Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/O5sybgaSclEqMdz0Cz2yPn7BUqg.roa
File: O5sybgaSclEqMdz0Cz2yPn7BUqg.roa (raw, json)
Hash identifier: gttOxOgOzhcjl2RHp1XJfsuJL3Snw8fxKt1nZwo05Bo=
Subject key identifier: 3B:9B:32:6E:06:92:72:51:2A:31:DC:F4:0B:3D:B2:3E:7E:C1:52:A8
Certificate issuer: /CN=032021f942f6a31be78444f87955d7f7c8fe67f9
Certificate serial: 019F236879BD191F555320260913219CA234
Authority key identifier: 03:20:21:F9:42:F6:A3:1B:E7:84:44:F8:79:55:D7:F7:C8:FE:67:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyAh-UL2oxvnhET4eVXX98j-Z_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/O5sybgaSclEqMdz0Cz2yPn7BUqg.roa
Signing time: Thu 02 Jul 2026 15:17:56 +0000
ROA not before: Thu 02 Jul 2026 15:17:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35677
IP address blocks: 185.92.76.0/22 maxlen: 22
2a03:8ae0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/AyAh-UL2oxvnhET4eVXX98j-Z_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/AyAh-UL2oxvnhET4eVXX98j-Z_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyAh-UL2oxvnhET4eVXX98j-Z_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:79:bd:19:1f:55:53:20:26:09:13:21:9c:a2:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032021f942f6a31be78444f87955d7f7c8fe67f9
Validity
Not Before: Jul 2 15:17:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b9b326e069272512a31dcf40b3db23e7ec152a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:20:8e:72:3d:68:0b:02:c3:d0:4a:dd:53:e7:
e4:3a:74:bb:d8:fe:ff:42:d6:fc:f1:9a:27:05:74:
63:b0:3d:0b:08:6c:9c:16:5d:63:a1:80:9d:f8:37:
1a:e7:a8:a0:e3:c3:3c:d4:d0:63:a3:d1:55:4f:b6:
b3:d3:92:f2:2c:7f:45:1e:c8:bf:07:bb:3d:ab:62:
93:8b:38:06:cc:36:2d:f8:16:3b:85:aa:6c:3a:6d:
c8:38:b8:56:77:1c:b9:f5:0c:09:fa:82:be:9a:73:
e3:5b:09:ba:61:0c:6a:13:59:7a:76:2e:73:f1:c5:
39:3a:75:94:a7:55:34:31:68:62:cf:32:77:fb:69:
f4:a5:cd:6a:7a:a2:6d:c9:0d:42:1a:d1:77:c1:ac:
a9:97:57:00:d6:18:18:b4:f0:9e:c8:55:26:fd:94:
f0:fe:e4:fa:e9:ae:a5:b4:3e:ce:58:7b:4d:e1:b3:
97:a0:7b:a6:2f:48:d4:d2:db:de:9c:8c:3a:66:bf:
81:a9:68:16:03:70:1c:33:67:0e:de:26:41:c6:1b:
3d:6d:22:9d:ee:ab:f4:4b:36:07:94:f5:2b:f1:b5:
46:b8:6a:7b:b7:fe:0f:3a:f2:32:95:29:ad:95:07:
44:33:ff:3d:76:56:29:8a:4d:02:05:2f:c3:8f:4e:
7b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9B:32:6E:06:92:72:51:2A:31:DC:F4:0B:3D:B2:3E:7E:C1:52:A8
X509v3 Authority Key Identifier:
keyid:03:20:21:F9:42:F6:A3:1B:E7:84:44:F8:79:55:D7:F7:C8:FE:67:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyAh-UL2oxvnhET4eVXX98j-Z_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/O5sybgaSclEqMdz0Cz2yPn7BUqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/AyAh-UL2oxvnhET4eVXX98j-Z_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.76.0/22
IPv6:
2a03:8ae0::/32
Signature Algorithm: sha256WithRSAEncryption
84:1c:51:be:ac:1e:16:77:23:ff:03:ab:6e:55:67:b3:39:a7:
4e:54:d2:98:31:16:2e:03:28:3b:20:52:7d:2b:5e:a2:df:bb:
f4:99:62:ad:8a:83:20:29:64:90:30:c7:85:c7:0b:3d:19:79:
78:ee:33:77:b4:e9:de:fb:da:99:77:9d:f8:fa:9e:2b:43:a3:
69:44:83:bb:94:88:f7:f3:0f:2c:5d:50:4d:72:45:b5:74:a5:
82:53:c2:e0:d5:4d:a8:4c:01:39:39:da:c6:c8:6c:ee:2e:fd:
83:ce:36:d6:85:43:5f:ca:bf:57:a4:25:c1:fb:3f:4e:47:27:
88:e1:9a:1e:38:f8:44:69:a0:a4:3b:d4:2e:10:49:d2:27:a0:
21:39:31:57:f5:e6:58:b1:02:cb:f3:4a:a7:e3:e7:40:67:e1:
0e:40:04:c4:9a:76:8c:16:3d:62:62:b6:f2:21:8c:0b:a7:95:
e1:c8:03:30:7c:2c:7e:cb:13:b5:fe:71:d8:47:c9:b8:81:97:
ec:6b:36:3f:c3:53:61:41:6f:1a:df:95:07:12:c1:42:88:ba:
0c:6c:27:6c:60:f8:5e:20:eb:63:ee:8a:04:b8:e3:5c:2b:2e:
68:99:bc:5d:01:b2:63:e5:6c:b1:bc:33:f4:ed:9b:99:ec:05:
e2:45:46:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:26:08 2026 by rpki-client