Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/o9BQ-R8ExgsNh3MUNPn9fT2gYKE.roa
File: o9BQ-R8ExgsNh3MUNPn9fT2gYKE.roa (raw, json)
Hash identifier: Ru9xVFn4F+xip63EFvMxQyrGr8GDfyz1+ruTaL9X4/k=
Subject key identifier: A3:D0:50:F9:1F:04:C6:0B:0D:87:73:14:34:F9:FD:7D:3D:A0:60:A1
Certificate issuer: /CN=06789e737de6f5ee387093a13bb920e2f8ebbb87
Certificate serial: 019F23693C723F43C9ED37553DA03D9934AF
Authority key identifier: 06:78:9E:73:7D:E6:F5:EE:38:70:93:A1:3B:B9:20:E2:F8:EB:BB:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bniec33m9e44cJOhO7kg4vjru4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/o9BQ-R8ExgsNh3MUNPn9fT2gYKE.roa
Signing time: Thu 02 Jul 2026 15:18:46 +0000
ROA not before: Thu 02 Jul 2026 15:18:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211503
IP address blocks: 81.29.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/Bniec33m9e44cJOhO7kg4vjru4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/Bniec33m9e44cJOhO7kg4vjru4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bniec33m9e44cJOhO7kg4vjru4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:3c:72:3f:43:c9:ed:37:55:3d:a0:3d:99:34:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06789e737de6f5ee387093a13bb920e2f8ebbb87
Validity
Not Before: Jul 2 15:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3d050f91f04c60b0d87731434f9fd7d3da060a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:85:a2:30:6e:f3:85:13:64:89:30:33:44:e2:
c0:2b:fe:7f:3c:32:97:e9:d2:38:f4:28:7c:46:d4:
d5:1d:a9:f8:ae:e5:41:96:d6:44:f8:90:54:4a:92:
b3:c7:5b:69:f8:1b:b2:12:3b:61:73:28:6b:65:01:
c5:b3:20:4b:d6:d8:50:05:9f:a6:b2:4e:af:f1:5e:
64:e2:a5:59:2c:07:11:2e:d0:04:cd:34:65:4c:9d:
a8:5b:d0:39:1b:6b:bb:33:37:48:92:e3:f1:fe:23:
e7:63:3e:47:61:0a:40:26:ce:05:9e:ba:93:18:06:
58:2b:5f:fb:a0:b2:96:7e:1e:6c:b1:8a:98:34:2e:
9c:6a:e1:1b:3a:40:1d:1e:ea:ef:4c:0e:ea:44:0e:
c1:85:3c:58:cb:e0:ea:c3:ea:41:66:13:e2:e2:bc:
4d:1d:19:6c:03:d0:91:f3:47:2b:f4:95:68:90:b5:
1c:61:f6:78:f5:37:10:5e:04:ee:83:59:b2:4d:ee:
a4:a1:69:13:ff:f7:64:6e:80:5d:b8:c7:8c:20:d5:
94:10:c3:b2:a3:01:a3:2e:7c:74:a8:f0:09:bf:f4:
39:dd:df:c6:ff:11:b7:94:3f:ab:15:9b:1a:b1:23:
2b:a4:81:56:d8:c9:4a:56:c9:56:d4:35:20:3c:e1:
10:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D0:50:F9:1F:04:C6:0B:0D:87:73:14:34:F9:FD:7D:3D:A0:60:A1
X509v3 Authority Key Identifier:
keyid:06:78:9E:73:7D:E6:F5:EE:38:70:93:A1:3B:B9:20:E2:F8:EB:BB:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bniec33m9e44cJOhO7kg4vjru4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/o9BQ-R8ExgsNh3MUNPn9fT2gYKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/Bniec33m9e44cJOhO7kg4vjru4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.137.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:47:f3:3a:71:ec:cd:39:5a:fd:ee:31:fc:34:17:96:40:9e:
28:43:73:96:c3:09:fd:af:32:dd:bb:46:64:56:81:da:b9:e9:
38:76:b0:63:f6:a8:1c:b2:55:4f:6b:8f:39:f7:50:ce:e9:6b:
38:bb:f5:8b:88:0e:23:8a:60:63:38:54:74:cf:85:ec:3b:7c:
96:6c:e0:70:39:98:ea:90:ac:39:b8:e7:26:a7:68:a4:ac:3f:
ae:c6:92:44:94:ec:bb:93:1b:58:99:fd:60:d5:04:55:cc:f0:
5c:a8:18:51:1e:4a:e1:70:89:d7:d4:22:35:e9:68:7a:7a:fa:
79:2b:a6:30:1a:ae:10:bd:49:3f:86:1a:14:39:31:99:d9:0e:
c0:0c:bd:15:d7:0a:d3:10:4b:e7:1a:82:65:81:81:97:c9:06:
d8:22:77:90:d0:a6:de:df:8e:48:59:8c:17:39:88:63:aa:94:
9e:eb:7a:6f:b0:20:67:07:56:0d:b1:4f:f0:b5:27:a4:fa:d6:
2f:d0:d8:a3:fc:6f:f1:10:15:05:5d:b0:65:d8:3f:74:9f:e2:
9c:25:de:3f:1b:1b:80:bc:1f:10:1d:0f:d3:f5:3b:d6:87:b2:
25:b1:ab:da:3f:ce:2c:80:11:b3:54:29:26:e1:49:0c:d5:a0:
87:f6:67:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:06:50 2026 by rpki-client