Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/Oq4z14N71pgiI9-KE_h-CCRcT20.roa
File: Oq4z14N71pgiI9-KE_h-CCRcT20.roa (raw, json)
Hash identifier: hy7yGUYkeyO3aDyOj5aTJ3uxwm3TBHALM9Mgfy3Wu3M=
Subject key identifier: 3A:AE:33:D7:83:7B:D6:98:22:23:DF:8A:13:F8:7E:08:24:5C:4F:6D
Certificate issuer: /CN=8536146119b044539082e326cca903200b8d4b1a
Certificate serial: 019F37E9E701B60C32C03067BCC4A8E2CE92
Authority key identifier: 85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/Oq4z14N71pgiI9-KE_h-CCRcT20.roa
Signing time: Mon 06 Jul 2026 14:51:43 +0000
ROA not before: Mon 06 Jul 2026 14:51:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60631
IP address blocks: 193.246.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:e9:e7:01:b6:0c:32:c0:30:67:bc:c4:a8:e2:ce:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8536146119b044539082e326cca903200b8d4b1a
Validity
Not Before: Jul 6 14:51:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3aae33d7837bd6982223df8a13f87e08245c4f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a6:44:9d:f8:bc:f6:92:b0:c1:0f:99:e4:55:
48:40:7b:df:02:5d:6b:40:2f:af:9b:f6:77:69:a4:
11:65:01:69:ec:d0:59:14:54:a0:f6:20:13:7e:bb:
28:e2:58:03:d7:65:fd:21:6f:ee:7f:cd:ec:f1:16:
96:9c:8a:c8:a3:80:70:08:07:a8:4c:92:b1:fb:ef:
da:b2:15:e1:8f:66:28:98:48:45:1c:59:7f:37:20:
b8:e9:34:7f:b5:24:67:39:c6:65:cf:f4:61:4c:b4:
3f:1a:fb:ec:69:d3:01:ca:57:8a:63:5c:9a:ba:cf:
7f:d7:8e:76:cc:63:8b:d1:05:b8:a1:4e:f3:8c:81:
4c:ca:7c:fe:61:26:46:62:bf:00:fc:ae:89:f3:a4:
97:5f:5f:fc:5b:0f:f1:cd:29:85:e6:55:b4:da:5a:
91:55:17:89:7c:12:15:05:09:20:15:ab:4f:26:b4:
b1:22:d8:34:78:bc:7d:ff:4b:89:84:42:f6:53:0b:
72:51:56:75:3d:54:8c:ca:92:27:f0:30:11:ed:70:
34:54:e7:bc:be:63:47:7a:b6:56:74:7d:30:7d:f6:
64:3a:b0:4f:7a:cc:ae:b5:b7:1f:01:2b:41:1b:4b:
bc:8e:79:cc:12:e8:7f:68:db:ec:83:24:fa:3b:2e:
09:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AE:33:D7:83:7B:D6:98:22:23:DF:8A:13:F8:7E:08:24:5C:4F:6D
X509v3 Authority Key Identifier:
keyid:85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/Oq4z14N71pgiI9-KE_h-CCRcT20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.160.0/24
Signature Algorithm: sha256WithRSAEncryption
73:77:54:0f:7a:a5:50:c4:14:d5:00:9f:3d:3a:97:e9:7e:6d:
99:46:4c:2b:d8:52:33:3d:e0:7c:c4:85:55:83:7a:04:b4:a3:
7b:a0:d1:8e:bd:98:c6:85:18:e2:2f:3b:d8:00:53:c1:1a:13:
39:ed:e0:ae:ac:15:36:8c:38:06:77:f2:69:a2:0c:ce:aa:01:
2e:65:fc:68:12:49:09:22:9e:54:87:02:e8:ee:b8:82:fc:9c:
36:f3:c9:1b:7a:84:ff:36:21:06:39:51:60:97:70:93:48:ca:
fc:ad:da:cc:d9:6f:bd:10:4d:cf:cf:f8:01:88:ec:b3:d3:dd:
d3:97:1f:6a:ad:90:c3:55:d1:e2:66:63:89:82:db:4b:70:6f:
f2:54:f9:92:09:0b:4e:4f:8d:ee:7c:d1:f0:3b:a9:18:6d:99:
16:b9:7e:e9:b4:70:96:d2:4d:ab:8f:d2:53:03:6b:82:71:fb:
c6:cc:17:2a:3a:d0:f7:6b:9d:64:26:f0:77:21:3c:5c:4c:d7:
a7:fc:d1:d9:15:f1:64:78:be:5d:39:c8:d6:fb:32:42:3d:9b:
f1:30:e1:e8:71:e4:b9:79:1a:e4:b4:56:db:95:0e:69:d8:58:
f1:31:89:49:e2:7a:96:f8:9c:e5:1d:66:2a:6b:86:a2:b0:9f:
52:25:7b:b8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ836ecBtgwywDBnvMSo4s6SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MzYxNDYxMTliMDQ0NTM5MDgyZTMyNmNjYTkwMzIwMGI4
ZDRiMWEwHhcNMjYwNzA2MTQ1MTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYWFlMzNkNzgzN2JkNjk4MjIyM2RmOGExM2Y4N2UwODI0NWM0ZjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaZEnfi89pKwwQ+Z5FVIQHvfAl1r
QC+vm/Z3aaQRZQFp7NBZFFSg9iATfrso4lgD12X9IW/uf83s8RaWnIrIo4BwCAeo
TJKx++/ashXhj2YomEhFHFl/NyC46TR/tSRnOcZlz/RhTLQ/GvvsadMByleKY1ya
us9/1452zGOL0QW4oU7zjIFMynz+YSZGYr8A/K6J86SXX1/8Ww/xzSmF5lW02lqR
VReJfBIVBQkgFatPJrSxItg0eLx9/0uJhEL2UwtyUVZ1PVSMypIn8DAR7XA0VOe8
vmNHerZWdH0wffZkOrBPesyutbcfAStBG0u8jnnMEuh/aNvsgyT6Oy4JlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDquM9eDe9aYIiPfihP4fggkXE9tMB8GA1UdIwQY
MBaAFIU2FGEZsERTkILjJsypAyALjUsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFRZVVlSbXdSRk9RZ3VNbXpLa0RJQXVOU3hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDVmOTMtYWM1YS00MWUzLTgwYzMt
MGM2NzIxN2NjOTZiLzEvT3E0ejE0TjcxcGdpSTktS0VfaC1DQ1JjVDIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni81ZDVmOTMtYWM1YS00MWUzLTgwYzMtMGM2NzIxN2NjOTZi
LzEvaFRZVVlSbXdSRk9RZ3VNbXpLa0RJQXVOU3hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwfagMA0G
CSqGSIb3DQEBCwUAA4IBAQBzd1QPeqVQxBTVAJ89Opfpfm2ZRkwr2FIzPeB8xIVV
g3oEtKN7oNGOvZjGhRjiLzvYAFPBGhM57eCurBU2jDgGd/JpogzOqgEuZfxoEkkJ
Ip5UhwLo7riC/Jw288kbeoT/NiEGOVFgl3CTSMr8rdrM2W+9EE3Pz/gBiOyz093T
lx9qrZDDVdHiZmOJgttLcG/yVPmSCQtOT43ufNHwO6kYbZkWuX7ptHCW0k2rj9JT
A2uCcfvGzBcqOtD3a51kJvB3ITxcTNen/NHZFfFkeL5dOcjW+zJCPZvxMOHoceS5
eRrktFbblQ5p2FjxMYlJ4nqW+JzlHWYqa4aisJ9SJXu4
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:01:55 2026 by rpki-client