Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/oihjtmeS3ilF7kUZ-KZkRlcX1-g.roa
File: oihjtmeS3ilF7kUZ-KZkRlcX1-g.roa (raw, json)
Hash identifier: 2tXQpehgXTGftRYZRQbWA4kfkjxdpHqaEJJSYRNJYbQ=
Subject key identifier: A2:28:63:B6:67:92:DE:29:45:EE:45:19:F8:A6:64:46:57:17:D7:E8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F8C47AACE038DF02B453ED50FEAD0A2D9
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/oihjtmeS3ilF7kUZ-KZkRlcX1-g.roa
Signing time: Thu 23 Jul 2026 00:02:14 +0000
ROA not before: Thu 23 Jul 2026 00:02:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219236
IP address blocks: 94.249.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8c:47:aa:ce:03:8d:f0:2b:45:3e:d5:0f:ea:d0:a2:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 23 00:02:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a22863b66792de2945ee4519f8a664465717d7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e6:b0:8d:d9:4b:c4:e4:f2:46:8b:2f:dd:68:
dc:09:1e:2c:40:d5:b7:fd:9d:d6:0b:6d:02:12:3f:
06:d8:11:d9:3a:95:08:51:c4:fe:27:30:d0:25:be:
f7:86:23:04:de:2d:3d:1b:bd:4e:a1:55:4a:45:ac:
07:81:9c:60:cc:61:ba:36:53:60:f0:af:54:9d:ab:
a9:e3:07:1c:b3:9e:bc:fe:f4:90:c9:cc:ac:e4:43:
65:6b:59:31:6f:38:58:eb:c8:14:18:ab:e2:2d:a8:
0b:c4:93:c3:2c:d4:52:f4:d1:aa:2c:61:c5:0d:50:
38:4d:1a:d6:b9:e6:45:ab:e8:47:7f:23:b1:3a:dc:
d7:98:6a:51:d4:98:e7:97:8e:36:3a:8a:33:08:71:
f4:2c:4d:6d:9f:d3:0d:f9:a8:c2:f3:0d:ba:2b:1f:
48:7e:92:db:53:4d:dc:dc:0a:db:1d:d5:c1:e5:bd:
d0:1c:a0:41:60:d9:02:ff:fa:ab:67:91:53:14:1f:
c3:7c:99:a8:20:14:63:6f:22:9d:1b:a2:bf:2d:1f:
e9:e1:13:b7:19:57:c4:f9:ee:e9:0b:8b:64:4c:81:
0a:84:9d:5a:a0:33:63:c3:a0:99:72:81:28:ea:e9:
ee:df:e2:6f:e0:ff:c9:cb:6c:ad:c8:3b:f5:29:c5:
d8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:28:63:B6:67:92:DE:29:45:EE:45:19:F8:A6:64:46:57:17:D7:E8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/oihjtmeS3ilF7kUZ-KZkRlcX1-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.249.233.0/24
Signature Algorithm: sha256WithRSAEncryption
e5:93:39:20:2f:51:2f:82:43:c9:3a:c9:bd:a4:8c:a2:d1:1a:
d3:38:7b:8e:5e:b7:a7:de:84:fa:b2:a3:7a:f3:cd:0b:71:99:
ba:13:68:f1:a0:6e:2f:b4:37:2e:5d:6a:c6:a3:7f:8f:15:7f:
76:16:a3:ed:e9:fa:6b:47:5b:f0:86:0f:b1:f9:3c:cc:d5:37:
6f:81:8c:de:3e:57:ce:00:c2:aa:f3:31:9d:ac:ba:78:d9:1c:
34:76:79:6b:ac:ed:fb:3e:20:4a:2e:44:fc:06:c6:57:60:74:
c1:b0:e2:7c:a2:16:66:27:82:14:9b:9b:75:42:e9:c7:7c:67:
97:d8:40:e4:e2:c7:6e:34:b5:8a:c6:04:5b:37:09:dc:20:29:
0b:59:22:35:2d:46:2e:1e:11:13:97:0f:0d:bd:4f:3a:e2:2e:
60:7e:9d:b0:fe:98:ab:d2:fa:27:bb:37:29:4c:50:7a:09:bb:
05:c6:b1:fb:34:1c:f3:0b:b0:60:ee:69:b7:3c:01:b5:cb:26:
5d:d2:1a:1c:d5:e2:2b:2b:e0:8e:15:8e:b8:82:f7:14:39:7e:
cb:e1:08:f8:15:e0:b2:0e:ac:d4:f2:b0:2d:b0:63:50:24:61:
cb:0c:e8:41:4a:41:e3:a5:c0:3b:96:40:48:0d:f8:99:b0:57:
e6:34:12:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:20:10 2026 by rpki-client