Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/o2gd9E_-hOfn_WLsWHxMqp4NIk8.roa
File: o2gd9E_-hOfn_WLsWHxMqp4NIk8.roa (raw, json)
Hash identifier: U377qbolBBKF7WRjOhodvWbHoleoV0C3Jip+Vq2Ttew=
Subject key identifier: A3:68:1D:F4:4F:FE:84:E7:E7:FD:62:EC:58:7C:4C:AA:9E:0D:22:4F
Certificate issuer: /CN=1c028171c1e52c8acad4db29b92d216b332f0320
Certificate serial: 019F1DEDE59FA19CC1AAB0FF8E13CCAE85EF
Authority key identifier: 1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/o2gd9E_-hOfn_WLsWHxMqp4NIk8.roa
Signing time: Wed 01 Jul 2026 13:45:57 +0000
ROA not before: Wed 01 Jul 2026 13:45:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210814
IP address blocks: 136.148.148.0/24 maxlen: 24
136.148.149.0/24 maxlen: 24
136.148.150.0/24 maxlen: 24
136.148.151.0/24 maxlen: 24
2a05:3a80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:ed:e5:9f:a1:9c:c1:aa:b0:ff:8e:13:cc:ae:85:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c028171c1e52c8acad4db29b92d216b332f0320
Validity
Not Before: Jul 1 13:45:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3681df44ffe84e7e7fd62ec587c4caa9e0d224f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:24:55:fd:97:f0:51:52:c6:45:1b:94:83:01:
d9:09:3e:c2:4e:a3:b3:63:48:5c:5f:a6:51:e5:50:
41:d7:ce:f1:bd:46:e0:e7:0b:c0:9e:dd:f7:fb:40:
dc:97:79:b4:05:53:70:2b:af:93:77:36:2d:8d:65:
96:08:a8:f5:64:0d:6e:57:c5:e9:0a:17:ed:ea:f9:
15:97:ac:d4:68:a6:7c:b7:ab:d8:67:d3:a1:a5:7f:
f8:d4:64:af:6c:bd:c4:e4:9a:28:39:36:99:5e:84:
95:cf:7b:0f:77:34:e9:ee:04:f3:49:90:6d:78:30:
58:b0:86:2d:83:25:65:c2:24:c7:40:9e:3b:b2:5a:
24:46:f5:d2:bf:9a:90:0d:5e:60:90:90:18:b9:d6:
f1:b8:90:a0:a4:ce:58:e1:36:2e:64:dd:56:d4:e3:
05:c6:15:47:70:ab:5d:92:04:70:4b:1e:03:17:5d:
5c:89:d0:b9:42:de:c5:55:44:66:2e:33:af:76:cc:
b8:2b:e2:9c:3f:e5:4c:4c:ce:58:07:3a:e0:9b:40:
4d:37:f4:4f:e8:66:ad:96:35:90:e7:3f:09:ae:65:
72:4e:eb:e7:49:d4:9d:1a:32:4d:71:f2:81:45:fb:
7e:76:a3:45:2b:4a:ef:a4:59:2e:95:29:6a:08:e7:
b5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:68:1D:F4:4F:FE:84:E7:E7:FD:62:EC:58:7C:4C:AA:9E:0D:22:4F
X509v3 Authority Key Identifier:
keyid:1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/o2gd9E_-hOfn_WLsWHxMqp4NIk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.148.148.0/22
IPv6:
2a05:3a80::/48
Signature Algorithm: sha256WithRSAEncryption
1b:d8:6b:9f:cf:98:e0:71:91:c5:d3:1e:e1:78:4f:d7:c7:a8:
cd:10:c6:20:e3:bc:7d:07:db:f2:84:33:ae:d9:e5:24:62:12:
ae:fd:14:af:f7:81:4b:60:73:58:e0:04:bf:41:07:3e:42:0b:
e9:80:61:c6:42:46:06:9b:34:a0:34:e9:1d:b4:73:6f:5f:d7:
33:ea:0c:fc:31:73:01:c7:10:cb:48:19:b7:d7:5d:cd:ef:ab:
15:49:76:5d:7c:f6:48:af:89:d8:85:29:c4:7c:d1:c4:0e:58:
9e:4e:67:ac:f5:e1:64:b9:cf:37:32:89:e8:e2:20:4c:e8:ae:
a7:7d:bf:6c:b2:ff:55:73:eb:90:61:fe:2f:0a:e1:41:b6:6e:
1e:98:70:90:f7:5a:83:9d:09:4c:13:d1:e6:ad:c4:2b:17:de:
bd:6c:66:d5:75:65:0b:f2:f1:2c:bf:2c:a5:36:99:11:09:77:
cb:7c:c4:a1:35:32:d1:99:27:53:bb:13:7e:0e:45:11:41:31:
2c:42:f1:9e:34:a2:d6:c5:39:9a:f2:3d:c6:10:7e:4e:f9:96:
d5:ac:07:0f:c1:2a:47:30:18:ab:d9:45:c1:68:1b:46:41:46:
62:61:da:7e:3d:b6:f9:aa:ae:51:56:7f:92:c6:20:1e:b4:aa:
d2:16:4f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:32 2026 by rpki-client