Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/O3Md2fGu_NAQGVwzsUndSXloRpk.roa
File: O3Md2fGu_NAQGVwzsUndSXloRpk.roa (raw, json)
Hash identifier: II4bSX3yzIxXnF5wQkTynrc5UoTKYvwt/oh8DflXYKc=
Subject key identifier: 3B:73:1D:D9:F1:AE:FC:D0:10:19:5C:33:B1:49:DD:49:79:68:46:99
Certificate issuer: /CN=b63511ea739b04faa00d31aad2e5887a4c4cf8df
Certificate serial: 019F23694A306963894A22991F0BF642EC2E
Authority key identifier: B6:35:11:EA:73:9B:04:FA:A0:0D:31:AA:D2:E5:88:7A:4C:4C:F8:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjUR6nObBPqgDTGq0uWIekxM-N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/O3Md2fGu_NAQGVwzsUndSXloRpk.roa
Signing time: Thu 02 Jul 2026 15:18:50 +0000
ROA not before: Thu 02 Jul 2026 15:18:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31736
IP address blocks: 185.230.116.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/tjUR6nObBPqgDTGq0uWIekxM-N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/tjUR6nObBPqgDTGq0uWIekxM-N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjUR6nObBPqgDTGq0uWIekxM-N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:4a:30:69:63:89:4a:22:99:1f:0b:f6:42:ec:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63511ea739b04faa00d31aad2e5887a4c4cf8df
Validity
Not Before: Jul 2 15:18:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b731dd9f1aefcd010195c33b149dd4979684699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4d:6e:5b:2a:bd:de:61:7e:a6:54:5a:a3:8c:
90:8c:81:ea:d6:b9:a2:ff:68:c8:5a:b2:01:de:51:
ef:3f:5a:7e:43:a3:fe:f2:0b:ab:4a:51:b4:37:3d:
4f:89:86:fd:39:dd:3c:39:eb:3f:6b:92:05:9c:b1:
57:75:64:63:fc:bf:86:bd:7a:d2:fa:3b:ba:d8:73:
83:a1:43:04:00:91:7c:44:22:9f:ad:27:bf:a8:ef:
21:2e:0b:be:be:55:a2:0c:48:8a:21:5e:36:37:27:
be:61:a1:11:fe:51:fd:78:91:cb:51:5f:5d:29:4f:
b6:bd:d8:26:b4:ef:d9:a5:bd:7b:9c:61:73:4d:95:
9a:f2:59:f6:f8:2b:ef:e9:50:09:8f:70:07:90:ed:
e2:30:98:de:0b:2a:1c:0e:4f:ed:b1:f8:b5:6c:a8:
58:0b:08:e6:d7:b9:ae:4a:53:02:86:11:3e:26:3b:
50:cf:3b:c1:b6:21:99:0e:f0:99:d3:9e:d5:7b:4f:
a6:8a:21:86:c1:26:5c:4a:c3:47:b3:c4:75:bc:54:
f1:39:37:12:1d:4c:1f:12:af:27:63:66:b6:4d:a1:
78:8a:36:f8:9c:9b:df:af:89:d7:3f:65:f9:88:90:
96:cc:f7:d4:83:ab:9b:6d:fe:c1:8f:15:91:43:41:
05:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:73:1D:D9:F1:AE:FC:D0:10:19:5C:33:B1:49:DD:49:79:68:46:99
X509v3 Authority Key Identifier:
keyid:B6:35:11:EA:73:9B:04:FA:A0:0D:31:AA:D2:E5:88:7A:4C:4C:F8:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjUR6nObBPqgDTGq0uWIekxM-N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/O3Md2fGu_NAQGVwzsUndSXloRpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/tjUR6nObBPqgDTGq0uWIekxM-N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.116.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:9a:3c:df:05:0a:4f:d8:ec:bc:ec:12:f4:9e:d8:62:fb:c1:
12:cd:9f:ef:6a:ad:67:36:78:b8:2d:e7:8b:0e:4d:5b:30:4d:
c8:40:42:c5:af:2d:72:6b:36:67:42:e2:61:05:62:49:92:18:
bb:f6:ea:09:ae:9e:03:e5:f1:b9:c5:79:90:7f:e9:86:e6:5c:
d6:9f:e9:df:a5:e0:e6:04:87:07:12:8b:67:65:87:cb:67:bf:
9c:37:41:94:f5:37:e2:64:42:44:5c:7a:21:4d:8f:c8:83:76:
fa:12:b6:3a:12:35:ab:77:bb:9a:54:71:92:15:45:3c:1f:42:
89:b9:43:37:b5:0e:84:10:fb:70:61:ae:c0:e3:3b:92:e2:a5:
e4:6c:2c:87:10:2e:a3:91:ce:a2:78:d7:32:d0:d0:03:94:78:
26:16:aa:8a:1c:72:d9:ee:37:55:59:1c:27:e5:d7:6d:1d:b6:
83:b1:f0:66:06:5c:e7:7e:ba:00:f8:0b:7f:03:6b:c6:d2:83:
3b:13:72:30:ba:a6:95:5b:7a:a6:4c:69:2f:91:58:91:b5:9b:
02:29:c6:2e:a6:92:f8:15:dc:0b:55:22:9b:18:f0:a0:ba:57:
11:e8:3e:f1:01:db:d9:77:af:7f:81:b4:98:c2:88:ea:f4:91:
91:23:02:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:33:09 2026 by rpki-client