Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/OGG1AN9r1K7fCCBDdkuKp2YurRc.roa
File: OGG1AN9r1K7fCCBDdkuKp2YurRc.roa (raw, json)
Hash identifier: uKPYBtL6H7NRJR1/TrQfck1LuVNFXIVWB3lTB8Q9nkM=
Subject key identifier: 38:61:B5:00:DF:6B:D4:AE:DF:08:20:43:76:4B:8A:A7:66:2E:AD:17
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 019C8F32585BD8183B576F78A31561A14744
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/OGG1AN9r1K7fCCBDdkuKp2YurRc.roa
Signing time: Tue 24 Feb 2026 10:29:27 +0000
ROA not before: Tue 24 Feb 2026 10:29:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62005
IP address blocks: 45.83.180.0/23 maxlen: 24
45.83.182.0/24 maxlen: 24
92.118.124.0/24 maxlen: 24
92.118.125.0/24 maxlen: 24
92.118.126.0/24 maxlen: 24
92.118.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8f:32:58:5b:d8:18:3b:57:6f:78:a3:15:61:a1:47:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Feb 24 10:29:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3861b500df6bd4aedf082043764b8aa7662ead17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:13:a0:f1:af:93:58:c9:48:26:2d:66:0b:39:
c6:db:9a:a7:b0:94:c6:d4:fa:b8:03:48:2f:d2:15:
87:04:24:aa:df:f2:49:c1:00:0e:81:3c:ec:11:aa:
64:ea:fa:8b:db:de:d4:3b:c9:c3:f0:f7:de:50:b1:
a0:01:a3:3d:a4:3e:da:81:70:88:97:9e:35:fe:c7:
50:66:98:61:61:f3:e0:2d:53:09:69:0e:27:59:22:
34:51:e8:05:8e:5a:0a:34:cc:6f:0c:69:99:7e:6e:
01:ad:a7:36:d8:6b:4b:8c:e5:35:a6:60:4e:e5:e1:
25:a2:b5:84:b9:99:21:56:12:b6:7c:cd:dc:c9:68:
3c:c3:8c:15:1c:51:9d:2d:69:b0:9e:1e:88:6f:be:
0c:31:10:59:d3:ea:6e:4e:61:5e:74:9d:42:f7:e1:
37:b0:5e:39:d6:a1:82:65:85:7e:86:56:5e:64:97:
f9:d9:0b:c0:28:0b:7e:27:15:17:9a:9e:0e:c5:36:
17:a5:e3:00:69:b1:b1:e0:f4:3d:1a:66:4e:fe:da:
1e:f7:43:45:cc:24:40:cf:eb:44:8c:ab:94:17:cc:
91:10:36:c1:2d:17:16:d8:b2:00:3c:c9:9d:3b:e5:
51:2c:c1:bb:4c:24:db:62:6f:02:91:ab:bd:7e:fc:
c3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:61:B5:00:DF:6B:D4:AE:DF:08:20:43:76:4B:8A:A7:66:2E:AD:17
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/OGG1AN9r1K7fCCBDdkuKp2YurRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.180.0-45.83.182.255
92.118.124.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:e0:21:cb:4f:b3:43:06:06:2e:c7:f8:fb:25:1a:2a:41:0f:
14:66:0d:d3:a4:84:5b:91:0c:ef:ce:eb:51:a1:40:a6:3d:00:
10:22:51:36:49:01:a4:6f:18:a2:b6:fc:c7:8a:b4:d2:06:b3:
0c:a8:e1:26:df:d7:33:6d:14:ef:16:b4:e3:28:61:13:fa:d3:
d1:5b:b3:02:65:1c:56:0d:20:8b:41:ec:2a:59:42:86:dc:16:
a4:07:01:10:f2:00:e3:93:24:cf:9d:8e:5c:fc:45:b1:95:3c:
f3:48:53:00:c9:e1:23:87:89:d8:be:c5:56:3b:d8:d3:46:8b:
aa:cf:4a:25:1b:d4:21:d3:59:0e:6e:d1:00:9b:c5:e6:eb:40:
32:c1:8d:50:11:d5:5c:3a:00:7d:73:52:aa:d7:5e:58:a6:69:
1b:bb:5a:7c:28:95:3b:d3:22:e5:3d:9a:f8:c2:01:03:ef:34:
53:10:5c:85:b4:d2:5f:ee:b4:85:d2:56:5e:68:b2:23:52:9c:
31:2d:59:df:6b:72:f3:54:84:91:ce:fe:f8:e4:2d:38:15:a0:
f7:5e:e8:f2:45:bc:63:8d:1e:37:88:d7:9c:86:9a:d1:b7:b1:
00:12:42:fa:ef:32:cf:ff:65:2d:5c:75:0d:0f:ae:90:50:24:
62:7f:2a:3c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:58:51 2026 by rpki-client