Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a2bc1d-cf0e-4381-88b6-192ba865295e/1/oSP6Cf5NdjV4FXONxXvfRs-_8oY.roa
File: oSP6Cf5NdjV4FXONxXvfRs-_8oY.roa (raw, json)
Hash identifier: w81hP+JqsQQtt62EYNuMoUw8Xp8nPiV4FHGOWRy41w8=
Subject key identifier: A1:23:FA:09:FE:4D:76:35:78:15:73:8D:C5:7B:DF:46:CF:BF:F2:86
Certificate issuer: /CN=02366f1aeef31c5e91e49026b03e7470cce1578d
Certificate serial: 019F83B17B6CEDB206AA6BF9063248860506
Authority key identifier: 02:36:6F:1A:EE:F3:1C:5E:91:E4:90:26:B0:3E:74:70:CC:E1:57:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjZvGu7zHF6R5JAmsD50cMzhV40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a2bc1d-cf0e-4381-88b6-192ba865295e/1/oSP6Cf5NdjV4FXONxXvfRs-_8oY.roa
Signing time: Tue 21 Jul 2026 08:01:14 +0000
ROA not before: Tue 21 Jul 2026 08:01:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219356
IP address blocks: 165.65.196.0/24 maxlen: 24
165.65.197.0/24 maxlen: 24
165.65.198.0/24 maxlen: 24
165.65.199.0/24 maxlen: 24
165.65.200.0/24 maxlen: 24
165.65.201.0/24 maxlen: 24
165.65.202.0/24 maxlen: 24
165.65.203.0/24 maxlen: 24
2a14:3b80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a2bc1d-cf0e-4381-88b6-192ba865295e/1/AjZvGu7zHF6R5JAmsD50cMzhV40.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a2bc1d-cf0e-4381-88b6-192ba865295e/1/AjZvGu7zHF6R5JAmsD50cMzhV40.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjZvGu7zHF6R5JAmsD50cMzhV40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:b1:7b:6c:ed:b2:06:aa:6b:f9:06:32:48:86:05:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02366f1aeef31c5e91e49026b03e7470cce1578d
Validity
Not Before: Jul 21 08:01:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a123fa09fe4d76357815738dc57bdf46cfbff286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c6:09:0c:ba:a4:9a:1d:8f:d5:5c:6c:99:e6:
38:5b:e1:f7:0b:d2:cc:21:88:bd:22:5f:38:f8:b2:
5f:f9:6f:48:dd:91:4a:a1:36:cd:49:4a:98:9e:67:
aa:0a:04:44:13:aa:b1:f0:2e:08:fb:d7:7b:8f:dd:
b3:62:43:10:74:c3:f0:4a:62:07:42:40:de:42:0c:
4d:80:2b:70:c3:9b:54:0b:c3:54:8c:23:18:a5:4d:
e5:95:02:87:84:29:e9:2c:af:60:2d:a0:fa:c0:cf:
fa:8b:37:3a:48:03:fa:1c:13:b3:c1:cf:a7:9f:ce:
ac:58:12:79:a5:4a:da:3b:d2:b0:8e:7d:5b:66:b4:
14:f6:f9:5c:7e:d2:df:28:ab:99:73:4a:f8:47:22:
27:36:fb:1b:0b:1a:f9:8f:d6:e5:6d:f6:0c:2b:09:
b5:25:d4:26:18:de:cb:c2:b3:c2:e1:dd:39:10:bc:
e1:20:bd:0a:d5:c6:bb:18:19:39:30:74:e0:bb:5f:
d4:6e:4e:fa:31:26:ae:24:69:71:ee:2f:e3:ee:02:
28:ba:1f:dd:cf:26:7a:c6:3b:a3:1a:84:f9:68:52:
2c:09:7c:bd:ae:b4:21:de:9b:32:0f:d2:56:67:0e:
46:34:0f:f4:63:d2:77:0b:27:a8:41:9a:77:6b:94:
8a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:23:FA:09:FE:4D:76:35:78:15:73:8D:C5:7B:DF:46:CF:BF:F2:86
X509v3 Authority Key Identifier:
keyid:02:36:6F:1A:EE:F3:1C:5E:91:E4:90:26:B0:3E:74:70:CC:E1:57:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjZvGu7zHF6R5JAmsD50cMzhV40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a2bc1d-cf0e-4381-88b6-192ba865295e/1/oSP6Cf5NdjV4FXONxXvfRs-_8oY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a2bc1d-cf0e-4381-88b6-192ba865295e/1/AjZvGu7zHF6R5JAmsD50cMzhV40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.65.196.0-165.65.203.255
IPv6:
2a14:3b80::/29
Signature Algorithm: sha256WithRSAEncryption
82:6e:50:f7:34:95:ed:6f:51:09:73:2d:f4:96:9c:97:ce:52:
0f:20:a3:49:50:7b:95:9d:13:d5:e3:48:c9:d3:c2:26:02:9a:
50:d1:cf:ee:ad:ff:03:46:65:eb:b4:14:fe:6a:37:4f:bc:94:
5a:29:1d:e7:4a:f5:8b:4d:66:a7:ab:a3:e7:84:64:d9:08:d6:
5c:c4:df:07:8c:37:09:81:50:d1:08:73:04:9b:79:a4:7c:7e:
88:f7:05:49:89:98:d8:1f:b3:0b:12:c0:76:6c:c9:7f:69:f9:
36:0e:f9:cc:5c:70:a3:e6:77:cb:ba:71:88:be:1b:1f:07:78:
e6:c9:7b:6e:cc:fc:f9:22:76:cb:f4:f7:92:73:30:db:19:16:
c0:ce:98:ad:64:18:f2:88:bc:fb:f9:1f:06:30:ab:03:60:14:
0c:b0:1c:1a:4a:d7:23:1f:41:5d:7c:b8:7e:17:f8:f8:8a:8e:
ce:39:65:86:e1:e9:fc:b9:5b:3b:e3:17:94:6d:05:d5:a3:df:
88:f5:4f:1a:1a:72:5d:e3:bd:25:7e:2d:78:26:56:76:8a:1a:
e7:85:8e:d3:34:63:9b:ae:2b:dc:5d:c7:65:36:df:57:01:36:
30:db:18:14:99:8f:be:5e:ff:1e:b7:20:f7:38:e5:3c:fe:04:
0a:de:e9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:02:12 2026 by rpki-client