Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/oIqKcxOokaG7WLipzK-1DLv_MRA.roa
File: oIqKcxOokaG7WLipzK-1DLv_MRA.roa (raw, json)
Hash identifier: OIqr+BZaRpSXOZYXWkSPAK98glYoIVMbCAtq8Jz9Y9g=
Subject key identifier: A0:8A:8A:73:13:A8:91:A1:BB:58:B8:A9:CC:AF:B5:0C:BB:FF:31:10
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019D208A7AAD0A6176432FCB812DBE4A0ACA
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/oIqKcxOokaG7WLipzK-1DLv_MRA.roa
Signing time: Tue 24 Mar 2026 15:50:39 +0000
ROA not before: Tue 24 Mar 2026 15:50:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199808
IP address blocks: 194.231.216.0/24 maxlen: 24
194.231.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:20:8a:7a:ad:0a:61:76:43:2f:cb:81:2d:be:4a:0a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Mar 24 15:50:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a08a8a7313a891a1bb58b8a9ccafb50cbbff3110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f4:e1:47:d0:df:04:fe:ee:ad:97:f6:61:26:
9e:6a:a6:b3:b2:17:90:b1:4e:81:95:65:f3:8e:89:
c7:f5:31:2d:df:d5:ae:f5:25:8d:9f:4f:d1:23:df:
01:48:5d:23:55:9f:5d:52:1b:fc:03:27:e6:04:d5:
1f:f3:d9:80:f3:cf:94:e9:8f:dc:74:62:40:2b:d7:
83:92:a2:ec:bc:02:80:23:d7:20:14:1d:e1:2f:36:
8c:db:f2:07:40:9b:5d:fc:82:60:eb:15:a8:d1:5d:
15:15:87:3a:c2:77:91:be:c9:a8:35:d6:5d:74:2b:
4b:49:63:51:6f:73:be:09:c7:30:dc:5b:ec:f8:21:
7a:49:64:0e:e7:f8:70:15:2a:5a:06:9b:b3:29:e0:
9f:71:44:48:a7:14:c2:86:42:b2:3d:8d:4d:b3:54:
ac:5c:79:a9:2d:c5:37:58:c5:64:bb:3a:16:62:95:
4b:f8:e8:58:46:d2:70:b2:9f:ae:a3:82:0a:dc:bd:
6a:05:c8:3d:5c:31:f3:8a:37:c5:a0:f5:12:df:5f:
d5:e9:5c:f5:85:67:ac:10:69:40:50:e0:f8:5e:58:
10:3a:29:0b:e8:30:56:8d:aa:cd:f4:50:e1:d2:ea:
44:97:90:eb:f7:cf:9d:53:84:c1:f6:53:cf:0e:16:
6b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8A:8A:73:13:A8:91:A1:BB:58:B8:A9:CC:AF:B5:0C:BB:FF:31:10
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/oIqKcxOokaG7WLipzK-1DLv_MRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.216.0/24
194.231.221.0/24
Signature Algorithm: sha256WithRSAEncryption
28:28:d6:6d:4f:a4:7d:62:19:60:83:c9:29:a9:49:d0:29:1c:
6f:ef:b7:9e:47:e4:eb:c1:84:70:8e:13:d7:cf:f7:c2:c8:11:
9f:6e:f0:d2:7d:30:d4:cc:ab:8c:44:53:b2:65:b5:a1:52:4e:
ce:22:95:49:b0:6a:f9:08:fd:9a:22:68:92:95:57:3d:70:bb:
24:0e:e8:6e:39:95:b6:83:ca:71:b8:1c:92:bc:0f:ec:04:4c:
da:40:88:f0:ae:1d:40:3a:7c:03:09:89:e5:05:fb:9c:f7:f9:
91:de:55:95:e5:4a:36:2b:10:37:62:7c:f7:f0:83:8c:d6:0d:
99:df:99:07:db:bb:4e:c5:b3:0b:0c:49:0d:d8:b2:a7:5e:93:
1d:8a:d3:fb:7c:79:3d:75:26:7b:a6:dc:9a:2d:50:14:96:9b:
27:61:1c:f4:00:2b:ab:90:3d:02:3b:49:57:90:ae:8d:b3:6c:
c8:11:38:56:fd:1c:61:b9:bd:ea:5d:ee:6b:0b:3f:0e:51:68:
1a:96:aa:10:f6:d7:4c:24:1d:b1:cf:b9:d6:e0:04:13:31:b1:
d6:67:dc:7e:0f:be:c1:05:98:b8:d3:0e:90:a5:9e:ef:8a:c2:
f5:41:c3:dd:96:6c:8e:3d:dd:25:ec:59:85:89:ce:69:31:1d:
6b:e7:0c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:51 2026 by rpki-client