Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/oCylTxdWStUJKd43isiQRqgUx2I.roa
File: oCylTxdWStUJKd43isiQRqgUx2I.roa (raw, json)
Hash identifier: BA+lkIFGOjmKiy8Zq7wyWqkb5r7mqiejaQ24ZYtS4FQ=
Subject key identifier: A0:2C:A5:4F:17:56:4A:D5:09:29:DE:37:8A:C8:90:46:A8:14:C7:62
Certificate issuer: /CN=0dc9c1b717156a18a34d9323b67a0a03eda85ac9
Certificate serial: 019B7EA70E59934A0D21D67782DB252810B9
Authority key identifier: 0D:C9:C1:B7:17:15:6A:18:A3:4D:93:23:B6:7A:0A:03:ED:A8:5A:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/oCylTxdWStUJKd43isiQRqgUx2I.roa
Signing time: Fri 02 Jan 2026 12:20:35 +0000
ROA not before: Fri 02 Jan 2026 12:20:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199849
IP address blocks: 185.44.112.0/24 maxlen: 24
185.44.113.0/24 maxlen: 24
185.44.114.0/24 maxlen: 24
185.44.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a7:0e:59:93:4a:0d:21:d6:77:82:db:25:28:10:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc9c1b717156a18a34d9323b67a0a03eda85ac9
Validity
Not Before: Jan 2 12:20:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a02ca54f17564ad50929de378ac89046a814c762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:75:f6:8d:68:ff:45:80:8e:34:e4:48:e7:52:
7e:f6:27:fe:7c:c6:ae:0b:d4:f2:79:df:a6:9a:7e:
44:dd:65:01:d5:b5:c1:b2:88:bd:e1:bc:86:3b:85:
37:12:38:0b:c4:5e:3d:d2:f2:6a:cd:7d:75:4e:4b:
51:c3:10:74:b4:d0:51:e7:64:33:fe:35:d6:01:ac:
ab:46:f9:b0:31:08:99:35:21:e2:2d:27:88:72:55:
bb:79:7f:b3:92:c0:a1:84:10:e7:bd:20:2f:d3:ea:
45:93:42:81:d9:f3:5c:b0:99:7f:36:20:46:93:93:
e9:d0:48:69:d3:76:4d:7d:39:4e:3c:d7:bc:bc:a4:
0e:74:b3:ed:0e:e0:86:bf:c2:4f:46:da:f6:19:cf:
49:e9:e7:0c:8c:5f:a6:65:3f:5a:1d:d0:38:6b:02:
27:73:74:97:63:ae:33:91:b4:e7:c6:d9:6b:9f:f7:
04:b0:a4:90:9c:57:30:26:a4:56:8f:09:23:fa:b7:
48:22:69:7b:db:95:e0:94:42:a0:f8:bc:b9:33:46:
76:e5:57:6d:6b:a5:bc:ec:a9:b2:98:cf:77:49:53:
e1:be:84:75:d4:9f:4e:23:9a:55:c9:a9:a2:42:be:
1c:fe:08:82:42:c1:ca:f4:d6:bc:98:b5:5b:cc:cf:
3f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2C:A5:4F:17:56:4A:D5:09:29:DE:37:8A:C8:90:46:A8:14:C7:62
X509v3 Authority Key Identifier:
keyid:0D:C9:C1:B7:17:15:6A:18:A3:4D:93:23:B6:7A:0A:03:ED:A8:5A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/oCylTxdWStUJKd43isiQRqgUx2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.112.0/22
Signature Algorithm: sha256WithRSAEncryption
52:11:74:7e:a9:fc:9a:23:8e:50:2d:5d:d7:8a:cb:38:7d:e2:
ca:63:d2:2d:d3:11:17:c3:fb:72:c6:ab:40:f5:cc:aa:e9:e7:
27:f9:d1:36:8a:ef:1c:46:7e:18:a6:37:12:a1:16:cd:3f:d2:
3e:2d:6c:62:05:13:81:c6:a3:c1:ab:58:cc:1d:76:eb:a6:91:
db:a2:47:da:65:c9:c5:9b:73:25:c5:d7:21:f0:25:ac:2e:d0:
46:49:31:d3:aa:68:ef:d6:ca:59:bd:81:86:05:7e:49:12:76:
8d:fd:c8:35:01:a3:19:3e:f7:6e:9c:c6:ff:08:97:55:62:bd:
c0:ae:86:d4:61:5b:1c:c2:4f:fb:bb:d8:0b:d1:b6:08:fe:17:
f7:16:46:62:28:0e:e9:4e:6b:5c:9c:a2:5d:9f:e5:b2:3e:8b:
27:71:ca:f3:2e:89:00:ab:e6:d5:e2:9f:28:c1:c5:ad:7a:7a:
f9:dd:d8:30:32:36:7a:88:34:6d:e4:33:5d:3b:3e:b8:d2:ed:
88:c4:01:10:93:c5:a1:80:ba:de:bc:0b:8d:23:aa:2f:41:92:
ad:5f:f3:8b:ac:57:68:f7:04:cd:ca:ad:6c:51:a1:dd:a8:44:
83:53:c8:ee:cc:18:1c:43:1c:f2:0d:db:03:ca:9e:9b:91:d5:
ee:8b:1b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:32:03 2026 by rpki-client