Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b0cbc5-f540-447e-a5f0-4ccbb1c44205/1/OG19cG02W6XiUeaI2D7Kvd4yTkU.roa
File: OG19cG02W6XiUeaI2D7Kvd4yTkU.roa (raw, json)
Hash identifier: nb3wBIFFJPwVVswh9bW4m/krDoVB8NsXSoHSp9oQDpU=
Subject key identifier: 38:6D:7D:70:6D:36:5B:A5:E2:51:E6:88:D8:3E:CA:BD:DE:32:4E:45
Certificate issuer: /CN=a1dfa6340e6bccb437ec30fcfa8f4d82dc15ccaf
Certificate serial: 019CB2FB1BA369FF0C0FEC6B333CF520112B
Authority key identifier: A1:DF:A6:34:0E:6B:CC:B4:37:EC:30:FC:FA:8F:4D:82:DC:15:CC:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/od-mNA5rzLQ37DD8-o9NgtwVzK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b0cbc5-f540-447e-a5f0-4ccbb1c44205/1/OG19cG02W6XiUeaI2D7Kvd4yTkU.roa
Signing time: Tue 03 Mar 2026 09:15:26 +0000
ROA not before: Tue 03 Mar 2026 09:15:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197029
IP address blocks: 80.92.240.0/20 maxlen: 20
80.92.244.0/24 maxlen: 24
2a02:cbe0::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b0cbc5-f540-447e-a5f0-4ccbb1c44205/1/od-mNA5rzLQ37DD8-o9NgtwVzK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b0cbc5-f540-447e-a5f0-4ccbb1c44205/1/od-mNA5rzLQ37DD8-o9NgtwVzK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/od-mNA5rzLQ37DD8-o9NgtwVzK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b2:fb:1b:a3:69:ff:0c:0f:ec:6b:33:3c:f5:20:11:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1dfa6340e6bccb437ec30fcfa8f4d82dc15ccaf
Validity
Not Before: Mar 3 09:15:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=386d7d706d365ba5e251e688d83ecabdde324e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:94:39:40:5a:40:73:27:56:f0:b4:c2:4a:a9:
35:ea:00:6c:56:f2:f5:80:76:65:c1:0c:6a:9f:f8:
21:7e:fa:87:f3:18:ee:5f:6a:30:ac:a5:d1:98:39:
c6:11:0d:33:db:37:78:f5:28:56:e0:64:29:0e:25:
a1:16:95:3d:aa:a4:15:2c:75:88:2c:30:ce:35:d1:
eb:43:e6:71:fb:ee:fc:4c:9b:06:e0:5b:6a:b7:01:
f5:03:63:ca:df:fc:ef:09:65:c6:50:c4:60:a6:64:
05:6c:be:13:33:87:ae:ac:b9:35:89:e7:82:1d:c6:
06:d1:02:b0:90:01:84:a4:05:48:f5:c7:37:c2:6a:
00:6c:b3:12:af:3f:a9:6a:ec:21:72:00:67:de:b7:
35:9b:14:b0:62:04:64:f3:d6:e2:ae:ae:03:f5:9f:
e2:3a:2a:c7:06:db:81:84:91:0c:86:ca:11:50:82:
de:60:80:0e:1a:7f:54:7a:9d:6e:f9:e7:39:10:06:
13:07:5b:6f:2a:ea:1e:4b:46:0f:ae:94:e0:8d:4b:
a5:04:d5:3b:35:17:43:3b:5b:67:86:6e:f7:90:1b:
a8:a6:4c:63:9f:ca:00:d9:4d:52:c5:4b:fc:64:ad:
23:ef:27:b9:2f:50:a2:4d:f8:25:aa:1d:b4:7a:11:
92:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6D:7D:70:6D:36:5B:A5:E2:51:E6:88:D8:3E:CA:BD:DE:32:4E:45
X509v3 Authority Key Identifier:
keyid:A1:DF:A6:34:0E:6B:CC:B4:37:EC:30:FC:FA:8F:4D:82:DC:15:CC:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/od-mNA5rzLQ37DD8-o9NgtwVzK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b0cbc5-f540-447e-a5f0-4ccbb1c44205/1/OG19cG02W6XiUeaI2D7Kvd4yTkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b0cbc5-f540-447e-a5f0-4ccbb1c44205/1/od-mNA5rzLQ37DD8-o9NgtwVzK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.92.240.0/20
IPv6:
2a02:cbe0::/31
Signature Algorithm: sha256WithRSAEncryption
0e:9f:1c:4d:a9:11:21:b2:6a:0e:14:c4:46:ec:65:cc:1b:a1:
be:46:07:43:65:fe:44:80:b6:08:13:34:ac:03:85:ce:35:6c:
26:c8:5d:59:e6:3f:11:a7:68:2b:16:ea:29:21:e1:83:61:ef:
e2:c7:41:bd:39:5b:29:c7:24:69:4d:c9:17:e9:2a:75:29:95:
b9:68:34:e1:8d:20:e9:a2:16:24:c9:2c:da:a9:36:e3:cf:17:
a2:49:df:27:9e:92:8b:d3:f2:ec:98:31:37:49:2d:b4:47:bb:
c0:f8:ae:bd:d9:03:c1:59:b1:44:49:10:82:6b:33:44:b6:53:
e2:e6:de:f8:15:9a:4f:b6:0f:97:72:3d:8d:d8:f7:48:53:d7:
77:06:6f:50:b5:11:fb:8c:ca:8f:62:d5:d6:2e:b8:a5:36:42:
ea:19:9b:bb:63:f2:2d:50:ba:d8:96:aa:f4:16:73:92:16:c3:
2f:c3:d9:76:24:40:6e:43:63:3e:a0:62:fc:45:c2:f1:72:25:
df:2b:29:17:d1:aa:70:ae:72:90:9e:8d:2f:1c:24:ed:3e:e8:
9a:5d:87:90:1a:e1:d0:54:fa:19:3a:41:32:17:76:ca:3d:7d:
a7:79:03:7e:2d:61:5a:99:ad:cc:b2:8f:30:7a:cc:93:ca:a4:
9b:5d:69:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:58:14 2026 by rpki-client