Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/OkDA-sLt6JCHJowKNNbNuk9CEaY.roa
File: OkDA-sLt6JCHJowKNNbNuk9CEaY.roa (raw, json)
Hash identifier: csJFyVuIzmk2gkco0qEU1yoNo7oW/435ugb+eBY0bLw=
Subject key identifier: 3A:40:C0:FA:C2:ED:E8:90:87:26:8C:0A:34:D6:CD:BA:4F:42:11:A6
Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
Certificate serial: 01A19AA1515ACABFF4B72F4BFEA282DE7B22
Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/OkDA-sLt6JCHJowKNNbNuk9CEaY.roa
Signing time: Mon 02 Nov 2026 05:00:25 +0000
ROA not before: Mon 02 Nov 2026 05:00:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202958
IP address blocks: 37.140.243.0/24 maxlen: 24
46.226.123.0/24 maxlen: 24
77.246.247.0/24 maxlen: 24
83.141.104.0/24 maxlen: 24
83.141.105.0/24 maxlen: 24
83.141.106.0/24 maxlen: 24
83.141.107.0/24 maxlen: 24
83.141.108.0/24 maxlen: 24
83.141.109.0/24 maxlen: 24
83.141.110.0/24 maxlen: 24
83.141.111.0/24 maxlen: 24
86.107.198.0/24 maxlen: 24
86.107.199.0/24 maxlen: 24
89.126.200.0/24 maxlen: 24
89.126.201.0/24 maxlen: 24
89.126.202.0/24 maxlen: 24
89.126.203.0/24 maxlen: 24
89.126.204.0/24 maxlen: 24
89.126.205.0/24 maxlen: 24
89.126.206.0/24 maxlen: 24
89.126.207.0/24 maxlen: 24
89.207.248.0/24 maxlen: 24
89.207.249.0/24 maxlen: 24
89.207.250.0/24 maxlen: 24
89.207.251.0/24 maxlen: 24
89.207.252.0/24 maxlen: 24
89.207.253.0/24 maxlen: 24
89.207.254.0/24 maxlen: 24
89.207.255.0/24 maxlen: 24
91.243.71.0/24 maxlen: 24
93.115.14.0/24 maxlen: 24
185.98.4.0/24 maxlen: 24
185.100.66.0/24 maxlen: 24
185.113.133.0/24 maxlen: 24
185.116.192.0/24 maxlen: 24
185.116.193.0/24 maxlen: 24
185.116.194.0/24 maxlen: 24
185.116.195.0/24 maxlen: 24
185.121.80.0/24 maxlen: 24
185.121.81.0/24 maxlen: 24
185.121.82.0/24 maxlen: 24
185.121.83.0/24 maxlen: 24
185.125.88.0/24 maxlen: 24
185.125.89.0/24 maxlen: 24
185.125.90.0/24 maxlen: 24
185.125.91.0/24 maxlen: 24
185.249.194.0/24 maxlen: 24
185.249.195.0/24 maxlen: 24
188.244.115.0/24 maxlen: 24
194.4.56.0/24 maxlen: 24
194.4.57.0/24 maxlen: 24
194.4.58.0/24 maxlen: 24
194.4.59.0/24 maxlen: 24
194.146.40.0/24 maxlen: 24
194.146.41.0/24 maxlen: 24
194.146.42.0/24 maxlen: 24
194.146.43.0/24 maxlen: 24
213.109.146.0/24 maxlen: 24
2a06:941::/48 maxlen: 48
2a06:941:1::/48 maxlen: 48
2a06:941:2::/48 maxlen: 48
2a06:941:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 08:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9a:a1:51:5a:ca:bf:f4:b7:2f:4b:fe:a2:82:de:7b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
