Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/OaG9G9Rkeg7MQ9HAOpMM6Qb2lyE.roa
File: OaG9G9Rkeg7MQ9HAOpMM6Qb2lyE.roa (raw, json)
Hash identifier: 2tlWpqcv4FYW9H4L8bdUATgM+St3ZdyU2sE6jN6ILxk=
Subject key identifier: 39:A1:BD:1B:D4:64:7A:0E:CC:43:D1:C0:3A:93:0C:E9:06:F6:97:21
Certificate issuer: /CN=07f2a175be20108641c649553213f212511667a5
Certificate serial: 019EF42B273B33BFE51616882D863B40E35D
Authority key identifier: 07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/OaG9G9Rkeg7MQ9HAOpMM6Qb2lyE.roa
Signing time: Tue 23 Jun 2026 11:08:48 +0000
ROA not before: Tue 23 Jun 2026 11:08:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39806
IP address blocks: 185.166.232.0/23 maxlen: 24
185.166.234.0/24 maxlen: 24
185.166.235.0/24 maxlen: 24
2a0b:2200::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f4:2b:27:3b:33:bf:e5:16:16:88:2d:86:3b:40:e3:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f2a175be20108641c649553213f212511667a5
Validity
Not Before: Jun 23 11:08:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39a1bd1bd4647a0ecc43d1c03a930ce906f69721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:08:9e:cf:72:3b:71:ff:dd:5e:0a:b6:28:4e:
96:aa:70:26:3a:83:ce:54:4e:2b:0a:cd:d5:70:f4:
68:84:6a:29:e5:7b:2b:ad:f4:80:66:9a:ee:97:27:
80:a8:f0:5d:e8:46:18:6c:f6:c8:80:ac:55:6a:2a:
4e:b4:f4:1a:ec:43:16:0f:9e:1f:c7:8e:59:23:e5:
77:c9:b2:f3:1c:34:73:18:6a:89:5e:80:89:ff:7c:
12:e7:36:4e:1c:71:aa:e2:2c:1d:9c:2d:92:6f:4d:
10:5f:41:81:6b:aa:47:1f:da:43:45:00:85:44:84:
75:4b:a7:09:cb:2c:5e:31:b8:95:36:21:c1:21:e7:
07:6f:a0:b3:5b:7e:f5:5c:25:9f:45:02:3f:e0:76:
f8:01:ce:8f:6e:a6:9f:d4:f5:48:ca:51:e1:50:3e:
8e:ce:0f:9e:10:80:44:0b:bc:19:c0:61:19:7d:36:
71:d6:33:9d:1d:f6:4e:54:61:69:f3:40:af:c3:12:
8c:0e:c2:8a:72:86:70:71:6e:ef:8f:dc:a4:e2:46:
97:12:76:f0:9c:b5:ab:72:d9:98:cf:b3:69:f5:77:
83:07:57:ec:4a:ca:08:96:8a:70:c7:66:5e:e8:58:
f0:a0:76:6a:58:b7:41:36:c1:34:bd:0d:9f:1d:89:
e7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A1:BD:1B:D4:64:7A:0E:CC:43:D1:C0:3A:93:0C:E9:06:F6:97:21
X509v3 Authority Key Identifier:
keyid:07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/OaG9G9Rkeg7MQ9HAOpMM6Qb2lyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.232.0/22
IPv6:
2a0b:2200::/29
Signature Algorithm: sha256WithRSAEncryption
ae:5a:a9:9c:81:85:60:05:89:9c:3e:82:58:46:ee:bc:09:e0:
5c:05:e8:cc:2e:db:ea:88:24:b8:55:1e:14:21:1e:ae:a5:57:
1c:ac:92:25:ec:34:35:14:d5:67:b8:b4:f0:17:0a:7b:1d:c5:
46:a8:f6:61:e0:f6:ae:b2:64:e7:54:46:37:2a:87:91:63:e1:
21:ad:62:6c:4c:77:ee:2d:bd:ed:e5:34:7a:ff:17:29:26:8f:
e7:97:e0:75:86:5e:82:2d:36:9f:7e:b7:c2:e2:71:52:b6:14:
46:c2:ba:05:0f:17:e8:4f:ae:17:d5:72:96:1d:8a:44:5a:1e:
ee:1e:f8:1d:69:8f:4b:80:c1:59:5a:87:7c:e4:0c:cc:e7:33:
93:22:25:3b:c7:97:a0:03:71:f3:f2:56:51:66:1f:89:bc:1b:
f5:09:57:72:f6:41:ea:88:a5:22:62:d9:4e:ba:09:47:00:b6:
4b:df:97:6d:13:0b:a4:12:3b:48:6d:ad:d2:85:57:78:89:bd:
ee:72:c8:82:36:1f:1b:09:f5:fd:06:19:69:e4:2e:37:af:76:
90:b4:5c:78:74:e7:8b:24:98:cd:07:49:99:5f:bd:6c:6f:ad:
a7:5e:95:3e:8e:3e:fa:3f:ba:33:c0:b8:e5:ef:86:0b:fa:64:
38:fb:7c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:06:17 2026 by rpki-client