Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/OunyrU6BBdReyTyaGtBOEde3_sk.roa
File: OunyrU6BBdReyTyaGtBOEde3_sk.roa (raw, json)
Hash identifier: dT+oapbW+wFYcujVYugQxPifKqhdPs/FWRx90NuTH1s=
Subject key identifier: 3A:E9:F2:AD:4E:81:05:D4:5E:C9:3C:9A:1A:D0:4E:11:D7:B7:FE:C9
Certificate issuer: /CN=a8b2c37b38a5f773959878a4410db59e173dc206
Certificate serial: 019F23692B45EDA02B442367AF059D1A058A
Authority key identifier: A8:B2:C3:7B:38:A5:F7:73:95:98:78:A4:41:0D:B5:9E:17:3D:C2:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLLDezil93OVmHikQQ21nhc9wgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/OunyrU6BBdReyTyaGtBOEde3_sk.roa
Signing time: Thu 02 Jul 2026 15:18:42 +0000
ROA not before: Thu 02 Jul 2026 15:18:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51142
IP address blocks: 185.189.208.0/24 maxlen: 24
185.189.209.0/24 maxlen: 24
185.189.210.0/24 maxlen: 24
185.189.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/qLLDezil93OVmHikQQ21nhc9wgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/qLLDezil93OVmHikQQ21nhc9wgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLLDezil93OVmHikQQ21nhc9wgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:2b:45:ed:a0:2b:44:23:67:af:05:9d:1a:05:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b2c37b38a5f773959878a4410db59e173dc206
Validity
Not Before: Jul 2 15:18:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ae9f2ad4e8105d45ec93c9a1ad04e11d7b7fec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0b:50:13:c3:68:67:f3:7c:9e:f0:94:2c:28:
7e:9a:db:8f:12:da:ed:81:5d:a7:cc:7a:a0:99:72:
6c:5d:14:19:30:46:4f:7e:65:98:cd:1e:c5:c7:f3:
1c:eb:6d:41:05:52:47:e2:26:71:f2:d2:08:e6:bb:
c2:33:45:45:96:54:88:13:86:4b:35:49:19:d8:99:
f7:c3:8a:a6:e1:de:c6:20:23:b2:9f:d9:eb:06:c9:
6c:49:17:26:91:c0:59:9c:80:05:c4:78:a5:f0:33:
2c:54:ac:a7:43:66:be:6a:c9:7d:10:9b:97:c0:e9:
da:c4:c4:02:da:ea:5c:e1:f7:fd:8d:7b:d9:32:32:
ac:98:f2:3f:4b:81:35:98:9d:87:23:77:c1:f8:63:
f1:d9:3c:6b:b7:eb:bf:19:e7:12:38:38:db:28:cf:
71:45:cb:40:1c:0f:a2:d2:bc:98:41:b6:23:87:ba:
5e:99:da:8a:ce:ac:a1:72:0b:db:ff:ea:3d:a1:62:
32:06:37:c3:ec:f7:df:23:e1:2d:ee:87:8b:12:f6:
b7:99:5d:a1:1d:84:9f:0d:ca:5a:13:a0:7b:1d:d0:
69:9c:26:b4:fd:1b:c5:b9:cd:87:e5:e9:fd:ab:4f:
dc:14:2e:4d:98:3d:50:f5:1a:8c:60:a2:2a:5a:8f:
76:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E9:F2:AD:4E:81:05:D4:5E:C9:3C:9A:1A:D0:4E:11:D7:B7:FE:C9
X509v3 Authority Key Identifier:
keyid:A8:B2:C3:7B:38:A5:F7:73:95:98:78:A4:41:0D:B5:9E:17:3D:C2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLLDezil93OVmHikQQ21nhc9wgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/OunyrU6BBdReyTyaGtBOEde3_sk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/qLLDezil93OVmHikQQ21nhc9wgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.208.0/22
Signature Algorithm: sha256WithRSAEncryption
09:4d:23:3a:2f:d4:11:76:6d:3c:e9:38:7d:f8:30:8c:2d:b5:
7e:2c:f9:40:1c:7d:47:f1:19:ad:b6:aa:9b:ce:d0:7e:e3:45:
53:7d:15:13:4f:8c:53:de:6b:b9:3e:d4:fb:b7:95:a2:87:9e:
25:1d:54:36:91:37:00:4f:72:40:0f:04:7d:10:a1:f7:10:6b:
92:0e:d6:a2:46:72:26:18:7a:39:5c:14:1f:c6:d2:61:a4:ca:
e5:b8:cb:e2:bc:91:63:e1:e5:a5:2f:ce:e7:5f:fc:e4:ee:23:
21:d3:1a:f1:8a:f4:19:c9:94:81:70:26:cb:bd:4b:20:ca:85:
8f:30:43:e9:6f:f6:f1:40:89:c1:d3:2f:61:89:23:ec:21:02:
9f:90:0f:59:98:86:ef:fe:8c:00:d2:f3:f6:ae:7c:4e:d0:34:
ed:80:3b:7f:9b:f3:d8:39:26:75:76:c1:2c:59:a1:03:fb:31:
97:75:29:7f:d6:23:9b:8e:7b:65:41:6c:56:95:9c:fb:59:ea:
1c:d5:8e:78:cf:8f:3f:d9:1b:86:cf:72:4a:f3:b6:0d:82:04:
2e:fb:8c:d4:73:39:b1:2c:53:f9:7d:90:97:95:65:86:bf:71:
1f:03:22:2a:78:c2:4d:39:18:aa:f5:aa:2f:c7:a5:cc:92:aa:
47:9c:7d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:54:25 2026 by rpki-client