Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/Owu-o7JvEybmXtpQNjtKXjhH9ug.roa
File: Owu-o7JvEybmXtpQNjtKXjhH9ug.roa (raw, json)
Hash identifier: 89sGeUxvhpVypElkHwSDvmrZnRJHBtaKeL9yMz7nC6U=
Subject key identifier: 3B:0B:BE:A3:B2:6F:13:26:E6:5E:DA:50:36:3B:4A:5E:38:47:F6:E8
Certificate issuer: /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Certificate serial: 019DFDAFFDE9006FEC61607D6AC8F1C6DF05
Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/Owu-o7JvEybmXtpQNjtKXjhH9ug.roa
Signing time: Wed 06 May 2026 14:27:42 +0000
ROA not before: Wed 06 May 2026 14:27:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29119
IP address blocks: 81.172.36.0/24 maxlen: 24
193.38.147.0/24 maxlen: 24
194.49.57.0/24 maxlen: 24
194.49.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fd:af:fd:e9:00:6f:ec:61:60:7d:6a:c8:f1:c6:df:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Validity
Not Before: May 6 14:27:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b0bbea3b26f1326e65eda50363b4a5e3847f6e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:17:69:41:f9:a3:4a:56:c9:ee:7f:2a:71:c4:
ae:8b:b9:cf:00:27:d3:be:eb:48:84:a2:2f:0a:0a:
77:2a:1b:e4:33:a4:b2:27:8b:e1:de:95:65:ac:4f:
c3:55:2b:f4:a2:15:4f:c0:6b:01:7d:f7:41:82:26:
18:8c:3a:5a:ba:87:bd:f4:ad:61:b7:da:16:f7:1b:
97:f1:67:5a:cc:29:27:b8:42:2c:d4:c6:ba:09:b1:
03:e2:6f:78:23:02:8f:80:f7:dc:5b:ba:cc:7f:fd:
33:8b:68:ef:f2:41:90:23:43:cd:e1:28:ae:b4:72:
04:f9:6b:13:0a:25:ba:3b:a1:c5:7e:dc:1e:53:64:
a6:7c:27:00:d1:f4:2d:da:23:67:0b:7b:d0:0b:23:
c4:9c:92:ff:08:27:fa:e4:08:ea:33:8d:7f:08:00:
47:f4:0b:f9:ab:56:bb:9f:62:81:68:87:ad:20:9f:
4f:4b:8e:eb:6d:c7:0c:1d:84:ed:de:a6:ce:60:d5:
8e:43:a6:ee:ae:7a:1b:ef:67:02:66:e1:7e:62:07:
0b:35:b1:bd:8e:ba:21:b3:ef:1c:bf:81:88:8d:73:
fe:c4:d2:7e:8d:2e:2d:0e:6c:22:44:85:f2:92:c7:
f1:a9:20:e8:fc:3e:4a:9c:b3:62:3b:65:7c:49:99:
f6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0B:BE:A3:B2:6F:13:26:E6:5E:DA:50:36:3B:4A:5E:38:47:F6:E8
X509v3 Authority Key Identifier:
keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/Owu-o7JvEybmXtpQNjtKXjhH9ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.172.36.0/24
193.38.147.0/24
194.49.57.0/24
194.49.59.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:d0:bd:80:b0:9c:52:a4:76:82:3d:e6:a7:84:9f:e7:14:7c:
86:c2:5f:5c:96:32:26:4d:7a:af:c0:e1:36:b1:8b:e3:95:ac:
92:d3:8b:c3:9b:02:85:b2:dd:b8:a6:b5:b2:bc:92:08:ba:1f:
83:bf:41:6d:ff:f2:7c:93:d2:08:bd:f1:d9:5c:0c:02:bb:49:
a8:1b:af:e1:9a:5a:2c:51:71:d3:32:e4:b2:37:5c:0f:fd:e4:
6c:8c:4b:04:cf:f5:d3:5d:69:f5:93:dc:dc:bb:23:dd:38:f2:
6f:77:89:54:0a:e1:3a:90:a3:b3:99:c3:2d:a1:34:c9:31:11:
12:f5:bf:e3:d1:04:25:42:b4:c7:9a:c6:fa:c4:d2:db:28:e4:
e7:5c:cc:19:74:85:0e:88:12:d8:b8:ba:c6:47:6d:a8:88:d8:
dc:59:44:9b:59:f1:f7:5f:1c:09:b8:73:f1:4a:bd:00:37:b8:
da:80:56:a6:a2:40:ed:40:b0:f9:8e:5d:74:cd:9d:5a:17:5e:
66:4f:22:07:6f:fe:34:3e:14:fc:72:f8:24:d9:58:03:94:f8:
ab:d4:1a:92:e5:05:d1:46:a7:3c:ec:82:08:d7:95:1a:48:97:
26:b0:05:0c:1c:95:7a:d2:1c:b4:e2:5c:73:c1:bc:86:ef:1d:
09:c5:d9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:14:04 2026 by rpki-client