Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/kOUP-I0gbOm2OllpPuyxonaxwa0.roa
File: kOUP-I0gbOm2OllpPuyxonaxwa0.roa (raw, json)
Hash identifier: 0C2lKEypExeToYXF5+sFR01LB4G/cE8hXlgy99P0dwA=
Subject key identifier: 90:E5:0F:F8:8D:20:6C:E9:B6:3A:59:69:3E:EC:B1:A2:76:B1:C1:AD
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F64CCB0CFBE937C71E1CE6342050708B2
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/kOUP-I0gbOm2OllpPuyxonaxwa0.roa
Signing time: Wed 15 Jul 2026 08:02:43 +0000
ROA not before: Wed 15 Jul 2026 08:02:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8300
IP address blocks: 193.5.20.0/23 maxlen: 23
193.5.21.0/24 maxlen: 24
193.5.30.0/24 maxlen: 24
193.5.158.0/23 maxlen: 24
193.134.248.0/23 maxlen: 23
194.209.74.0/24 maxlen: 24
194.209.218.0/24 maxlen: 24
212.243.101.0/24 maxlen: 24
2001:918:1ab::/48 maxlen: 48
2001:918:f00::/40 maxlen: 40
2001:918:ff70::/44 maxlen: 48
2001:918:ffb7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:64:cc:b0:cf:be:93:7c:71:e1:ce:63:42:05:07:08:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 15 08:02:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90e50ff88d206ce9b63a59693eecb1a276b1c1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:90:50:8c:ce:d7:47:9c:9c:5d:38:de:06:79:
15:c1:54:29:da:11:96:35:b2:38:da:6b:15:50:2c:
53:9c:cf:c0:06:e2:6e:7a:49:f1:94:3d:fd:fe:ea:
74:1e:bf:41:36:94:13:cc:bc:76:08:6f:eb:8c:05:
b4:97:02:1e:0a:91:4a:a8:8e:29:43:ad:49:31:09:
6a:40:10:1c:a6:9e:90:c3:ad:de:12:31:cb:5e:62:
73:94:37:1e:46:44:58:64:87:9b:cd:55:95:81:4f:
51:bf:0a:ae:04:c6:6b:97:f2:af:f5:8a:6e:e6:dd:
7e:4b:dd:c9:e7:e1:95:cd:d6:70:5e:4c:75:43:11:
37:76:7d:1d:b7:54:97:2d:c4:8d:6e:aa:d4:16:cb:
b7:6c:5a:8e:3b:c7:b5:e4:b3:9b:98:97:f1:7b:ed:
74:ab:a4:c5:8e:2f:b3:6d:6b:02:96:57:38:2d:bd:
19:0e:d2:42:fb:f8:ca:cc:01:0a:12:f5:3d:d5:6c:
e2:1c:28:5d:dc:f7:2a:66:2f:6c:e4:eb:33:c0:39:
51:65:e0:4e:09:e0:d8:09:aa:5a:03:5e:93:de:ab:
9e:b9:88:42:e0:e7:9d:86:e9:75:15:e0:05:41:f6:
cf:a3:e5:de:30:92:e1:3a:76:be:55:92:a5:4c:2f:
ef:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E5:0F:F8:8D:20:6C:E9:B6:3A:59:69:3E:EC:B1:A2:76:B1:C1:AD
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/kOUP-I0gbOm2OllpPuyxonaxwa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.20.0/23
193.5.30.0/24
193.5.158.0/23
193.134.248.0/23
194.209.74.0/24
194.209.218.0/24
212.243.101.0/24
IPv6:
2001:918:1ab::/48
2001:918:f00::/40
2001:918:ff70::/44
2001:918:ffb7::/48
Signature Algorithm: sha256WithRSAEncryption
27:f8:61:77:ef:ad:e7:fc:9a:5f:ac:16:35:b1:5e:02:49:d2:
af:80:c4:d5:1d:70:23:71:3b:72:0d:a7:93:64:b1:a2:8a:f8:
74:61:d6:85:75:5d:9b:73:45:b3:58:81:b8:68:60:e8:d2:a0:
16:d2:01:0e:1f:0c:a4:5e:2d:03:fe:b7:91:65:b6:3c:47:41:
ec:32:f7:32:b1:ac:22:83:87:89:ae:b8:71:d0:a6:01:f6:2d:
87:f1:ab:cd:6c:51:d9:5d:2c:f8:67:57:f2:dd:78:27:9d:87:
03:eb:a9:c4:43:3e:eb:7f:51:67:40:2f:35:5c:d5:49:3b:20:
76:4d:8c:4c:54:6c:c0:cd:3d:fe:d8:f4:82:d3:9c:fc:bd:14:
cf:04:83:70:f9:ed:61:36:77:03:e0:ad:dc:4a:01:99:a1:82:
dc:33:9e:ba:21:3c:ce:0a:c7:d1:4f:ef:b8:1d:e0:e5:bb:d8:
ed:ca:ce:2d:16:fa:55:7e:59:8a:44:50:0a:01:63:c2:1a:61:
c5:30:c5:39:9c:62:f6:13:6b:5a:1f:e5:48:e1:32:fb:04:bd:
ad:17:d5:1e:b3:c8:37:f7:ee:5e:17:3b:5d:3b:b3:fc:50:f4:
59:30:69:8c:01:b0:35:56:ff:6d:a1:20:67:13:bf:bd:ca:ac:
85:6f:e9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:53 2026 by rpki-client