Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/OGHkr0sseqVyPYMaosc0EKOfAbE.roa
File: OGHkr0sseqVyPYMaosc0EKOfAbE.roa (raw, json)
Hash identifier: wHhBT3+BNkPQLV5c3JD9yLqsApNS0AOyvlFX/QBAowQ=
Subject key identifier: 38:61:E4:AF:4B:2C:7A:A5:72:3D:83:1A:A2:C7:34:10:A3:9F:01:B1
Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial: 019DB682EC2D07DFDE1A6936448631848049
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/OGHkr0sseqVyPYMaosc0EKOfAbE.roa
Signing time: Wed 22 Apr 2026 18:45:26 +0000
ROA not before: Wed 22 Apr 2026 18:45:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198550
IP address blocks: 81.90.17.0/24 maxlen: 24
81.90.21.0/24 maxlen: 24
81.90.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b6:82:ec:2d:07:df:de:1a:69:36:44:86:31:84:80:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Validity
Not Before: Apr 22 18:45:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3861e4af4b2c7aa5723d831aa2c73410a39f01b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:55:49:3d:a6:de:7f:fa:22:da:bc:09:ae:a5:
27:a4:20:b8:af:f9:16:3e:20:fa:6b:dc:1f:80:c0:
0e:00:f0:bf:6a:f6:c9:46:6e:34:e2:6b:61:1c:97:
fe:e3:a5:8f:5a:33:23:a4:dc:be:61:c1:fd:f3:20:
24:9c:4b:ad:24:31:e3:20:d8:be:23:d4:bf:a4:d4:
1c:0b:de:de:dd:8f:d8:cc:dc:6b:62:2a:c4:98:e1:
78:6b:2a:f6:dd:fe:e8:b5:b8:51:8c:43:52:c6:ae:
1e:e2:3f:79:de:36:ef:c7:54:95:64:5f:2c:e4:b2:
f1:f2:fc:94:15:ce:7b:8c:dd:c5:09:77:86:7a:f0:
01:7a:20:57:fe:6a:c4:cd:61:41:97:a6:b2:c0:aa:
fe:64:79:f0:ab:10:01:db:9d:92:c9:af:4c:6e:f8:
3d:02:06:cb:71:e1:20:30:8c:cb:99:82:55:96:b1:
f1:ea:eb:22:fd:19:14:14:d1:b4:f3:c0:c6:1b:cf:
65:57:29:e5:5d:f0:4a:9d:71:44:0e:cd:a5:d3:f9:
0a:02:01:b7:27:52:c4:5a:e5:a8:fa:7a:09:e9:e0:
8d:0b:9d:a7:7c:88:d6:db:11:e4:c3:3b:a5:46:2e:
65:99:42:ab:44:34:8c:75:cd:4c:ac:f8:8d:f5:3b:
83:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:61:E4:AF:4B:2C:7A:A5:72:3D:83:1A:A2:C7:34:10:A3:9F:01:B1
X509v3 Authority Key Identifier:
keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/OGHkr0sseqVyPYMaosc0EKOfAbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.90.17.0/24
81.90.21.0/24
81.90.25.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:24:20:12:2e:42:2d:d9:14:99:9b:f4:f1:82:7b:6d:23:ce:
3a:8a:60:e1:a8:4e:ed:8e:ac:7b:b0:10:37:3b:b8:a1:d4:fc:
22:bc:83:a8:81:c5:8a:35:25:3d:53:bf:2c:29:27:58:86:c8:
21:25:1f:8c:90:c3:4b:51:f7:31:5d:f9:bb:0b:e2:17:4f:35:
03:58:f5:ca:9b:9a:b5:2f:e0:0d:56:08:20:0d:a9:2e:43:9f:
24:b5:09:61:f7:18:24:d9:bf:df:5f:c1:7d:5e:cb:9d:05:cd:
c2:eb:9c:fc:38:29:47:0d:54:47:65:b3:1a:aa:ad:a7:20:db:
85:6e:43:6c:1f:58:1f:63:e8:69:1e:1f:e7:19:27:1f:54:0f:
c4:ed:96:e0:6a:c5:4f:ba:08:1d:72:eb:48:d5:51:46:85:7a:
2c:44:72:7d:1d:36:1f:3d:6d:47:d6:8d:96:4e:54:99:02:ea:
86:c7:e3:a0:01:81:c8:c6:23:93:9e:69:b2:9d:96:5e:cb:cc:
98:a2:74:1b:fb:4b:fb:76:3b:a7:23:0f:b2:07:58:f0:3a:85:
eb:6c:f9:4b:81:13:37:72:88:b3:1f:42:aa:bc:34:a5:82:b4:
90:e9:67:ef:23:79:10:db:bc:c5:61:af:5d:72:12:01:db:c4:
69:da:28:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 23 10:25:52 2026 by rpki-client