Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/lOX7DxD4BIsjrepLCn7TEpBwy8Q.roa
File: lOX7DxD4BIsjrepLCn7TEpBwy8Q.roa (raw, json)
Hash identifier: APaTm2hKFk0pAq1dfEFXq6pqn9oCGARR4Rr0ByPJzoA=
Subject key identifier: 94:E5:FB:0F:10:F8:04:8B:23:AD:EA:4B:0A:7E:D3:12:90:70:CB:C4
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019D723097DED7091B2B41F9B017A7D6DFCE
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/lOX7DxD4BIsjrepLCn7TEpBwy8Q.roa
Signing time: Thu 09 Apr 2026 12:21:20 +0000
ROA not before: Thu 09 Apr 2026 12:21:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204427
IP address blocks: 186.246.16.0/24 maxlen: 24
186.246.17.0/24 maxlen: 24
186.246.18.0/24 maxlen: 24
186.246.19.0/24 maxlen: 24
186.246.20.0/24 maxlen: 24
186.246.21.0/24 maxlen: 24
186.246.22.0/24 maxlen: 24
186.246.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:30:97:de:d7:09:1b:2b:41:f9:b0:17:a7:d6:df:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 9 12:21:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=94e5fb0f10f8048b23adea4b0a7ed3129070cbc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:8b:ea:8e:8d:65:12:d2:b3:91:fa:ab:65:82:
cb:53:2e:11:a7:16:c2:40:98:39:63:94:de:b6:4f:
6e:b1:2d:67:15:6c:d9:7a:76:c3:6b:cf:ed:fc:7a:
eb:ed:1b:41:e2:3c:f6:97:3b:ab:26:32:c1:56:89:
2b:5d:68:b6:65:cf:45:cc:ed:be:71:33:dd:dd:3f:
61:55:b1:dc:11:9c:4c:cd:a7:22:4e:40:14:34:64:
5b:b3:d1:cd:50:7b:92:97:86:b4:1a:6a:32:73:bc:
ef:8e:7d:87:ca:9d:25:96:2d:60:0b:f3:e5:21:24:
27:a7:f1:5c:12:16:e6:cc:13:fe:dd:83:8c:d9:88:
db:90:d3:c1:ec:b2:91:88:3d:03:44:29:e7:fe:e5:
6a:ca:29:ec:d2:06:e6:4a:28:2c:3e:47:5f:e2:37:
f4:30:9d:10:24:0e:0a:1f:39:90:71:19:b8:05:d8:
41:f1:79:83:a1:28:9f:9c:f9:66:2f:07:f9:99:ea:
58:8b:28:a1:03:14:6b:cd:f4:56:ce:f3:14:6c:36:
7b:f2:ba:42:0d:c9:68:ad:26:bb:38:9e:23:75:4f:
c3:44:3a:63:a1:c8:97:d2:70:6d:20:32:3f:25:91:
78:fb:89:c7:d2:46:ad:f2:1c:7a:3e:e5:4f:bb:93:
2e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E5:FB:0F:10:F8:04:8B:23:AD:EA:4B:0A:7E:D3:12:90:70:CB:C4
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/lOX7DxD4BIsjrepLCn7TEpBwy8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.246.16.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:3c:2e:69:a2:26:6d:d0:bf:64:14:59:33:b9:6a:98:15:28:
bf:3d:b7:9a:00:c5:d6:bc:f1:bb:98:2d:cb:ef:81:c4:52:2b:
93:41:aa:75:73:a9:f0:ed:cf:7e:18:26:97:50:89:cc:0c:79:
08:d3:cf:ce:33:cb:6f:da:06:42:51:e4:07:49:06:9b:91:c1:
76:3b:71:6e:7c:a0:c7:37:94:77:cb:63:34:73:fb:ab:19:86:
5e:e5:13:10:a5:8d:06:b0:da:cb:12:3c:db:45:aa:b9:a1:ca:
3f:0f:e8:9d:2f:56:e9:10:46:1c:32:cf:6c:41:5e:3c:c9:bb:
26:05:dc:2f:fa:4d:24:8a:a9:de:24:33:8a:20:07:3d:2a:ee:
32:8a:fe:ac:79:d7:ea:c4:17:3b:94:66:ad:5c:1d:27:17:95:
0e:06:83:b1:01:96:90:ec:87:48:db:ad:da:c7:96:a6:e6:49:
3f:f1:e3:01:7a:46:06:fe:61:c3:e1:ff:f2:61:d3:fb:27:21:
94:4e:48:3a:d8:d6:a1:a4:75:97:59:95:95:24:c7:50:f3:4d:
7c:07:ad:ed:82:bf:d0:b6:26:15:ef:30:db:6f:99:70:ca:3a:
1d:d3:58:ac:55:df:ed:a3:b0:bd:b4:35:b2:63:a0:d9:4e:49:
74:76:cb:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:14:35 2026 by rpki-client