Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/_ofD7n-Meqqb5bqWLv3YqaM07G8.roa
File: _ofD7n-Meqqb5bqWLv3YqaM07G8.roa (raw, json)
Hash identifier: zCDjcJpSLZxTQHG9wh0JcogQKCsQcbkZZ0W0LNsrTrY=
Subject key identifier: FE:87:C3:EE:7F:8C:7A:AA:9B:E5:BA:96:2E:FD:D8:A9:A3:34:EC:6F
Certificate issuer: /CN=340551ace81314829351a27e399aeddb33246155
Certificate serial: 019F89202A172BDF20E3F29D0DF46C590C79
Authority key identifier: 34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/_ofD7n-Meqqb5bqWLv3YqaM07G8.roa
Signing time: Wed 22 Jul 2026 09:20:14 +0000
ROA not before: Wed 22 Jul 2026 09:20:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58206
IP address blocks: 194.113.144.0/22 maxlen: 24
2a07:e300::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:20:2a:17:2b:df:20:e3:f2:9d:0d:f4:6c:59:0c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340551ace81314829351a27e399aeddb33246155
Validity
Not Before: Jul 22 09:20:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe87c3ee7f8c7aaa9be5ba962efdd8a9a334ec6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4c:9d:93:c7:1a:ab:1d:a4:72:aa:5c:f5:58:
92:b8:d0:43:70:bc:b2:c4:f1:b1:d8:c1:49:47:94:
a0:24:36:e2:09:25:26:43:58:f2:c3:68:fe:7e:b0:
d1:9f:ca:0c:ff:0d:11:70:22:e7:98:81:54:c0:ae:
6e:d1:23:47:60:5e:97:36:70:4e:1e:cf:06:4e:03:
64:b8:32:35:48:29:53:50:c5:d5:ae:e8:f1:40:98:
2d:9c:b9:9c:73:60:08:28:c4:cc:00:b4:8c:4e:4f:
c9:ad:63:9b:95:7c:de:e9:73:65:b6:a0:d8:07:74:
5a:90:88:b4:8a:d0:7e:5a:21:24:6a:64:0e:89:77:
c0:72:d7:54:dd:00:88:b8:4b:a7:49:09:a7:b5:58:
6d:bd:a3:1d:8e:51:57:71:46:d6:16:80:ab:f7:fb:
4e:b9:e2:bd:9f:56:d8:4d:b0:45:cd:aa:e9:c2:de:
9b:31:18:d4:50:9f:86:f2:e5:58:30:17:46:c5:75:
b1:67:8a:1a:28:1d:6d:52:59:ae:73:69:13:ff:c4:
4f:cd:ad:51:26:5c:21:fd:70:22:94:84:bc:a7:f2:
58:4c:39:3a:d3:68:a9:19:7e:e8:0b:80:8f:e6:36:
ac:a7:d9:8f:4d:3b:5d:0d:c2:f3:ca:c7:63:29:83:
3b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:87:C3:EE:7F:8C:7A:AA:9B:E5:BA:96:2E:FD:D8:A9:A3:34:EC:6F
X509v3 Authority Key Identifier:
keyid:34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/_ofD7n-Meqqb5bqWLv3YqaM07G8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.144.0/22
IPv6:
2a07:e300::/29
Signature Algorithm: sha256WithRSAEncryption
0c:1d:e9:d6:51:e6:fa:f6:9f:50:19:ec:ab:32:d5:ae:af:85:
9d:2e:a7:ac:79:b8:73:ef:c5:f9:a7:22:60:80:da:16:a3:74:
24:78:2e:4f:6d:4d:95:d4:34:a9:52:0e:0c:4f:af:c0:89:f5:
d4:53:ce:0e:37:6e:ba:58:b1:e5:73:3a:c3:3a:27:63:ec:18:
99:95:67:b4:c9:ab:c8:35:da:b0:0f:bf:5e:9c:4a:52:76:1a:
e3:46:9b:ae:90:44:51:c8:3e:86:9f:ac:ce:21:e4:e0:47:8d:
d2:18:01:ef:c8:a3:0e:a7:c9:8f:7d:4e:a9:19:78:0b:bc:fc:
70:38:c8:50:3c:7d:38:92:53:59:e0:d1:89:97:9c:81:a9:a6:
2d:cb:89:e0:fb:b9:42:a4:b2:8e:88:26:d6:77:5d:c3:6f:e2:
ed:1d:f8:91:f6:0a:1e:ec:f5:b2:f6:87:cb:ac:88:e3:99:37:
60:64:49:1e:dd:ac:f6:e2:dd:32:d3:16:35:b1:33:a3:c2:d8:
4e:59:06:ec:81:70:51:5b:09:6a:07:87:ea:a8:a2:ea:44:f0:
11:20:25:b1:d7:f1:5e:d7:34:61:f8:87:1e:0c:49:bf:7e:8d:
0c:a4:99:22:fa:29:6a:7f:bd:ff:68:9e:fd:6f:4c:4e:d0:3d:
79:a5:a9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:11:40 2026 by rpki-client