Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/OtzhGfilSurocGymxRL7eQzidr4.roa
File: OtzhGfilSurocGymxRL7eQzidr4.roa (raw, json)
Hash identifier: vDQ7y55xoQgeukZduThUGBphIJ09K2D+oY+pxlGs+Pw=
Subject key identifier: 3A:DC:E1:19:F8:A5:4A:EA:E8:70:6C:A6:C5:12:FB:79:0C:E2:76:BE
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019F4C5B0EC4F3B52296C3567F2A39FE6F5E
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/OtzhGfilSurocGymxRL7eQzidr4.roa
Signing time: Fri 10 Jul 2026 14:07:43 +0000
ROA not before: Fri 10 Jul 2026 14:07:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 93.88.144.0/21 maxlen: 24
95.155.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4c:5b:0e:c4:f3:b5:22:96:c3:56:7f:2a:39:fe:6f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Jul 10 14:07:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3adce119f8a54aeae8706ca6c512fb790ce276be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:32:d2:77:68:6e:db:da:af:91:5c:b6:f8:84:
6a:56:4b:8a:91:a0:9d:22:15:39:81:97:9a:66:2b:
c7:e0:08:6d:a7:66:7d:5d:68:f3:89:9d:8c:42:1e:
5d:03:90:dd:8f:e9:bf:e9:ba:e9:e2:77:ac:38:4a:
79:b1:cc:7f:e4:b9:2f:a4:91:b1:36:e5:b5:1c:47:
4a:78:cb:c5:98:1d:62:be:f7:c8:8b:17:86:83:69:
19:f7:54:db:bf:ab:0d:b6:2a:95:1e:73:74:47:c9:
3a:aa:37:d7:c7:9b:2d:38:0f:1d:b0:41:e2:5d:09:
9d:a0:d6:83:fe:34:d9:3d:d4:0e:4a:a7:6d:5e:ce:
72:9d:3d:64:92:d7:44:75:f7:83:e4:0d:61:c9:f6:
7a:32:66:22:fe:6a:72:1c:6d:2a:dc:a6:38:ba:94:
15:38:2c:46:ef:8f:a1:ba:6d:d4:95:36:8b:19:99:
c5:57:cc:25:a3:3f:99:d8:ca:5c:a7:1c:6c:74:37:
02:2e:fa:c4:e4:31:6f:0e:4a:9d:93:fe:80:d9:d8:
63:99:f5:57:fd:d1:03:9f:b4:45:ff:97:8b:50:15:
3a:6d:a6:69:db:7c:f2:ee:e6:00:6b:33:72:81:e5:
12:3e:8e:62:f8:d1:17:1c:cb:fc:ba:42:7b:03:b8:
de:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DC:E1:19:F8:A5:4A:EA:E8:70:6C:A6:C5:12:FB:79:0C:E2:76:BE
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/OtzhGfilSurocGymxRL7eQzidr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.144.0/21
95.155.140.0/24
Signature Algorithm: sha256WithRSAEncryption
23:a6:01:cb:14:e5:11:49:45:bc:5e:0e:3d:98:e4:fb:64:20:
86:01:1e:41:57:0d:35:7d:09:51:aa:54:6b:67:3d:96:e0:e7:
54:0f:bc:3b:13:3e:26:c3:ec:3a:0b:84:e6:15:be:ca:b2:c9:
96:ce:d0:1b:57:3c:b5:de:8e:09:48:7d:47:ef:18:9f:db:93:
b3:7a:0e:53:b8:6f:52:6a:2e:d9:26:00:3a:6b:3b:68:9b:32:
83:49:d1:6d:85:e9:79:8a:01:cd:19:5e:21:af:17:be:c1:94:
c2:3d:0d:9b:da:0b:75:3a:6f:58:83:a6:eb:51:5e:d5:c6:00:
fe:a2:88:eb:3f:39:5a:62:96:cb:60:73:5d:65:15:24:c1:fa:
4f:ba:7b:3c:49:0e:0a:8e:05:ae:4a:bb:cf:22:80:de:44:13:
7c:39:f0:20:5e:5a:be:09:e6:df:a7:00:e7:39:33:06:b7:93:
5f:d8:f9:71:92:e3:87:6a:1e:b4:77:0b:47:fc:4c:51:1b:36:
5b:39:e1:52:8b:b3:0a:46:6d:7a:fa:5b:1e:8c:21:1c:8b:8f:
38:81:5b:c8:75:c3:93:65:b1:ee:97:fd:77:e3:1e:4e:7b:4e:
90:e9:67:09:ac:3c:07:a5:74:6f:a6:5b:8b:24:b3:f1:be:ca:
f1:6b:b6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:48:33 2026 by rpki-client