Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/oh4C7e-638Tw0QaXpeyoQkwYqZg.roa
File: oh4C7e-638Tw0QaXpeyoQkwYqZg.roa (raw, json)
Hash identifier: cG5vcY2OrC118ZNu5ZaI+gwBoA+T4dgW1oxkIZVE3h4=
Subject key identifier: A2:1E:02:ED:EF:BA:DF:C4:F0:D1:06:97:A5:EC:A8:42:4C:18:A9:98
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 019D29596C8F2BF1E8546443A72CAF5DFC0A
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/oh4C7e-638Tw0QaXpeyoQkwYqZg.roa
Signing time: Thu 26 Mar 2026 08:53:39 +0000
ROA not before: Thu 26 Mar 2026 08:53:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215553
IP address blocks: 188.93.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:59:6c:8f:2b:f1:e8:54:64:43:a7:2c:af:5d:fc:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Mar 26 08:53:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a21e02edefbadfc4f0d10697a5eca8424c18a998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d8:a1:5a:6d:67:91:6a:89:1e:0f:1f:8f:a9:
56:84:75:9a:4f:ac:22:56:8d:96:8e:10:a2:0e:b5:
b2:91:e6:78:da:c0:e9:ee:a9:31:3a:15:15:6d:fe:
f1:a9:8d:8a:3e:f6:8a:d7:7a:31:4e:02:be:5c:ee:
9a:37:a7:46:a7:3e:b9:3c:eb:b2:57:84:6c:24:89:
9a:db:9e:2b:53:28:1e:68:07:37:27:5f:47:21:1a:
3f:1f:15:a8:6f:d3:74:69:3e:53:db:2c:48:f4:42:
52:5f:18:1c:b2:1d:01:a1:5f:c0:cc:48:71:43:e6:
e3:10:b7:fc:3f:06:81:3d:68:9d:1c:37:75:01:ce:
85:e4:d7:67:ef:5f:29:12:e9:f3:43:40:23:4d:29:
3b:a4:d1:a8:ca:e1:83:14:35:76:af:cb:f5:8f:f8:
fa:c7:83:81:19:a3:0f:0e:b5:50:07:88:e7:ff:c2:
73:ba:bb:cb:6f:47:52:85:54:b4:20:78:e4:bf:a1:
5a:f9:0e:c7:c0:24:f8:2e:a6:ca:23:b1:3d:fd:b5:
a9:e4:54:38:93:27:7d:27:2c:92:41:c5:74:e0:66:
89:91:c2:cb:a8:2c:55:e5:d6:7b:c8:b6:26:c2:d9:
0f:42:af:f0:1a:05:87:02:5b:a1:83:3b:24:45:8e:
8f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1E:02:ED:EF:BA:DF:C4:F0:D1:06:97:A5:EC:A8:42:4C:18:A9:98
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/oh4C7e-638Tw0QaXpeyoQkwYqZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.116.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:07:a1:87:61:98:51:61:92:c0:10:45:7a:84:2d:a8:00:2a:
53:d1:97:0a:ec:05:52:ee:c1:1d:bd:fb:9c:df:2c:8b:dd:41:
98:c7:76:39:77:4a:4b:8a:ac:e2:ae:c3:11:df:f6:17:a1:b1:
43:b3:3d:19:56:ee:eb:f1:d0:bb:bf:7f:37:c8:dc:1b:80:bd:
40:4a:38:d4:9a:76:12:33:b0:62:c8:ba:5b:69:d5:c0:1b:d8:
73:88:10:6a:a0:1c:35:66:04:1d:f5:b8:c8:7d:cd:59:90:a8:
d8:49:18:62:a2:31:5b:db:a4:03:48:9f:42:e5:51:e8:09:75:
67:7f:03:39:34:e5:b9:89:f6:57:b2:13:f8:33:4e:8b:53:ab:
27:49:81:ce:6c:26:57:15:70:68:8e:dd:09:3f:ad:6f:e2:c3:
18:ee:43:b7:81:bc:d1:bc:cd:b4:99:18:f6:b5:e6:d9:8a:fb:
5d:4c:c7:77:33:38:82:66:bc:e5:56:e0:0e:8c:7e:9f:76:bf:
e9:71:9f:f0:e9:6d:32:43:08:d8:f9:ae:f3:5b:d5:e9:41:80:
18:f9:1c:07:79:d1:79:59:e4:67:12:04:07:41:41:9e:b1:39:
17:ba:73:b8:90:c5:36:f4:8c:0e:a3:ac:f1:04:45:9c:39:4b:
69:aa:cf:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:55:01 2026 by rpki-client