Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/oG7jOaN7lQYqpvmCfAswsCXyLOg.roa
File: oG7jOaN7lQYqpvmCfAswsCXyLOg.roa (raw, json)
Hash identifier: Tv0qHNepZQsmdgBTSa8O2BGn+CRBQQu7TstRw20SJTo=
Subject key identifier: A0:6E:E3:39:A3:7B:95:06:2A:A6:F9:82:7C:0B:30:B0:25:F2:2C:E8
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019F8A40D9ADB87FE502F7AF0CC1AB0197FC
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/oG7jOaN7lQYqpvmCfAswsCXyLOg.roa
Signing time: Wed 22 Jul 2026 14:35:33 +0000
ROA not before: Wed 22 Jul 2026 14:35:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399130
IP address blocks: 195.138.117.0/24 maxlen: 24
195.138.119.0/24 maxlen: 24
195.138.121.0/24 maxlen: 24
195.138.123.0/24 maxlen: 24
195.138.125.0/24 maxlen: 24
195.138.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:40:d9:ad:b8:7f:e5:02:f7:af:0c:c1:ab:01:97:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jul 22 14:35:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a06ee339a37b95062aa6f9827c0b30b025f22ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:82:b0:1e:34:37:21:d3:e1:49:6a:21:9d:3f:
f2:19:1e:a7:f1:a8:d9:c0:99:77:fe:65:80:f4:41:
46:26:f6:c4:e4:2c:b8:78:21:28:80:70:d5:07:e8:
ef:2c:b7:eb:36:82:e9:28:07:bf:9a:93:45:18:04:
6e:b5:4a:a8:73:ca:0d:1f:d3:a8:eb:e5:2e:7b:80:
50:8f:82:da:0a:70:f7:0b:46:0c:7e:43:e2:6a:dd:
46:39:cc:a2:7d:51:80:ce:88:d5:b5:22:db:2e:5d:
c6:f8:2c:1a:af:5e:4e:b0:aa:9d:19:4f:a5:4c:44:
93:4b:2b:da:0a:71:d1:c5:a0:8d:47:a7:76:54:57:
3d:46:ad:46:4d:4b:63:64:d9:2c:61:63:40:4e:cc:
01:ad:2f:91:2a:a6:dd:13:f6:df:8c:0b:bf:d4:a0:
f6:ab:1a:92:12:c2:8a:e1:5b:c0:28:b2:4b:c5:0c:
6b:e5:86:a5:bc:d9:ba:ad:f7:c0:0e:68:b7:a0:61:
4c:6e:43:f0:76:ce:b7:24:d6:38:d4:73:f7:8e:dc:
d1:f5:1b:41:51:0a:89:c6:28:a4:48:b6:be:0f:d0:
50:7b:40:58:9c:35:f0:3d:0c:3f:7a:1c:62:e0:1d:
91:59:db:10:86:b4:b5:06:29:b0:9d:b2:73:8c:01:
17:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6E:E3:39:A3:7B:95:06:2A:A6:F9:82:7C:0B:30:B0:25:F2:2C:E8
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/oG7jOaN7lQYqpvmCfAswsCXyLOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.138.117.0/24
195.138.119.0/24
195.138.121.0/24
195.138.123.0/24
195.138.125.0/24
195.138.127.0/24
Signature Algorithm: sha256WithRSAEncryption
36:58:65:5c:19:6e:69:de:02:c8:b6:f9:49:f8:d1:3f:0a:6e:
7a:2c:43:45:90:ef:dd:ec:16:60:60:f1:7a:c6:b1:94:d4:68:
00:32:f6:4a:9f:00:05:92:0b:49:97:92:96:34:95:e7:89:74:
a3:4e:3e:45:57:c5:13:23:8e:d3:f5:6d:9e:b8:32:f3:fa:b8:
11:3d:79:49:b6:a7:e8:8c:aa:6b:1f:10:51:52:83:e6:c2:9b:
ce:a0:89:25:3d:57:3c:d1:c8:03:ea:44:dc:e2:e7:79:0b:de:
cd:e0:07:34:cc:b4:b1:c3:2d:0c:dc:b3:2e:fa:cb:e5:f2:82:
1e:75:06:54:f7:14:fd:16:fa:bd:1f:77:f3:49:8b:84:e2:d9:
7f:a1:96:03:42:70:d9:5c:15:75:ed:40:dc:8b:1e:04:65:2e:
81:62:af:41:06:f3:ad:13:bf:5a:8b:b5:21:34:0c:02:cb:0e:
30:f6:23:d9:9a:6e:43:ba:e8:cb:9b:5f:80:13:31:ba:b9:33:
2d:c6:34:92:2f:31:42:66:46:cc:ff:59:f1:e7:b6:7b:b9:2c:
d7:99:4c:3a:fb:c8:dd:ed:7b:35:24:df:73:41:c5:7f:48:8f:
e8:e0:0e:94:11:9d:af:87:df:13:85:75:fe:d3:cc:ec:0d:d6:
f1:6e:49:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:00:53 2026 by rpki-client