Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/oezyOEn59V6mni3H8CQ5vs1bQnw.roa
File: oezyOEn59V6mni3H8CQ5vs1bQnw.roa (raw, json)
Hash identifier: q4IZ+VG661pUAowCN5QrAWUUig5pgHw4H2UhgQ/noNs=
Subject key identifier: A1:EC:F2:38:49:F9:F5:5E:A6:9E:2D:C7:F0:24:39:BE:CD:5B:42:7C
Certificate issuer: /CN=6fd3b7ff52d3b192567aacca4d9b8622741b7f7a
Certificate serial: 019F236927C0AB6B2C5E2C189C258BE1589B
Authority key identifier: 6F:D3:B7:FF:52:D3:B1:92:56:7A:AC:CA:4D:9B:86:22:74:1B:7F:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9O3_1LTsZJWeqzKTZuGInQbf3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/oezyOEn59V6mni3H8CQ5vs1bQnw.roa
Signing time: Thu 02 Jul 2026 15:18:41 +0000
ROA not before: Thu 02 Jul 2026 15:18:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31454
IP address blocks: 194.102.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/b9O3_1LTsZJWeqzKTZuGInQbf3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/b9O3_1LTsZJWeqzKTZuGInQbf3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/b9O3_1LTsZJWeqzKTZuGInQbf3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:27:c0:ab:6b:2c:5e:2c:18:9c:25:8b:e1:58:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fd3b7ff52d3b192567aacca4d9b8622741b7f7a
Validity
Not Before: Jul 2 15:18:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1ecf23849f9f55ea69e2dc7f02439becd5b427c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ab:38:06:65:2f:9e:8c:5b:4d:a5:24:7a:54:
e3:ac:78:14:84:45:63:77:25:53:2e:27:03:99:a9:
9b:ba:c8:6d:27:fe:77:b6:4b:95:36:8c:8b:90:b1:
f4:3f:a4:9c:1d:b1:5d:23:3d:f5:6b:03:d8:ca:56:
d3:86:bf:01:34:5c:5c:5a:25:2f:da:40:7e:1f:2a:
5a:e7:a9:a6:02:79:4f:c0:d0:79:e9:d4:42:67:99:
ed:29:11:9c:c2:09:be:ff:77:af:9a:15:cb:15:ed:
5c:00:5b:33:17:69:df:e9:92:0c:5a:c8:71:df:fd:
bc:24:d2:4b:a0:19:5c:d1:ff:b0:a3:64:22:a5:81:
a8:bd:78:fb:6d:66:41:d3:45:c8:24:45:7c:ba:71:
f2:9d:5d:7b:71:d6:be:a0:8c:ea:c2:33:81:a2:53:
37:cb:1f:f8:a7:ed:c9:bf:c0:43:9f:55:c9:2a:62:
d3:c0:d4:83:1c:01:47:e1:c3:15:ca:b5:48:8f:b8:
ee:be:3d:2d:b3:cc:3a:58:c1:3b:42:15:14:56:f0:
ad:c5:58:66:a5:7f:12:a3:a5:86:7a:f5:1d:12:ce:
96:47:3d:e3:eb:97:a4:5c:e6:95:ff:be:64:ac:a8:
46:f6:cb:d7:09:46:d7:04:07:3f:b5:a1:17:94:4b:
c4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EC:F2:38:49:F9:F5:5E:A6:9E:2D:C7:F0:24:39:BE:CD:5B:42:7C
X509v3 Authority Key Identifier:
keyid:6F:D3:B7:FF:52:D3:B1:92:56:7A:AC:CA:4D:9B:86:22:74:1B:7F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9O3_1LTsZJWeqzKTZuGInQbf3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/oezyOEn59V6mni3H8CQ5vs1bQnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/b9O3_1LTsZJWeqzKTZuGInQbf3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.86.0/24
