Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/oxs1tuSUXUJmLqoL27S7ChGx4fM.roa
File: oxs1tuSUXUJmLqoL27S7ChGx4fM.roa (raw, json)
Hash identifier: 9KLCRWwLN8lTVB3jayQYsnUAOfMC7o7LYOk7o51/yYk=
Subject key identifier: A3:1B:35:B6:E4:94:5D:42:66:2E:AA:0B:DB:B4:BB:0A:11:B1:E1:F3
Certificate issuer: /CN=3cf615f06d23228c769a85faf0510393d064e0e0
Certificate serial: 019F23683C68E355F36102BA071863CDAF42
Authority key identifier: 3C:F6:15:F0:6D:23:22:8C:76:9A:85:FA:F0:51:03:93:D0:64:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/oxs1tuSUXUJmLqoL27S7ChGx4fM.roa
Signing time: Thu 02 Jul 2026 15:17:41 +0000
ROA not before: Thu 02 Jul 2026 15:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34871
IP address blocks: 185.240.148.0/23 maxlen: 23
185.240.148.0/24 maxlen: 24
185.240.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3c:68:e3:55:f3:61:02:ba:07:18:63:cd:af:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cf615f06d23228c769a85faf0510393d064e0e0
Validity
Not Before: Jul 2 15:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a31b35b6e4945d42662eaa0bdbb4bb0a11b1e1f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:66:14:c8:2c:a5:e5:1b:ad:de:e4:e9:7f:21:
4f:ec:20:c0:ba:17:3e:ff:0e:d8:c3:da:a5:32:a4:
9b:37:94:e5:d8:0b:0a:0c:9e:56:19:0e:ec:8d:a0:
2f:d9:6c:15:f4:14:69:a5:77:f1:e0:24:03:7e:f7:
53:a0:0e:a2:58:30:40:91:b9:a4:88:f1:77:db:cd:
0a:d2:41:a5:e3:1a:6e:f8:ca:e8:72:a4:3d:0a:08:
d1:e6:45:2d:d5:b5:9c:e1:0a:46:ea:a7:09:b8:76:
43:67:a3:c0:f5:ca:00:24:3e:18:c2:a2:ce:87:75:
29:62:16:3e:7e:6f:41:b8:fe:95:09:41:7b:4e:e8:
41:d2:a9:a4:51:31:b3:38:18:08:f5:c7:91:06:93:
d3:49:8c:54:52:88:c8:90:3f:27:63:8c:48:a3:65:
18:1e:dc:7f:27:a6:f3:c4:9f:c5:ba:05:c1:a1:1c:
bf:2f:52:eb:9f:23:9f:04:b7:8a:c4:17:1c:d1:7a:
9a:8d:50:64:aa:fa:b5:de:13:14:74:e1:79:d2:6f:
bd:3c:89:f8:32:33:12:ad:45:23:f6:80:43:16:2b:
33:67:5f:8d:36:c2:1a:7e:03:10:95:c7:b8:2b:19:
b2:0e:bf:85:21:b7:78:44:cc:2d:60:b4:51:e8:11:
a9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:1B:35:B6:E4:94:5D:42:66:2E:AA:0B:DB:B4:BB:0A:11:B1:E1:F3
X509v3 Authority Key Identifier:
keyid:3C:F6:15:F0:6D:23:22:8C:76:9A:85:FA:F0:51:03:93:D0:64:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/oxs1tuSUXUJmLqoL27S7ChGx4fM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.148.0/23
185.240.151.0/24
Signature Algorithm: sha256WithRSAEncryption
87:99:68:8e:4a:26:1e:65:90:86:b9:59:cd:2c:c2:4f:81:4c:
ee:65:29:58:8a:fe:43:8d:06:36:13:19:49:b9:85:99:78:d4:
c7:4c:a9:95:5c:50:00:f5:01:b5:72:b1:72:cb:b9:06:dc:30:
6d:fe:b6:65:06:09:85:a9:a3:02:f6:b1:e1:4a:1e:8e:81:1d:
9d:8b:f3:99:54:4e:52:df:3e:ba:7d:ed:d3:1b:ff:6c:19:9b:
05:38:fa:de:00:8e:3f:4c:02:7b:2b:a0:5a:db:92:4a:51:7d:
d1:c0:39:56:b1:46:5c:03:1d:3c:44:27:84:98:5b:5c:24:02:
93:28:f9:5a:7e:5d:d9:5e:66:21:13:ac:41:a0:69:e3:f8:35:
fd:ae:ae:7c:10:ca:d9:3c:79:f9:35:9d:b7:06:54:f4:35:d3:
72:83:fe:ac:ac:7e:b8:b8:fb:2d:c1:57:09:f8:53:85:60:dc:
a1:88:ac:d9:76:08:3f:2b:96:4f:f1:95:59:0f:da:bf:ab:76:
73:e9:95:e2:85:e6:aa:7c:d5:f3:d7:33:1a:28:97:60:0f:bb:
6e:48:25:31:80:46:18:6b:52:43:5d:62:a6:cc:18:39:e2:0f:
d8:ee:58:68:b8:95:c9:7f:b2:ff:5e:1c:fb:8f:de:98:53:8a:
93:f8:a7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:32:19 2026 by rpki-client