Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/2oq5AJ8ZDvTFcN8oB9ZGGwsdj40.roa
File: 2oq5AJ8ZDvTFcN8oB9ZGGwsdj40.roa (raw, json)
Hash identifier: Wiz2ighDEoFn4OhV9qneE+0XWQZVHPj+hAbIfIbUN0g=
Subject key identifier: DA:8A:B9:00:9F:19:0E:F4:C5:70:DF:28:07:D6:46:1B:0B:1D:8F:8D
Certificate issuer: /CN=ef4f78947341ce55888b7ebf3690143b0cbff3d6
Certificate serial: 019CEC231B7389496B1D4D5E39E2FC6BE584
Authority key identifier: EF:4F:78:94:73:41:CE:55:88:8B:7E:BF:36:90:14:3B:0C:BF:F3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/2oq5AJ8ZDvTFcN8oB9ZGGwsdj40.roa
Signing time: Sat 14 Mar 2026 11:37:29 +0000
ROA not before: Sat 14 Mar 2026 11:37:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15954
IP address blocks: 31.24.120.0/21 maxlen: 21
31.47.72.0/21 maxlen: 21
37.247.120.0/21 maxlen: 21
91.216.219.0/24 maxlen: 24
185.49.184.0/22 maxlen: 22
185.57.196.0/22 maxlen: 22
185.66.72.0/24 maxlen: 24
185.66.73.0/24 maxlen: 24
185.66.74.0/24 maxlen: 24
185.203.224.0/24 maxlen: 24
185.203.227.0/24 maxlen: 24
193.247.194.0/24 maxlen: 24
194.176.119.0/24 maxlen: 24
217.18.32.0/20 maxlen: 20
2a01:a940::/32 maxlen: 32
2a01:a941::/32 maxlen: 32
2a01:a942::/32 maxlen: 32
2a02:2810::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:23:1b:73:89:49:6b:1d:4d:5e:39:e2:fc:6b:e5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef4f78947341ce55888b7ebf3690143b0cbff3d6
Validity
Not Before: Mar 14 11:37:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da8ab9009f190ef4c570df2807d6461b0b1d8f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:61:4b:c3:fb:88:ca:29:f4:1c:c2:41:96:3b:
00:6a:05:e7:e8:8a:8c:3f:c9:16:23:1d:20:51:05:
66:37:5c:39:bd:85:59:a8:e2:95:2f:3d:02:d1:15:
19:95:17:fe:80:33:80:d3:8a:de:c2:74:3c:93:6a:
4c:a4:7b:11:d2:c3:5e:99:e3:4d:7e:d3:e8:29:8a:
14:d7:44:3a:2c:0f:20:6d:fa:b2:1a:a8:90:4f:ea:
03:86:92:86:b3:1a:9b:eb:ee:97:fa:88:71:10:2c:
5d:2b:f3:df:a0:50:73:4c:e7:97:48:a9:d2:69:5a:
7c:47:a8:2a:17:63:fd:01:0b:00:0a:d7:29:86:f1:
97:5d:82:43:9d:e9:5e:2c:54:00:cb:5d:2f:9a:81:
44:12:9d:d3:e6:c4:02:b2:15:63:17:73:d5:cc:49:
fe:77:99:2d:a2:8b:62:53:90:a5:29:7f:19:d5:e8:
f9:eb:fd:95:01:ed:69:83:51:73:f7:d0:27:ec:78:
69:fa:98:ba:11:85:45:1c:a9:fa:66:80:74:42:1b:
6a:cc:85:1a:75:ab:c4:2a:f1:60:f4:83:e1:9f:7d:
fd:54:4b:12:f5:00:8c:99:bf:a9:18:17:00:d0:c8:
d9:46:0a:b2:87:b4:ac:94:6d:d6:17:75:3a:3f:47:
7a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8A:B9:00:9F:19:0E:F4:C5:70:DF:28:07:D6:46:1B:0B:1D:8F:8D
X509v3 Authority Key Identifier:
keyid:EF:4F:78:94:73:41:CE:55:88:8B:7E:BF:36:90:14:3B:0C:BF:F3:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/2oq5AJ8ZDvTFcN8oB9ZGGwsdj40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.120.0/21
31.47.72.0/21
37.247.120.0/21
91.216.219.0/24
185.49.184.0/22
185.57.196.0/22
185.66.72.0-185.66.74.255
185.203.224.0/24
185.203.227.0/24
193.247.194.0/24
194.176.119.0/24
217.18.32.0/20
IPv6:
2a01:a940::-2a01:a942:ffff:ffff:ffff:ffff:ffff:ffff
2a02:2810::/32
Signature Algorithm: sha256WithRSAEncryption
b9:6e:78:9f:7e:38:ba:05:e6:70:5d:69:0f:4d:b7:ec:b7:e7:
00:30:6c:75:f1:3a:c0:b5:c5:89:ec:50:e9:e3:4a:16:6b:f8:
a1:30:36:94:8c:08:25:43:94:a0:43:42:37:5c:e0:a7:5a:ac:
1f:62:a5:5f:d0:8c:32:16:1a:ae:4f:04:45:1b:12:ec:00:0c:
f2:20:03:73:e0:f5:c5:8c:76:ec:a5:18:27:2c:37:d3:26:56:
45:3f:d4:47:a8:b4:1d:6c:e6:bd:a6:36:8e:36:9b:87:90:4f:
a0:62:43:85:56:76:48:2d:5d:bc:e6:08:69:73:11:b5:13:6b:
9f:64:84:a7:8f:b9:11:66:33:ab:5f:82:01:d0:f4:36:5c:36:
2c:e0:71:62:5b:e6:dc:a4:e4:24:8e:74:34:b5:03:4b:ef:6a:
82:68:a9:e9:1d:9a:bb:70:2c:8b:ed:1d:47:c5:00:22:d0:17:
cb:0f:84:31:97:6f:d1:b5:e9:23:cb:ce:eb:e4:e5:79:2d:b2:
32:65:e1:bf:c1:4f:7d:13:cb:09:4c:b9:63:6d:25:3d:8d:b5:
1f:99:5d:4f:24:13:05:40:7d:5e:12:e0:9c:cc:db:3b:71:9b:
e9:b3:c7:b5:f1:91:e3:2b:60:e9:56:ad:43:b9:9b:c9:9e:8e:
af:2e:49:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:12:08 2026 by rpki-client