Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/ofDxB8O2MbjFIXFLf88e0INSGBo.roa
File: ofDxB8O2MbjFIXFLf88e0INSGBo.roa (raw, json)
Hash identifier: ikjcPpCnHENpa86zzER4JQ6OTnpcpzdfcewDtUbt2Vg=
Subject key identifier: A1:F0:F1:07:C3:B6:31:B8:C5:21:71:4B:7F:CF:1E:D0:83:52:18:1A
Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Certificate serial: 019C4FDC23392ABF179325256B7145FCCDB8
Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/ofDxB8O2MbjFIXFLf88e0INSGBo.roa
Signing time: Thu 12 Feb 2026 03:19:12 +0000
ROA not before: Thu 12 Feb 2026 03:19:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213845
IP address blocks: 77.93.88.0/24 maxlen: 24
85.149.192.0/19 maxlen: 19
217.116.168.0/21 maxlen: 24
2a14:7dc0:100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4f:dc:23:39:2a:bf:17:93:25:25:6b:71:45:fc:cd:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Validity
Not Before: Feb 12 03:19:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1f0f107c3b631b8c521714b7fcf1ed08352181a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7e:4c:a7:39:e7:86:97:7b:b6:ed:73:f1:65:
33:50:e9:9b:4a:f7:31:f3:ee:c7:52:66:db:63:c2:
4a:63:d5:31:17:5c:ad:90:f6:d0:2f:75:5a:c1:c1:
14:64:29:53:49:9c:a9:b7:2b:4b:74:4d:d1:d6:05:
6b:f7:94:6f:ef:9c:af:9b:8a:25:00:41:13:91:ca:
91:08:0e:77:db:bf:91:f4:cf:93:99:b7:7f:a2:4a:
e8:e8:e8:60:21:36:22:48:e2:c3:74:22:3c:87:9b:
a0:ab:22:e1:44:4b:84:bd:a5:e0:e5:db:7b:db:bf:
d3:58:cf:8d:b0:66:67:86:c0:9e:9d:31:5f:96:ac:
8c:02:e6:d6:32:f2:3f:cd:0f:c7:e1:34:70:b8:df:
aa:95:0c:9e:db:05:ff:93:10:78:ca:7a:27:ec:f5:
4a:ec:76:c1:b3:b5:63:a9:7a:e8:67:d9:a7:76:a6:
bb:27:84:b3:c8:fb:56:0d:32:4c:bd:93:f1:2d:ae:
3a:5b:ed:2c:a6:49:f8:f4:73:d6:fc:35:a7:a4:f4:
c7:b2:18:ba:35:ec:51:57:dc:24:9e:53:3f:db:84:
ee:59:10:14:28:92:d5:f4:6d:c9:93:07:4a:76:56:
d4:aa:18:0a:a3:cf:43:0c:68:16:36:ae:0b:25:93:
52:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F0:F1:07:C3:B6:31:B8:C5:21:71:4B:7F:CF:1E:D0:83:52:18:1A
X509v3 Authority Key Identifier:
keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/ofDxB8O2MbjFIXFLf88e0INSGBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.88.0/24
85.149.192.0/19
217.116.168.0/21
IPv6:
2a14:7dc0:100::/40
Signature Algorithm: sha256WithRSAEncryption
00:32:e0:d9:c8:ef:f0:bc:69:4a:a8:f5:3b:35:6f:df:11:f2:
ba:9a:df:1d:65:5b:94:58:4e:cf:f2:17:c9:20:b8:dd:6e:9a:
48:7a:1e:39:69:0c:6e:a6:11:04:72:4a:85:14:6f:ad:ab:d3:
63:1c:eb:7a:ac:f0:36:28:8b:ba:4b:1c:07:c7:d3:05:12:68:
45:c4:09:a2:97:85:29:2f:66:90:94:66:e9:dd:8c:cd:00:52:
bb:01:c7:1c:f7:78:45:9b:82:69:ee:2b:4e:6c:68:d3:fb:cf:
ec:20:b2:03:8d:c1:38:7c:18:54:4c:77:e4:21:fd:0a:29:c2:
0c:ca:bb:e4:d4:c7:d6:5b:85:af:5c:ff:6e:55:75:ef:f8:9e:
80:ad:6a:28:eb:74:e3:f9:26:fa:f1:aa:b5:46:8b:c2:96:07:
8a:b6:8f:12:e3:67:86:7a:7f:15:11:7a:04:f9:0b:4a:bd:7c:
f6:1b:18:a5:5d:88:23:96:84:24:e8:f8:b6:21:53:aa:5e:46:
42:24:c7:7b:d8:5c:23:32:c3:59:3e:ee:53:00:52:bc:ed:08:
5b:22:c4:33:16:5f:87:9e:d7:d9:ff:da:69:ee:1b:bc:f5:60:
b3:3b:2c:b6:08:f9:b9:0b:e5:e3:ba:f2:a6:af:5b:d2:3a:6e:
9e:dc:40:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:42:00 2026 by rpki-client