Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/OeVZYvxcetwh0CYq8tJoEGNxTC8.roa
File: OeVZYvxcetwh0CYq8tJoEGNxTC8.roa (raw, json)
Hash identifier: jzdat2rdvedm3aLK7Skf/GH7Djfz23pcPCLDETqK9dY=
Subject key identifier: 39:E5:59:62:FC:5C:7A:DC:21:D0:26:2A:F2:D2:68:10:63:71:4C:2F
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A058F8C285FBE94F8D0A6E46A3E8586597
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/OeVZYvxcetwh0CYq8tJoEGNxTC8.roa
Signing time: Mon 31 Aug 2026 17:58:12 +0000
ROA not before: Mon 31 Aug 2026 17:58:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211851
IP address blocks: 37.221.76.0/24 maxlen: 24
217.18.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 10:51:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:f8:c2:85:fb:e9:4f:8d:0a:6e:46:a3:e8:58:65:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 31 17:58:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39e55962fc5c7adc21d0262af2d2681063714c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e6:3a:fc:6a:3f:18:f2:b9:5b:6e:40:d7:57:
6b:b9:0e:32:ba:74:46:3e:e9:ae:6a:c7:77:77:c3:
e2:26:e4:83:cc:fb:ba:01:e9:3a:11:f9:ec:ed:d7:
a1:bf:06:8c:4f:49:ad:72:aa:d3:9e:d7:0a:80:38:
2f:7e:37:53:37:41:50:85:80:4e:69:18:60:f8:db:
37:11:7b:56:9c:74:d8:61:41:63:b3:75:9e:a6:12:
52:0a:c8:5c:f9:7a:88:39:e0:3a:a7:58:f7:de:2e:
7c:97:47:00:e3:bb:22:7a:a1:0f:bd:f6:d5:6f:c7:
71:04:d5:05:c0:d0:05:58:5d:d8:ae:14:b2:06:0d:
cf:c5:11:2d:49:59:dc:97:8c:f9:62:eb:a3:98:16:
77:7e:e4:e1:0d:25:23:8f:27:bc:ec:e1:e9:46:df:
b5:8f:08:3c:b0:19:01:f5:0e:21:25:bf:4b:5d:36:
97:4c:67:da:24:1e:2f:6d:8a:7d:14:a7:ff:85:61:
c7:aa:a6:ca:ce:bd:38:54:ca:11:d6:da:56:56:69:
e9:d9:a0:c4:72:22:52:aa:e0:54:e1:3f:bf:df:e1:
5f:64:e1:65:dc:a0:98:dc:46:54:44:58:73:3f:f3:
9b:df:68:8b:18:6a:e8:c9:36:68:a0:9a:c1:2f:7f:
e8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E5:59:62:FC:5C:7A:DC:21:D0:26:2A:F2:D2:68:10:63:71:4C:2F
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/OeVZYvxcetwh0CYq8tJoEGNxTC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.76.0/24
217.18.209.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:4d:04:88:8e:b4:11:49:1f:c7:a0:ed:fd:4e:06:97:b8:8f:
da:31:2d:1c:9b:ef:1b:1b:71:e2:5a:4d:5f:46:ad:40:c2:b1:
03:8d:35:ed:0f:09:5e:9e:6b:69:5d:9f:8b:63:e8:42:e7:68:
74:62:b4:72:3d:6a:a4:d5:2f:6e:41:80:34:75:48:b5:4f:46:
f8:f3:c9:ff:47:66:78:c1:c9:3d:80:16:ef:3c:e6:a9:0c:28:
a7:e2:a8:72:ab:db:ae:d2:49:aa:97:a2:c4:00:99:6c:c6:16:
aa:a2:d0:ae:d7:9b:f2:eb:e5:b3:06:ce:93:68:c0:6e:03:93:
03:75:08:de:fc:1d:dd:6d:cb:aa:3b:2b:b2:39:38:d8:a2:68:
7a:71:a9:bb:0f:a9:d4:f6:19:cb:ed:59:43:93:1d:ef:b6:37:
4b:d2:6c:6e:5c:d3:76:17:81:a9:c0:40:a7:42:b8:9b:ff:d7:
25:15:59:19:e1:c7:f4:b6:23:47:46:29:c0:d8:e3:af:11:9c:
83:50:d6:6f:fa:de:fb:c7:87:32:c0:30:23:cd:83:c9:80:fa:
73:ba:ac:53:08:e1:49:11:18:56:4c:a1:8a:07:7d:cd:78:5f:
3c:bc:2e:0b:a4:39:eb:19:ea:c9:d2:5b:e3:e6:c2:8e:66:a9:
97:56:40:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:09:27 2026 by rpki-client