Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/1-o0oBAgqjbEtsKujdEf_t825kA4.roa
File: 1-o0oBAgqjbEtsKujdEf_t825kA4.roa (raw, json)
Hash identifier: SwOkcVx10T9YlM/ZZvY4xDb4IxE8gvR4HljVlu3CooU=
Subject key identifier: FA:8D:28:04:08:2A:8D:B1:2D:B0:AB:A3:74:47:FF:B7:CD:B9:90:0E
Certificate issuer: /CN=a332dbc5feb60058a32c805626141d4fd80e5bd4
Certificate serial: 019F2369240CA2CE3EE076F5BF97A150681D
Authority key identifier: A3:32:DB:C5:FE:B6:00:58:A3:2C:80:56:26:14:1D:4F:D8:0E:5B:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ozLbxf62AFijLIBWJhQdT9gOW9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/1-o0oBAgqjbEtsKujdEf_t825kA4.roa
Signing time: Thu 02 Jul 2026 15:18:40 +0000
ROA not before: Thu 02 Jul 2026 15:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60068
IP address blocks: 89.187.160.0/23 maxlen: 23
89.187.162.0/23 maxlen: 23
89.187.164.0/24 maxlen: 24
89.187.165.0/24 maxlen: 24
89.187.166.0/23 maxlen: 23
89.187.168.0/24 maxlen: 24
89.187.169.0/24 maxlen: 24
89.187.170.0/23 maxlen: 23
89.187.172.0/23 maxlen: 23
89.187.174.0/24 maxlen: 24
89.187.175.0/24 maxlen: 24
89.187.176.0/22 maxlen: 22
89.187.180.0/22 maxlen: 22
89.187.184.0/22 maxlen: 22
89.187.188.0/22 maxlen: 22
185.93.0.0/24 maxlen: 24
185.93.1.0/24 maxlen: 24
185.93.2.0/24 maxlen: 24
185.93.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/ozLbxf62AFijLIBWJhQdT9gOW9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/ozLbxf62AFijLIBWJhQdT9gOW9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ozLbxf62AFijLIBWJhQdT9gOW9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:24:0c:a2:ce:3e:e0:76:f5:bf:97:a1:50:68:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a332dbc5feb60058a32c805626141d4fd80e5bd4
Validity
Not Before: Jul 2 15:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa8d2804082a8db12db0aba37447ffb7cdb9900e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:74:81:0b:d6:de:e1:d1:23:57:68:80:99:b3:
d9:b2:e4:ac:7c:89:6e:67:9e:54:a1:51:14:af:04:
5e:95:98:31:57:08:9d:b1:0f:e1:ee:c4:83:92:e4:
dc:e2:32:fd:dd:00:bb:36:c6:34:16:ba:7c:4c:1f:
04:03:64:46:ab:02:7a:b3:87:4f:54:88:b9:09:f0:
1b:f7:86:cf:89:21:6e:8a:3f:99:c2:f1:11:38:4d:
5f:19:5b:a7:2a:d0:e5:c2:5f:bf:37:55:4a:15:6e:
2f:9d:85:79:3f:c0:70:5b:48:04:4b:f2:9c:ef:ea:
f6:3a:2d:2c:e6:d3:2e:93:4d:9d:07:26:3e:ab:85:
ac:ba:88:7c:f9:ed:7b:25:e6:a1:19:aa:c6:35:c3:
54:9e:2c:f9:64:71:04:83:3e:2a:b0:15:7c:cb:39:
ec:ea:9b:24:47:41:27:7e:d3:12:fb:34:cf:1d:96:
04:27:12:91:dd:e2:c1:07:b7:ef:d3:d6:44:c7:71:
ed:41:c7:8e:9e:7e:5d:e4:33:0f:d7:0d:82:29:e9:
2a:a9:9b:d8:98:e9:90:d4:d9:e2:07:c8:1f:95:47:
5a:94:50:6c:92:8b:78:6b:0f:05:87:83:9e:fb:06:
ac:36:be:08:42:92:38:ff:05:a7:f3:d3:56:cd:0b:
d8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8D:28:04:08:2A:8D:B1:2D:B0:AB:A3:74:47:FF:B7:CD:B9:90:0E
X509v3 Authority Key Identifier:
keyid:A3:32:DB:C5:FE:B6:00:58:A3:2C:80:56:26:14:1D:4F:D8:0E:5B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ozLbxf62AFijLIBWJhQdT9gOW9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/1-o0oBAgqjbEtsKujdEf_t825kA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/ozLbxf62AFijLIBWJhQdT9gOW9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.160.0/19
185.93.0.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:b0:e3:4e:e3:36:b9:ac:3b:dc:59:e6:fc:df:f9:e2:bd:0a:
90:ec:68:90:e1:5b:55:87:cb:61:dd:ae:0d:6c:fe:a8:8f:b1:
25:fb:6b:01:eb:28:c5:4f:57:88:a3:1e:4b:b6:4f:e4:b7:f7:
62:3c:93:af:44:04:2b:da:49:f6:6b:84:a8:7a:2c:2a:c7:26:
cf:f4:57:60:21:68:07:d3:34:fe:56:a7:e1:52:b2:0b:c6:76:
cb:59:42:bf:7e:e8:86:a5:66:3e:1b:44:9d:5b:c0:a7:30:f8:
2b:68:f0:ec:00:cd:0e:a3:0a:b3:c8:a9:b4:3f:8a:db:f9:01:
fb:1d:8b:1b:1e:2e:f5:94:47:51:ab:fd:44:26:25:25:75:26:
04:e4:3f:d8:6f:d8:84:af:41:02:b6:46:59:2e:0c:8e:30:f8:
ff:46:1d:4b:3b:1f:97:e0:87:e6:81:34:de:68:be:7a:d9:3e:
1f:31:6d:68:51:9b:d3:32:40:05:b1:6d:c6:06:61:7a:ce:71:
b3:7d:e9:3f:b4:5d:ee:d9:2e:38:c1:f0:c5:07:3e:48:53:6a:
ec:7f:8f:3b:d4:8e:1e:c1:66:3b:65:16:0f:28:3a:66:57:ee:
5a:09:2e:e4:68:d5:62:7c:fd:19:6b:fc:59:33:0d:fd:35:9f:
fb:2c:98:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:34 2026 by rpki-client