Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/b3OIDkHF0SCOrHo_420obyvnkmI.roa
File: b3OIDkHF0SCOrHo_420obyvnkmI.roa (raw, json)
Hash identifier: sc1FokAaPj9a+a6X7xyvlvbupvhwzdVFtIvrgSiKEeA=
Subject key identifier: 6F:73:88:0E:41:C5:D1:20:8E:AC:7A:3F:E3:6D:28:6F:2B:E7:92:62
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 01A0D29A3482764B99214EEA0654030F4A81
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/b3OIDkHF0SCOrHo_420obyvnkmI.roa
Signing time: Thu 24 Sep 2026 08:48:36 +0000
ROA not before: Thu 24 Sep 2026 08:48:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216139
IP address blocks: 176.98.185.0/24 maxlen: 24
176.98.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:9a:34:82:76:4b:99:21:4e:ea:06:54:03:0f:4a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Sep 24 08:48:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f73880e41c5d1208eac7a3fe36d286f2be79262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a3:1a:9c:fa:60:01:72:71:1e:0c:0b:51:a6:
d7:10:3e:08:9f:7c:30:ea:e5:6e:27:ec:36:1b:ac:
d2:3e:3b:65:27:e5:1d:10:06:19:1b:13:17:de:55:
3a:cb:52:d6:07:af:3a:8c:58:54:48:1f:7c:2a:6d:
0a:4e:3a:7c:1c:9c:e5:2b:e1:2f:43:51:4d:99:7a:
b8:0a:e9:5d:8a:6b:62:6f:7d:ef:1c:6f:85:46:70:
a3:17:e3:0f:37:7f:ee:e4:81:d9:62:a6:9e:32:b5:
6d:90:19:78:6b:49:3c:62:e2:0d:b4:4c:18:ca:e1:
ec:23:a2:76:d6:41:22:5e:df:2b:a2:5d:4c:f1:36:
07:f0:9b:ba:70:89:13:2f:91:d6:c4:6c:db:1e:77:
f8:50:6e:f3:3b:50:18:ff:df:c9:88:35:37:01:15:
53:e3:10:53:4d:fd:a4:cc:f4:c6:41:0b:33:58:ba:
cf:69:45:09:81:96:11:d7:56:ea:da:28:91:cd:4d:
c9:bf:ea:30:66:d8:93:ef:21:66:85:55:b9:00:48:
e1:f6:d8:e6:87:64:e0:75:bc:d2:d4:a8:13:af:e0:
fc:52:ef:16:c8:92:6f:9a:59:c0:3e:f0:70:60:57:
8d:9d:84:2f:a7:67:48:8b:72:d4:76:86:13:cf:42:
08:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:73:88:0E:41:C5:D1:20:8E:AC:7A:3F:E3:6D:28:6F:2B:E7:92:62
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/b3OIDkHF0SCOrHo_420obyvnkmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.98.185.0-176.98.186.255
Signature Algorithm: sha256WithRSAEncryption
9b:57:5e:81:fa:c0:56:7d:40:9b:2c:9d:c0:29:63:9b:56:f5:
04:e6:bf:6e:3c:63:40:c1:05:67:c5:44:db:59:bb:a2:bc:c8:
37:57:60:55:44:b0:d5:c6:ec:9b:c4:0a:a3:a7:18:e3:23:bf:
af:91:8f:a3:1b:cf:b7:13:eb:ae:4a:9b:ab:a5:3d:75:8f:cb:
43:12:8f:1c:66:8d:1b:b7:75:6e:e1:a3:fd:be:d3:e6:13:bc:
6e:a9:a3:e2:e8:e9:73:4a:6e:28:2b:03:3f:40:8a:17:73:cb:
8f:6c:03:aa:86:d2:70:ab:4b:63:f3:ff:c0:38:a3:e3:da:27:
40:cb:57:7d:28:51:dd:6e:b2:21:9c:7f:0f:b0:ec:48:f6:1e:
15:23:99:27:ea:e3:f9:c7:f8:f9:e0:04:f3:b5:c3:f3:7e:2f:
ef:5d:2e:7d:a2:fe:18:55:56:6a:af:c2:db:1b:3d:8c:b1:93:
5f:21:e9:44:9f:c9:af:12:ee:da:54:be:9c:c9:e0:94:bb:d0:
51:f6:61:0d:c2:f9:5a:44:c1:3e:0a:a9:51:29:7b:4d:81:3c:
76:20:4f:7f:fc:9e:7b:77:3e:0c:5f:d6:6e:a6:53:a4:ac:5c:
df:76:14:e1:6d:0e:f1:b1:23:c8:b0:60:e2:09:16:fc:26:a0:
1a:fb:c1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:58:46 2026 by rpki-client