Signature Algorithm: sha256WithRSAEncryption
56:7a:11:c2:68:50:82:3e:49:c6:72:ee:92:21:d6:b1:0c:f1:
23:47:37:12:b3:6a:74:c4:c7:6c:65:f6:02:71:87:fd:66:c6:
60:63:78:66:2f:4b:cd:7e:08:d6:29:f9:e6:0d:4b:5d:db:f5:
5e:2f:c6:24:ef:ef:7d:3f:71:80:f7:2f:67:b8:1d:d4:41:af:
43:40:15:00:de:b5:fd:4e:1c:9b:9a:1b:28:da:f6:53:1d:cd:
de:a0:c3:48:2e:cd:ba:4b:8e:b6:55:96:e8:85:e8:14:76:6e:
37:b5:7e:63:d7:59:eb:08:1c:a6:a6:f7:74:e3:7a:db:05:69:
af:68:b8:f7:63:d4:26:1e:56:de:3e:ba:f9:b4:e8:da:6e:26:
34:4b:73:dd:39:b6:b7:e3:2c:1c:5b:4f:5f:e4:c1:47:c3:39:
41:92:0f:27:9e:0d:d1:6b:45:8a:04:80:d5:57:13:dd:71:31:
d7:94:b1:e3:1d:cf:ab:fe:53:18:f5:ce:cb:82:df:b4:9f:13:
62:92:a5:a0:d6:4a:cb:27:ca:e4:d6:b5:d8:10:4a:0b:d4:fc:
b2:4d:15:b5:50:de:25:ac:fe:10:34:11:86:93:25:56:2f:50:
7a:29:34:da:05:25:4e:e5:d3:bd:71:0f:d4:ea:0b:0f:0c:1c:
bb:2c:ee:8c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaSfAq2ssXiwYnCWL4VibMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZDNiN2ZmNTJkM2IxOTI1NjdhYWNjYTRkOWI4NjIyNzQx
YjdmN2EwHhcNMjYwNzAyMTUxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMWVjZjIzODQ5ZjlmNTVlYTY5ZTJkYzdmMDI0MzliZWNkNWI0MjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6s4BmUvnoxbTaUkelTjrHgUhEVj
dyVTLicDmambushtJ/53tkuVNoyLkLH0P6ScHbFdIz31awPYylbThr8BNFxcWiUv
2kB+Hypa56mmAnlPwNB56dRCZ5ntKRGcwgm+/3evmhXLFe1cAFszF2nf6ZIMWshx
3/28JNJLoBlc0f+wo2QipYGovXj7bWZB00XIJEV8unHynV17cda+oIzqwjOBolM3
yx/4p+3Jv8BDn1XJKmLTwNSDHAFH4cMVyrVIj7juvj0ts8w6WME7QhUUVvCtxVhm
pX8So6WGevUdEs6WRz3j65ekXOaV/75krKhG9svXCUbXBAc/taEXlEvEkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKHs8jhJ+fVepp4tx/AkOb7NW0J8MB8GA1UdIwQY
MBaAFG/Tt/9S07GSVnqsyk2bhiJ0G396MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjlPM18xTFRzWkpXZXF6S1RadUdJblFiZjNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8zY2JiOWMtNTAwNi00NmJlLWI0YzMt
ZmY4ZjU1NDVlYmEyLzEvb2V6eU9FbjU5VjZtbmkzSDhDUTV2czFiUW53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8zY2JiOWMtNTAwNi00NmJlLWI0YzMtZmY4ZjU1NDVlYmEy
LzEvYjlPM18xTFRzWkpXZXF6S1RadUdJblFiZjNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmZWMA0G
CSqGSIb3DQEBCwUAA4IBAQBWehHCaFCCPknGcu6SIdaxDPEjRzcSs2p0xMdsZfYC
cYf9ZsZgY3hmL0vNfgjWKfnmDUtd2/VeL8Yk7+99P3GA9y9nuB3UQa9DQBUA3rX9
Thybmhso2vZTHc3eoMNILs26S462VZbohegUdm43tX5j11nrCBympvd043rbBWmv
aLj3Y9QmHlbePrr5tOjabiY0S3PdOba34ywcW09f5MFHwzlBkg8nng3Ra0WKBIDV
VxPdcTHXlLHjHc+r/lMY9c7Lgt+0nxNikqWg1krLJ8rk1rXYEEoL1PyyTRW1UN4l
rP4QNBGGkyVWL1B6KTTaBSVO5dO9cQ/U6gsPDBy7LO6M
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:05:20 2026 by rpki-client