Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/OawgqQGPtlwEMOxGkAtl6L82H4Q.roa
File: OawgqQGPtlwEMOxGkAtl6L82H4Q.roa (raw, json)
Hash identifier: K2gpWslD9/HiQy1xYHGfxNVNM4NYrBOnVdVEvGdhuWM=
Subject key identifier: 39:AC:20:A9:01:8F:B6:5C:04:30:EC:46:90:0B:65:E8:BF:36:1F:84
Certificate issuer: /CN=a7967d76c2d46720d4cfac0459fa3c3d22005044
Certificate serial: 019B7B36A2CC2E9856AD8268F0C6531BC3B4
Authority key identifier: A7:96:7D:76:C2:D4:67:20:D4:CF:AC:04:59:FA:3C:3D:22:00:50:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/OawgqQGPtlwEMOxGkAtl6L82H4Q.roa
Signing time: Thu 01 Jan 2026 20:18:56 +0000
ROA not before: Thu 01 Jan 2026 20:18:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39422
IP address blocks: 176.108.232.0/21 maxlen: 21
176.108.232.0/22 maxlen: 22
176.108.232.0/23 maxlen: 23
176.108.232.0/24 maxlen: 24
176.108.233.0/24 maxlen: 24
176.108.234.0/24 maxlen: 24
176.108.235.0/24 maxlen: 24
176.108.236.0/22 maxlen: 22
176.108.236.0/24 maxlen: 24
176.108.237.0/24 maxlen: 24
176.108.238.0/23 maxlen: 23
176.108.238.0/24 maxlen: 24
176.108.239.0/24 maxlen: 24
195.182.202.0/23 maxlen: 23
195.182.202.0/24 maxlen: 24
195.182.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:a2:cc:2e:98:56:ad:82:68:f0:c6:53:1b:c3:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7967d76c2d46720d4cfac0459fa3c3d22005044
Validity
Not Before: Jan 1 20:18:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39ac20a9018fb65c0430ec46900b65e8bf361f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e2:49:05:4d:4b:00:37:bd:57:73:0e:80:60:
ef:3b:e4:e9:b8:5b:b7:eb:a4:87:2e:6a:01:9b:e5:
e7:f1:48:9a:ab:7f:9f:9d:20:6c:2b:d2:58:60:b7:
a1:22:b6:dd:cf:b5:8e:41:fe:8a:a6:2d:89:86:c1:
1a:41:1b:e9:01:de:68:91:b4:9f:7b:56:37:4d:03:
b3:a6:9b:f0:b7:af:f3:53:47:15:d3:ed:76:d2:89:
5a:3c:f1:23:f8:48:14:3a:13:ac:6e:92:c0:6d:49:
1b:5f:4b:6d:5c:29:66:17:97:14:0c:a6:ed:aa:4d:
f4:e3:1c:ef:48:8e:ec:41:86:d4:0e:45:31:d1:63:
29:f0:c7:f3:e0:12:96:c2:24:69:5d:aa:01:3a:bc:
ac:42:89:62:a4:71:a8:41:7d:de:31:a3:96:08:6a:
11:c6:52:6d:f3:60:6d:ba:44:e1:45:01:46:79:8f:
08:d0:be:df:49:48:2f:eb:c1:ee:ad:52:17:93:fa:
b6:7e:05:1d:ae:a6:7a:a6:d2:26:ef:67:c8:07:d8:
a0:02:86:00:6e:54:6b:77:17:ff:92:c2:20:a5:40:
39:ea:e5:a9:05:2a:2a:af:9f:5c:a5:76:35:26:cf:
9f:1a:c2:e9:f7:82:0a:3a:9e:b4:7c:d4:f3:b9:5a:
ff:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:AC:20:A9:01:8F:B6:5C:04:30:EC:46:90:0B:65:E8:BF:36:1F:84
X509v3 Authority Key Identifier:
keyid:A7:96:7D:76:C2:D4:67:20:D4:CF:AC:04:59:FA:3C:3D:22:00:50:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/OawgqQGPtlwEMOxGkAtl6L82H4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.108.232.0/21
195.182.202.0/23
Signature Algorithm: sha256WithRSAEncryption
d8:51:e0:f4:45:d2:32:9f:a3:bd:ca:55:98:01:cc:1c:6e:a4:
47:6a:c3:bb:b9:a9:48:df:98:3f:92:ce:ea:51:71:5d:6c:6b:
46:db:16:07:f0:ef:da:52:51:79:79:bd:7d:09:11:49:ce:0f:
57:a2:69:5a:0d:b5:0a:4c:14:b9:f8:3e:1f:43:21:45:ff:19:
6f:9f:24:0e:61:06:8c:a8:93:7c:fd:32:75:b7:dc:76:1e:21:
66:9c:f3:0c:47:f1:b0:c6:6d:c9:b6:0f:71:ce:6a:71:74:07:
14:40:1d:8d:f9:20:5d:b2:22:5e:52:45:96:6a:28:2d:1d:56:
9e:08:41:c9:19:c9:43:dd:c3:f9:c2:e3:fd:53:fd:6c:31:86:
fb:a7:ce:3c:4e:3c:2e:95:42:e1:3e:d4:2c:6b:a8:be:8f:ed:
ff:01:f2:bb:61:40:0e:d8:20:11:3e:5e:f5:57:86:1c:bf:62:
01:62:a6:6e:1e:60:73:d9:93:da:ba:89:ae:b4:aa:35:e0:a1:
91:b6:26:5d:2c:77:b1:5f:43:d4:03:79:81:dd:79:b3:49:7d:
3e:b7:b4:d7:49:f3:e6:ed:45:4d:ce:89:e9:dd:0f:aa:30:aa:
2d:4b:11:94:cc:ba:a9:f2:0b:ad:45:ef:d7:81:97:90:df:f1:
12:09:bb:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:25:37 2026 by rpki-client