Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/oi0NS8d8h4ZOs_4eJpdYkfBvJhc.roa
File: oi0NS8d8h4ZOs_4eJpdYkfBvJhc.roa (raw, json)
Hash identifier: Lncjh3RfW9fQ9k5a2jwqrsjYKep//kxCV8FiyU5cQFg=
Subject key identifier: A2:2D:0D:4B:C7:7C:87:86:4E:B3:FE:1E:26:97:58:91:F0:6F:26:17
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019CD2DCE9EDFE2A59391348270E9F9F6CA0
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/oi0NS8d8h4ZOs_4eJpdYkfBvJhc.roa
Signing time: Mon 09 Mar 2026 13:50:18 +0000
ROA not before: Mon 09 Mar 2026 13:50:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31313
IP address blocks: 80.96.3.0/24 maxlen: 24
80.96.186.0/24 maxlen: 24
80.96.226.0/24 maxlen: 24
80.96.248.0/24 maxlen: 24
81.181.207.0/24 maxlen: 24
85.120.75.0/24 maxlen: 24
85.120.159.0/24 maxlen: 24
85.120.166.0/24 maxlen: 24
85.121.34.0/24 maxlen: 24
85.122.105.0/24 maxlen: 24
193.231.67.0/24 maxlen: 24
193.231.176.0/24 maxlen: 24
194.102.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d2:dc:e9:ed:fe:2a:59:39:13:48:27:0e:9f:9f:6c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Mar 9 13:50:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a22d0d4bc77c87864eb3fe1e26975891f06f2617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:80:a4:30:cc:6e:32:27:c0:29:0d:ae:b5:b3:
ac:f6:46:0d:11:b7:dc:90:7a:fc:ac:28:bb:33:27:
a1:5b:55:e3:35:fd:06:f9:b9:b2:3f:33:ca:d4:a3:
03:7d:82:0f:6c:7f:0d:fb:7d:15:41:c7:2f:12:86:
1d:88:f1:55:1e:2d:63:3c:63:f7:6f:0a:dc:99:4a:
c4:d9:0a:04:9c:72:9b:5f:1b:2a:ce:9e:e4:27:e2:
6e:1f:1b:52:fa:47:2d:bd:6d:2f:0b:42:24:17:58:
0a:65:0c:66:13:ec:ed:97:66:05:43:c3:27:14:79:
b4:3f:fd:1a:81:8c:8c:7d:9e:07:2e:7c:05:95:3c:
c4:31:f3:25:9d:d3:a1:62:ac:40:96:a5:ea:f7:c4:
16:bd:27:c4:b9:41:1d:d6:9c:dd:e0:30:74:91:02:
83:64:89:ba:25:98:f0:e5:f9:b6:38:cb:5e:2d:a3:
b0:5d:a4:96:6f:c1:d9:47:5e:85:32:9b:3a:32:36:
cd:f1:5d:f0:1a:b2:e1:c5:8c:d6:ae:7e:46:c2:9c:
f5:a8:68:7f:bd:1c:9d:b5:44:6e:fa:1a:60:28:82:
79:dd:73:8c:bb:fc:1e:86:91:01:79:86:84:96:a9:
40:67:ea:b4:ce:a4:0f:8c:07:ea:6b:77:6d:3d:69:
2c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2D:0D:4B:C7:7C:87:86:4E:B3:FE:1E:26:97:58:91:F0:6F:26:17
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/oi0NS8d8h4ZOs_4eJpdYkfBvJhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.3.0/24
80.96.186.0/24
80.96.226.0/24
80.96.248.0/24
81.181.207.0/24
85.120.75.0/24
85.120.159.0/24
85.120.166.0/24
85.121.34.0/24
85.122.105.0/24
193.231.67.0/24
193.231.176.0/24
194.102.67.0/24
Signature Algorithm: sha256WithRSAEncryption
90:92:18:5b:6d:d3:f7:5d:9c:80:cb:02:a0:7e:cd:b8:77:46:
ad:9f:a4:cf:89:72:7f:dc:a5:ff:b3:e6:f0:37:39:43:cd:3b:
e9:02:a0:d0:8d:1d:57:44:58:e9:fa:4a:23:fb:0f:e3:a6:4d:
95:64:c8:90:46:4e:55:93:3c:d5:3a:b8:e6:5b:1f:a5:05:a2:
25:66:1b:35:2f:45:0f:6c:1a:ba:ae:b8:9e:2b:c6:0e:3f:3e:
a3:47:36:8a:4e:cc:f9:da:7f:03:6e:6e:d8:f5:f9:8c:88:30:
e4:f2:30:6a:48:f9:15:4e:7c:c5:ef:09:4c:13:2a:61:0c:85:
62:89:46:5a:2f:8c:a2:b7:ed:63:10:bf:4f:03:a5:98:86:d2:
49:f4:89:0a:8a:a3:a3:8c:c8:14:e4:0d:e8:32:37:ee:c6:43:
35:4b:12:71:10:97:f1:c8:a8:c0:d1:13:fe:d3:30:42:20:63:
93:2b:e4:92:6f:67:fb:bb:52:3c:e3:77:43:84:ec:03:e6:21:
7e:0f:ed:d2:ba:04:44:9f:11:47:f3:ab:f8:3a:1f:be:f8:ff:
13:75:2f:a2:2c:ae:48:de:56:5b:24:0e:fa:38:8b:fb:7e:14:
8e:7f:a8:4b:87:8c:aa:d2:88:c4:02:44:bb:c9:b7:4b:2d:19:
73:a4:da:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:44:35 2026 by rpki-client