Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/OhIqumnSJaO66404j7n6rwF3jLs.roa
File: OhIqumnSJaO66404j7n6rwF3jLs.roa (raw, json)
Hash identifier: AVZhbd5VYfaez8msmq+7GcXhBU/fblpG96UUwF3P60U=
Subject key identifier: 3A:12:2A:BA:69:D2:25:A3:BA:EB:8D:38:8F:B9:FA:AF:01:77:8C:BB
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 019D30D809D1C1102B4C9A6197448090F728
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/OhIqumnSJaO66404j7n6rwF3jLs.roa
Signing time: Fri 27 Mar 2026 19:49:17 +0000
ROA not before: Fri 27 Mar 2026 19:49:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44477
IP address blocks: 194.31.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Apr 2026 00:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:30:d8:09:d1:c1:10:2b:4c:9a:61:97:44:80:90:f7:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Mar 27 19:49:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a122aba69d225a3baeb8d388fb9faaf01778cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:55:6d:29:55:b6:0c:44:a8:04:c0:2d:aa:a7:
d1:cb:68:69:f7:9b:a9:fc:43:ff:f1:56:67:48:6c:
72:b8:04:da:87:a0:08:d7:b4:40:a6:8f:4a:40:36:
b5:b7:14:31:81:a1:07:e4:a4:95:61:af:72:01:42:
46:08:6a:3f:ec:96:33:4c:69:92:c9:47:52:18:ab:
a9:1c:1b:aa:ac:88:ca:cf:ec:a5:b3:02:70:f5:78:
24:43:8b:80:a5:44:2f:1d:a5:c3:5d:a5:c2:95:1c:
9f:c8:4a:93:32:72:49:b6:60:2f:f3:60:2a:eb:ae:
cf:68:ae:68:36:39:79:da:78:88:da:44:b6:e0:7e:
7c:5e:e7:e6:18:0f:f0:7c:cf:92:54:18:40:93:8e:
16:98:71:8d:c9:da:6d:2f:f5:3d:a2:44:f5:e2:d1:
cd:59:05:89:d8:2e:ae:9c:e7:67:68:de:6a:9c:5d:
41:50:c8:50:92:f1:99:d2:5a:90:19:1e:2c:15:c1:
32:32:e4:57:0c:9f:27:38:04:11:f2:8e:6a:c7:f1:
2b:27:4b:ec:68:23:03:3c:70:57:8c:a5:e2:e1:90:
91:2a:02:9a:75:8f:d7:a5:31:10:25:0b:19:d2:6a:
64:d2:ff:fe:ad:18:b4:ef:6e:4e:a3:a5:5d:4a:6e:
55:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:12:2A:BA:69:D2:25:A3:BA:EB:8D:38:8F:B9:FA:AF:01:77:8C:BB
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/OhIqumnSJaO66404j7n6rwF3jLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.73.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:e3:68:c0:f3:db:79:e6:0d:59:29:83:81:2a:64:20:c3:2c:
ae:4d:96:ad:02:49:bc:8f:47:6b:dd:49:2b:18:34:86:33:01:
9c:b3:d1:55:22:aa:f1:4d:10:02:12:e6:07:98:99:a4:bf:61:
c3:16:d4:c5:e6:9f:b8:22:08:df:62:8d:f0:99:52:83:57:e0:
0d:bd:c4:fe:33:6c:d0:58:5a:33:50:94:f8:91:9c:ff:ac:0d:
a8:74:e2:e1:9f:9a:44:4c:3c:96:81:ae:2c:8b:13:79:5e:b4:
73:c7:15:ce:84:10:24:e7:3b:7a:de:17:2b:17:63:01:bc:7e:
73:1a:69:fb:46:49:32:51:62:c3:c4:94:e8:40:19:69:be:4a:
db:33:ef:9a:a0:ca:6b:6d:bd:b7:96:fe:5e:f6:14:54:f8:b1:
9d:66:c6:6f:00:fd:73:4e:62:42:c0:13:5f:c1:07:a0:9c:28:
20:69:80:7e:e7:d8:53:6e:99:a7:41:9d:27:68:10:f8:0a:44:
28:7c:0f:a6:59:c0:c1:c5:21:d7:fe:52:54:e9:6a:c1:c6:06:
a2:7a:52:90:68:05:59:b9:45:aa:b4:f7:df:35:3b:d5:f2:87:
00:ac:7c:10:73:28:f5:86:a6:58:0b:12:c3:e1:08:08:64:55:
60:5b:09:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 09:34:23 2026 by rpki-client