Validity
Not Before: Nov 2 05:00:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a40c0fac2ede89087268c0a34d6cdba4f4211a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:29:fc:ce:85:d9:44:bd:11:7a:e8:dc:c8:2b:
8d:38:05:01:66:70:d7:cb:28:2c:15:f6:fc:75:9b:
ad:83:46:46:46:f2:84:5b:c3:81:95:55:d2:6b:55:
2d:a3:8c:91:bb:19:36:36:33:c0:4a:1b:c9:53:04:
aa:bf:76:c7:f2:7a:ce:5f:c7:81:59:d1:9a:05:ba:
1c:6f:b6:11:80:26:e0:5a:10:4b:2d:d4:93:27:b8:
e3:19:5b:85:5f:75:5d:01:83:19:4d:bc:f3:a9:30:
79:7f:7d:e3:69:c7:17:64:4f:71:76:75:96:5b:e8:
c2:1f:1e:37:20:3a:d2:9c:28:2a:2c:f5:46:77:b2:
c3:fe:fe:47:7f:79:ca:9d:34:02:22:31:3c:c8:b2:
01:c1:46:28:ec:cb:31:d3:2e:4d:e3:31:6f:c0:81:
3b:b5:9b:03:1d:77:7c:4f:0e:02:4c:89:a6:6a:0c:
34:1b:70:7f:98:60:aa:f7:f1:94:6b:34:a2:65:ac:
ea:9f:6b:99:a2:46:60:a1:df:53:e1:a5:87:e5:ed:
85:23:c6:d5:7f:68:ae:41:99:2a:af:b7:dd:6f:cc:
cb:b7:e3:65:0b:0e:d9:05:e7:54:c5:19:22:36:fd:
f1:d3:14:3b:dc:f9:51:61:1e:be:e6:8f:e3:f1:00:
6a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:40:C0:FA:C2:ED:E8:90:87:26:8C:0A:34:D6:CD:BA:4F:42:11:A6
X509v3 Authority Key Identifier:
keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/OkDA-sLt6JCHJowKNNbNuk9CEaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.243.0/24
46.226.123.0/24
77.246.247.0/24
83.141.104.0/21
86.107.198.0/23
89.126.200.0/21
89.207.248.0/21
91.243.71.0/24
93.115.14.0/24
185.98.4.0/24
185.100.66.0/24
185.113.133.0/24
185.116.192.0/22
185.121.80.0/22
185.125.88.0/22
185.249.194.0/23
188.244.115.0/24
194.4.56.0/22
194.146.40.0/22
213.109.146.0/24
IPv6:
2a06:941::/46
Signature Algorithm: sha256WithRSAEncryption
11:6c:99:9a:f0:c8:37:fb:46:7f:7d:f2:1d:8a:b1:f4:68:a2:
9a:12:fc:08:a4:e4:1a:3a:75:0b:4b:e9:00:68:1e:38:10:d1:
d3:f2:3c:4a:49:e9:51:86:6a:45:cc:07:13:a9:28:9b:47:79:
e5:dc:2a:b2:8d:2f:27:88:70:0d:d1:f5:0a:d7:6b:f2:9a:7c:
86:2f:39:29:29:5b:0b:ff:33:34:50:17:21:2a:19:5d:55:c7:
31:8d:e4:74:6e:f9:16:43:d9:93:53:7b:49:7f:ee:b4:0d:38:
ee:bf:53:cd:be:07:ab:dc:b4:29:f5:3e:ec:87:82:e9:c1:8c:
b9:6b:71:31:57:da:76:31:05:5c:11:8c:e9:50:7d:63:71:f3:
6b:2e:cd:14:5f:f6:0d:fb:e0:69:08:eb:3b:41:12:b5:fc:40:
62:7c:ad:da:77:d1:a4:6d:aa:eb:80:66:40:d9:93:b3:b1:66:
26:7e:3e:02:89:62:10:35:bf:0d:ce:f2:fb:ee:54:63:9a:32:
cb:29:8a:7f:f5:ac:08:c7:27:68:32:69:b7:4e:dd:62:d6:b4:
a0:f0:e4:64:27:0a:bb:62:7b:2e:72:b9:1b:1c:e2:ad:f1:5f:
67:b2:3b:1d:1e:ef:a8:99:32:60:4d:d1:36:db:fa:a6:59:10:
6a:0c:16:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:38:20 2026 by rpki-client