Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/oNgt3BaTR-_Plp41ccWuB2GYA0A.roa
File: oNgt3BaTR-_Plp41ccWuB2GYA0A.roa (raw, json)
Hash identifier: HCvpviLNDOW6HQcm6qAaXyjHOQvXlz8iAZsuuv4UC6Q=
Subject key identifier: A0:D8:2D:DC:16:93:47:EF:CF:96:9E:35:71:C5:AE:07:61:98:03:40
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F8C47ABBB62A0F4C3F6EBD9FB963EC4A9
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/oNgt3BaTR-_Plp41ccWuB2GYA0A.roa
Signing time: Thu 23 Jul 2026 00:02:14 +0000
ROA not before: Thu 23 Jul 2026 00:02:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219455
IP address blocks: 85.118.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8c:47:ab:bb:62:a0:f4:c3:f6:eb:d9:fb:96:3e:c4:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 23 00:02:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0d82ddc169347efcf969e3571c5ae0761980340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:75:10:df:93:c7:e2:13:0e:2b:05:e1:b9:c4:
88:4d:0e:d8:2d:b0:d4:16:5e:ee:5e:a3:bf:8c:f1:
d1:1a:ce:03:0a:7a:92:e0:d1:37:5e:5f:46:47:8a:
86:a7:fe:56:e1:b9:f2:7f:d8:d9:c3:91:33:8f:4c:
21:70:07:f5:a2:90:30:64:d1:1f:8b:4b:2b:8f:c5:
31:f6:47:ac:17:45:e5:07:d2:f3:eb:c8:75:36:87:
22:bf:06:d5:40:5c:bb:60:f3:27:9c:e9:8c:b5:84:
f9:60:56:8f:eb:e9:45:93:18:dd:cb:d4:1a:93:3f:
12:33:9f:fa:dc:3a:fe:41:e4:b3:87:68:d7:7a:83:
92:0f:7f:8c:09:69:59:38:c9:eb:1e:ea:ff:06:91:
0a:d9:2a:7e:b6:8d:23:68:eb:c3:1c:5d:80:0d:70:
d8:77:46:b8:20:23:38:46:3e:d7:cc:c1:22:46:50:
ad:84:5d:a4:92:8f:ce:6d:d8:16:f4:dc:12:95:0a:
c0:c0:5a:65:c5:9b:c6:6a:72:83:f3:75:92:1a:43:
ea:9b:b3:24:26:7a:e7:06:37:07:86:49:12:bc:97:
ff:47:69:a3:50:c6:93:55:d2:0c:6c:a7:dc:3e:0f:
ee:e5:f5:a5:a1:64:48:5b:38:20:ad:bf:d2:9e:0e:
2a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D8:2D:DC:16:93:47:EF:CF:96:9E:35:71:C5:AE:07:61:98:03:40
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/oNgt3BaTR-_Plp41ccWuB2GYA0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.118.167.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:2a:89:11:86:6e:35:72:70:6b:56:c6:29:cd:ad:9a:f8:ac:
c2:2f:de:fd:9f:92:65:87:b2:37:e0:cc:84:f2:1b:27:1f:10:
55:0b:ff:46:9d:08:13:fe:69:33:c0:ec:c6:ac:c8:d7:f4:97:
f7:5d:f2:ce:b3:79:38:36:50:83:ae:08:72:63:e3:7f:36:0f:
f9:c4:b2:38:94:40:34:89:43:43:9f:83:02:cd:f8:21:c0:cb:
44:53:26:ad:81:b2:a2:9c:ce:85:35:73:4b:07:73:3e:8b:5a:
83:88:38:92:74:04:05:c0:64:ad:79:f7:a4:8c:a0:79:ed:e0:
64:f2:f5:25:17:f1:47:c9:66:1d:06:6a:20:70:f0:88:5a:d6:
11:a0:6c:68:f0:91:f1:35:0e:16:08:6b:c0:e7:c0:5d:96:7f:
65:ae:01:0d:f4:7d:d9:a9:c8:ac:2d:4c:9f:ca:e9:e2:2d:af:
ee:3a:91:55:26:c9:6b:0f:f8:6c:f0:fd:e2:f7:35:d8:c1:46:
e1:2f:10:15:39:aa:ec:55:44:e8:b0:e7:a2:35:d9:18:b0:c6:
27:7f:5e:97:bd:3d:46:72:8c:84:b0:b9:04:a6:0f:78:2c:e7:
24:59:eb:96:73:19:cc:ee:25:af:55:c5:7b:24:d4:dc:90:c3:
e3:f8:0a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:54:47 2026 by rpki-client