Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/o3GGZI38hI_c6_2pfGmgAAsoxEs.roa
File: o3GGZI38hI_c6_2pfGmgAAsoxEs.roa (raw, json)
Hash identifier: K8tW9PTstVYaczuRxZKd0qqxHAokWaQABmFpLglGEGs=
Subject key identifier: A3:71:86:64:8D:FC:84:8F:DC:EB:FD:A9:7C:69:A0:00:0B:28:C4:4B
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019F1D0F38B562376CD4C2B84D69464E16AF
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/o3GGZI38hI_c6_2pfGmgAAsoxEs.roa
Signing time: Wed 01 Jul 2026 09:42:44 +0000
ROA not before: Wed 01 Jul 2026 09:42:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396356
IP address blocks: 14.102.53.0/24 maxlen: 24
14.102.60.0/24 maxlen: 24
158.173.164.0/24 maxlen: 24
212.32.68.0/24 maxlen: 24
212.32.69.0/24 maxlen: 24
212.32.72.0/24 maxlen: 24
213.254.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:0f:38:b5:62:37:6c:d4:c2:b8:4d:69:46:4e:16:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jul 1 09:42:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a37186648dfc848fdcebfda97c69a0000b28c44b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2d:57:b1:0b:51:d3:c0:86:cc:3c:6c:d8:d9:
20:6a:a0:a0:34:c8:c0:c5:e7:eb:ae:6b:0c:3d:60:
49:62:20:77:a0:ea:84:60:ed:58:ee:13:25:42:7f:
62:e3:59:09:d3:69:92:eb:64:1d:22:11:db:bf:66:
f2:44:38:5c:f2:f0:51:68:62:b7:a1:ad:2c:9c:bc:
82:be:24:98:f6:da:18:5f:11:23:5a:bf:2c:8a:27:
b1:af:22:f0:2b:eb:5a:93:c5:e1:08:db:46:34:42:
09:35:2a:2a:1b:66:98:05:55:f0:c4:e6:7a:37:d4:
24:d7:e1:75:bb:bb:e2:af:ad:39:18:73:51:1f:5d:
5c:d1:c3:47:f6:d7:1f:22:af:c8:44:1b:da:d3:56:
24:40:71:82:cc:d3:17:4c:86:06:dc:97:17:fa:bc:
9b:41:07:47:8f:bc:5b:7a:38:22:d5:18:78:aa:12:
b1:b4:c5:e3:68:0f:16:83:18:8d:33:b4:9d:9a:c5:
16:a8:04:41:94:b6:d5:f1:6e:19:53:16:6d:44:66:
c6:11:4b:46:a2:0b:77:77:b4:20:42:53:de:05:36:
d4:14:a4:f8:68:34:6d:77:71:a6:32:a0:53:84:6a:
17:bc:73:b6:28:db:91:66:4b:fb:16:c9:da:7a:28:
e6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:71:86:64:8D:FC:84:8F:DC:EB:FD:A9:7C:69:A0:00:0B:28:C4:4B
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/o3GGZI38hI_c6_2pfGmgAAsoxEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.53.0/24
14.102.60.0/24
158.173.164.0/24
212.32.68.0/23
212.32.72.0/24
213.254.161.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:d8:3f:66:2c:c5:41:aa:b7:cf:a5:28:f4:d6:4b:d2:ec:f7:
8b:d4:c8:d4:84:95:1e:c0:86:4c:62:ee:f3:c0:65:cb:f6:d7:
e1:d8:5e:17:2e:d6:e9:08:9a:85:5b:87:a4:9e:2b:86:a5:23:
4d:76:81:9f:a1:38:ac:74:97:5d:14:66:9e:cb:14:d6:8f:db:
d4:d1:69:2c:b4:be:88:b7:ea:fe:77:2f:4e:f0:2d:bd:a6:fb:
6c:74:66:21:6d:f2:fa:12:3a:db:fa:ef:70:58:70:31:40:d9:
63:00:cb:c0:cf:25:40:b2:79:c6:51:df:1a:75:81:e8:b6:23:
a0:bb:36:f4:69:bd:93:38:92:59:04:38:15:e0:10:4e:2d:3c:
4d:bf:1c:7b:0f:08:3e:2f:99:ad:70:bf:fe:0b:c5:08:7f:99:
00:ff:c8:bc:78:0f:e0:fa:9e:69:0e:c6:44:87:d1:e1:3a:45:
47:30:ae:ba:a1:49:c0:13:63:c5:66:6f:12:c0:13:1d:da:8c:
d2:29:8b:ac:c9:1c:1d:c2:09:43:c8:05:11:0d:3a:5c:f2:a1:
df:0c:5b:61:ad:4c:67:c2:a7:dc:79:bd:c5:59:51:92:6a:59:
a1:5f:41:0b:e7:34:c3:ca:50:30:ce:07:b4:ef:4f:5e:3d:50:
bc:74:5f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:01:57 2026 by rpki-client