Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/kOfsiEQyAOFEFp6bNE421gle90w.roa
File: kOfsiEQyAOFEFp6bNE421gle90w.roa (raw, json)
Hash identifier: +TRgEzJtF640HkMV28QrOSBubxXo5DyV0zLHNPpuhXQ=
Subject key identifier: 90:E7:EC:88:44:32:00:E1:44:16:9E:9B:34:4E:36:D6:09:5E:F7:4C
Certificate issuer: /CN=dcaf2c5be307a46a61697bca870beca234ec2a47
Certificate serial: 019F236936040C6D522D0B97A15F411A635B
Authority key identifier: DC:AF:2C:5B:E3:07:A4:6A:61:69:7B:CA:87:0B:EC:A2:34:EC:2A:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K8sW-MHpGphaXvKhwvsojTsKkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/kOfsiEQyAOFEFp6bNE421gle90w.roa
Signing time: Thu 02 Jul 2026 15:18:45 +0000
ROA not before: Thu 02 Jul 2026 15:18:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31726
IP address blocks: 185.102.28.0/22 maxlen: 22
2a06:2240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/3K8sW-MHpGphaXvKhwvsojTsKkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/3K8sW-MHpGphaXvKhwvsojTsKkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K8sW-MHpGphaXvKhwvsojTsKkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:36:04:0c:6d:52:2d:0b:97:a1:5f:41:1a:63:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcaf2c5be307a46a61697bca870beca234ec2a47
Validity
Not Before: Jul 2 15:18:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90e7ec88443200e144169e9b344e36d6095ef74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2e:7d:dc:db:8d:2d:1d:48:e7:a1:00:19:45:
52:40:71:49:8b:08:e4:9a:2f:26:a7:85:98:df:ae:
ee:02:23:95:5c:31:19:cc:91:ab:e6:d3:a8:30:33:
f1:8b:d7:e4:18:b4:30:26:a0:92:5b:38:0e:6e:d6:
5b:99:b6:2c:be:bc:66:5d:33:cb:c2:88:f2:80:7f:
57:c8:57:7f:5e:d5:78:13:c2:a5:b0:38:03:02:04:
15:92:e2:4a:57:fd:19:29:75:07:f9:46:c7:ef:8f:
43:54:8a:0a:af:a6:4b:ea:1c:69:eb:8b:c0:98:57:
2e:1f:90:0c:be:3d:36:65:b6:09:89:28:e8:ed:13:
12:8a:d4:5e:52:f6:29:a9:23:ae:49:2a:c7:ee:ed:
a5:44:7e:47:42:03:b4:88:91:a5:78:08:e6:d2:23:
09:bb:b1:c0:4a:c8:ff:6a:39:69:a8:73:c9:c4:db:
05:2b:d2:e7:f9:c4:90:f8:1a:d3:d8:86:26:a0:cf:
4f:c8:5d:2a:4a:54:09:3f:ed:c4:df:8d:d3:05:d0:
98:fd:96:88:11:9f:cb:4b:a8:48:b8:01:74:49:7e:
dc:96:8a:3c:22:8b:8d:d8:dc:a6:4e:bb:1c:21:26:
e6:16:d2:79:a8:cd:86:97:9e:07:52:13:1e:7f:03:
52:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E7:EC:88:44:32:00:E1:44:16:9E:9B:34:4E:36:D6:09:5E:F7:4C
X509v3 Authority Key Identifier:
keyid:DC:AF:2C:5B:E3:07:A4:6A:61:69:7B:CA:87:0B:EC:A2:34:EC:2A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K8sW-MHpGphaXvKhwvsojTsKkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/kOfsiEQyAOFEFp6bNE421gle90w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/3K8sW-MHpGphaXvKhwvsojTsKkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.28.0/22
IPv6:
2a06:2240::/29
Signature Algorithm: sha256WithRSAEncryption
72:d5:d4:42:74:3d:db:d2:43:c2:4c:d7:52:cd:2a:be:2c:82:
96:7e:4a:ba:34:08:9f:98:da:84:f6:c2:0c:05:5c:14:6d:48:
e5:98:39:b3:b9:0e:f5:22:71:21:a3:16:32:5c:e8:67:74:c4:
1f:e3:d9:80:fb:02:3e:d8:7c:e7:83:72:89:5a:f7:6b:03:94:
71:a3:d3:d7:87:ec:ac:a5:bb:90:c2:f5:d5:27:95:cf:70:e5:
ef:3c:0b:bd:b9:9a:2c:df:d5:75:c1:7f:da:49:8d:b0:a2:5a:
43:b4:9d:14:5e:af:c6:e7:6d:f6:1c:f5:9c:94:93:b4:6a:ed:
41:f6:31:5d:04:b1:f8:11:0a:3b:7c:63:35:03:68:30:67:3c:
65:ba:5f:f3:b3:ea:93:23:9d:f2:1b:40:f6:d9:e9:47:19:90:
9f:04:cb:e2:be:8c:34:72:68:bd:d5:b4:b3:c5:05:da:71:cc:
b6:96:8f:26:02:6c:39:53:19:bb:f9:02:75:a4:df:b3:f1:e0:
cb:d5:02:5a:d6:04:63:47:87:f6:38:de:4f:62:17:12:52:cb:
4f:d7:ab:aa:2b:9a:d8:7b:7b:3e:04:1f:25:a8:6d:d8:48:2b:
f5:ca:2a:55:e9:b5:a5:ac:12:00:75:a5:7e:57:25:83:27:49:
3b:9c:2e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:33:56 2026 by rpki-client