Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/Oj8K8XHrsDfS-eldRMcH11WQYyQ.roa
File: Oj8K8XHrsDfS-eldRMcH11WQYyQ.roa (raw, json)
Hash identifier: ifdd2pi8EShwVYLbGy/N4X0jrvCVRCdXziJXaPvLXA4=
Subject key identifier: 3A:3F:0A:F1:71:EB:B0:37:D2:F9:E9:5D:44:C7:07:D7:55:90:63:24
Certificate issuer: /CN=8eb89727f9f8ece69df9bec4cc11cabcee164bc3
Certificate serial: 019F2368EDB1F9CA952D3FEF83D25520228C
Authority key identifier: 8E:B8:97:27:F9:F8:EC:E6:9D:F9:BE:C4:CC:11:CA:BC:EE:16:4B:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jriXJ_n47Oad-b7EzBHKvO4WS8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/Oj8K8XHrsDfS-eldRMcH11WQYyQ.roa
Signing time: Thu 02 Jul 2026 15:18:26 +0000
ROA not before: Thu 02 Jul 2026 15:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6893
IP address blocks: 193.247.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/jriXJ_n47Oad-b7EzBHKvO4WS8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ed:b1:f9:ca:95:2d:3f:ef:83:d2:55:20:22:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb89727f9f8ece69df9bec4cc11cabcee164bc3
Validity
Not Before: Jul 2 15:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a3f0af171ebb037d2f9e95d44c707d755906324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:eb:56:8a:d6:db:bc:5d:58:f4:f3:36:48:78:
94:68:06:9c:79:e1:7f:68:25:04:8c:41:61:98:72:
9c:04:7f:c6:17:1d:b4:a4:9c:76:e9:ac:3d:1d:ed:
20:d9:a5:e4:06:15:d3:7c:18:c9:46:45:0f:79:10:
4b:30:b9:e4:4b:7c:cb:54:5a:37:f8:96:20:26:a4:
ae:87:37:20:8b:66:63:df:39:60:27:91:49:16:a3:
f6:dd:f1:86:5c:c4:42:e6:ee:d1:3a:85:f7:21:dc:
85:0c:03:e0:f7:6a:bf:6e:31:e3:fa:24:f0:91:fc:
b7:3a:3d:f5:1a:c1:5f:ad:27:a7:77:02:75:f5:74:
00:47:f0:50:6b:12:4a:d4:f6:1f:cb:e2:83:b2:b9:
15:3f:a2:80:7e:1d:17:d3:f7:fc:6c:48:85:86:7f:
5a:56:d5:40:21:40:bd:10:2c:5d:98:43:fa:55:fd:
9e:52:49:5e:4b:c4:ac:f9:69:a4:6f:a0:94:18:c1:
62:f0:f6:61:29:3f:3e:fa:2d:56:86:a9:28:80:3e:
69:02:39:39:27:67:54:3e:7e:98:fd:35:28:2c:b8:
87:d9:ce:90:5f:7d:61:24:1a:77:62:e9:40:97:f0:
06:d3:00:43:be:c1:30:ee:03:21:1a:1e:ca:d3:3b:
b0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3F:0A:F1:71:EB:B0:37:D2:F9:E9:5D:44:C7:07:D7:55:90:63:24
X509v3 Authority Key Identifier:
keyid:8E:B8:97:27:F9:F8:EC:E6:9D:F9:BE:C4:CC:11:CA:BC:EE:16:4B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jriXJ_n47Oad-b7EzBHKvO4WS8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/Oj8K8XHrsDfS-eldRMcH11WQYyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.238.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:2f:64:bc:15:6d:f9:d4:39:24:6d:9b:0e:45:23:3c:0e:59:
26:8f:75:5a:17:9d:4c:d5:43:38:93:78:18:1d:eb:e7:5f:65:
40:df:97:54:4c:07:69:77:fd:af:25:5e:c9:b9:f8:da:96:a5:
6a:da:1a:71:0e:2d:12:7d:66:dd:3f:dd:c1:57:92:03:55:f6:
ca:23:07:ed:5d:98:01:e7:a7:e0:3c:a6:89:b6:76:69:71:d7:
b8:14:9a:a2:83:71:1e:1e:76:22:aa:16:83:03:78:7c:07:39:
1f:1c:0d:ad:ba:ca:db:8c:ba:b7:aa:31:41:5a:05:c0:79:67:
88:71:89:fb:89:9b:9c:44:7d:11:39:70:cd:8b:c0:75:80:07:
58:7b:5e:89:c1:e4:fe:92:81:8a:2f:b7:1e:14:58:46:d3:0b:
6e:87:96:c4:7f:b3:8f:75:ea:c7:7b:23:54:97:b4:2e:93:16:
d6:82:a5:4a:94:c8:88:99:f1:bf:04:0f:3e:dd:49:59:a2:ae:
d4:f7:12:fc:64:b7:fb:5e:24:1f:57:59:a2:01:c5:56:a1:95:
42:90:e9:17:af:a7:0a:3f:e5:3f:af:5a:aa:15:db:ac:e5:c1:
b5:db:bf:24:70:fe:d1:53:b3:5c:1a:f0:aa:78:fb:57:8b:24:
15:cf:2f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:45:55 2026 by rpki-client