3a:d8:61:05:e8:e3:bd:2e:1f:
89:c7:f8:e7:ea:02:f7:3e:ec:89:48:10:16:69:ba:69:b8:6f:
b1:20:18:e4:14:36:72:cc:33:bd:33:48:52:48:2a:d9:94:b6:
67:50:b1:6a:59:0c:f1:ac:93:51:54:33:72:4a:e0:47:2f:0c:
26:df:8d:1d:1c:04:4b:d9:92:64:ba:15:64:ec:2f:74:48:41:
c0:5c:cc:c6:38:e6:f0:bc:4a:ef:d1:41:de:a4:82:89:d7:42:
10:5c:0a:b1:17:23:fc:02:fe:ed:88:cd:d1:e6:d5:90:cf:74:
7b:02:59:90:ab:ca:c4:44:06:3d:84:5d:39:76:06:ab:07:ff:
9b:bd:59:67:d2:69:dd:b6:22:9b:b1:f7:0a:82:96:7c:61:df:
d4:7b:f5:2e:57:e9:d2:bd:64:bc:73:f1:aa:ff:26:9c:8a:d7:
26:df:df:24:12:72:a8:e4:9a:21:7b:51:fc:97:0e:30:9c:11:
77:1b:c3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 18:32:46 2026 by rpki-client