Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/OjUriyX22SftvbuImRgRsgq800I.roa
File: OjUriyX22SftvbuImRgRsgq800I.roa (raw, json)
Hash identifier: FZUR12pl5mPO1tU55PwRpuebEaECFWzXN6MydVjjchA=
Subject key identifier: 3A:35:2B:8B:25:F6:D9:27:ED:BD:BB:88:99:18:11:B2:0A:BC:D3:42
Certificate issuer: /CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Certificate serial: 019F746885C241043A57CB502CAAE69F0993
Authority key identifier: D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/OjUriyX22SftvbuImRgRsgq800I.roa
Signing time: Sat 18 Jul 2026 08:47:14 +0000
ROA not before: Sat 18 Jul 2026 08:47:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205960
IP address blocks: 2.59.152.0/22 maxlen: 22
2.59.152.0/24 maxlen: 24
2.59.153.0/24 maxlen: 24
2.59.154.0/24 maxlen: 24
45.91.224.0/22 maxlen: 22
45.91.225.0/24 maxlen: 24
45.91.226.0/24 maxlen: 24
45.91.227.0/24 maxlen: 24
45.142.152.0/22 maxlen: 22
91.204.224.0/22 maxlen: 22
91.204.224.0/24 maxlen: 24
91.204.225.0/24 maxlen: 24
91.204.226.0/24 maxlen: 24
91.204.227.0/24 maxlen: 24
185.202.100.0/22 maxlen: 22
185.202.101.0/24 maxlen: 24
185.202.103.0/24 maxlen: 24
193.239.150.0/23 maxlen: 23
193.239.150.0/24 maxlen: 24
193.239.151.0/24 maxlen: 24
193.239.154.0/23 maxlen: 23
193.239.154.0/24 maxlen: 24
194.126.202.0/24 maxlen: 24
194.126.215.0/24 maxlen: 24
194.126.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:74:68:85:c2:41:04:3a:57:cb:50:2c:aa:e6:9f:09:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Validity
Not Before: Jul 18 08:47:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a352b8b25f6d927edbdbb88991811b20abcd342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:07:26:4d:20:b9:b2:9b:7f:d8:52:77:31:a9:
f1:38:86:50:5b:6e:69:e5:a2:f3:28:25:19:5c:6d:
9b:fc:e0:cb:93:bc:7d:a7:47:9e:08:a7:91:0c:8e:
62:b7:31:9a:f3:75:7c:d8:13:15:86:87:69:d9:d4:
a3:a7:64:58:e1:6c:d0:bd:43:b6:a8:f6:f2:54:46:
c5:eb:69:d0:5f:e9:47:18:1f:eb:e9:0c:6f:42:fd:
8c:7a:2e:d5:03:40:7f:82:3d:b5:bb:7b:41:61:2c:
74:12:01:d5:5d:90:c3:7c:35:ea:1a:cc:b5:81:4d:
0e:17:b7:ac:66:af:00:20:a8:b1:a3:fe:89:5b:9d:
fe:56:72:49:b0:ec:47:be:85:d5:bd:ab:79:c0:a5:
4f:e9:17:b0:4f:47:96:8e:a4:4d:ae:30:2a:97:a8:
9f:ef:f9:a2:20:4b:13:e0:18:d1:56:b5:6c:9c:05:
c3:d2:aa:cf:54:c1:f6:9e:5e:44:de:2f:4c:70:6a:
17:fa:d0:76:56:54:79:f1:f7:d1:90:18:75:6c:10:
c1:02:f7:ee:2c:01:78:d8:ef:11:a3:a9:16:3d:1d:
c1:e4:f7:b6:a8:4f:02:b5:67:a1:b2:65:f8:ba:d9:
5a:c0:ee:26:18:71:40:68:83:a2:3e:76:a2:95:5c:
d8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:35:2B:8B:25:F6:D9:27:ED:BD:BB:88:99:18:11:B2:0A:BC:D3:42
X509v3 Authority Key Identifier:
keyid:D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/OjUriyX22SftvbuImRgRsgq800I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.152.0/22
45.91.224.0/22
45.142.152.0/22
91.204.224.0/22
185.202.100.0/22
193.239.150.0/23
193.239.154.0/23
194.126.202.0/24
194.126.215.0/24
194.126.219.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:4e:36:0b:23:a1:1f:80:88:be:eb:c3:8b:00:69:60:fe:ef:
d3:91:0e:3b:4d:e9:5b:41:5f:25:db:8a:c6:59:ff:bf:91:3a:
b4:70:3f:29:5e:5a:53:c1:ee:3e:1f:6f:cb:cb:5e:8e:22:11:
ae:d6:a0:72:10:ea:cd:ea:de:d0:f5:8a:b5:cc:be:0f:c6:b2:
e3:e7:c0:22:eb:74:cc:a8:81:2c:d6:28:8b:fa:61:d2:93:25:
cc:89:88:fa:8e:cb:ad:31:69:d7:4f:1e:da:d5:62:67:62:be:
13:b2:52:98:fb:17:70:08:5a:25:0b:45:89:5c:c2:37:b1:6d:
49:7b:24:a6:3f:70:65:71:27:59:9c:e4:06:25:84:ad:90:93:
49:f6:5a:5c:a3:6e:03:db:be:6e:5d:eb:b1:35:40:f0:bd:3a:
bf:53:d7:8f:e7:5d:a5:6b:c6:2d:ad:a7:40:29:9a:fc:5e:01:
41:b0:23:b3:e6:7d:3b:4d:f2:5f:61:ed:65:47:98:30:44:34:
3d:c4:f3:33:6e:f2:b2:97:d4:ea:8d:fe:25:e3:9a:fd:da:6f:
bf:05:00:81:fe:8d:e0:60:b3:fe:65:5c:ea:42:bf:f0:de:6b:
00:f7:9c:61:a4:c9:00:3b:82:ed:99:4f:ec:9d:ac:f0:2d:c3:
0c:83:df:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:14:33 2026 by rpki-client