Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/OivHzY1Owmf_t0MGp9f5pENVwKc.roa
File: OivHzY1Owmf_t0MGp9f5pENVwKc.roa (raw, json)
Hash identifier: AGN5cPkAaLuiB5y5JBq+hIUbcPiUDqUPHZPobtq+scE=
Subject key identifier: 3A:2B:C7:CD:8D:4E:C2:67:FF:B7:43:06:A7:D7:F9:A4:43:55:C0:A7
Certificate issuer: /CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Certificate serial: 019F74F66BEF1B5D56A842559DF9835367BD
Authority key identifier: 4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/OivHzY1Owmf_t0MGp9f5pENVwKc.roa
Signing time: Sat 18 Jul 2026 11:22:14 +0000
ROA not before: Sat 18 Jul 2026 11:22:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 77.83.164.0/22 maxlen: 24
80.65.220.0/22 maxlen: 24
185.228.216.0/22 maxlen: 24
194.15.104.0/22 maxlen: 24
195.242.208.0/22 maxlen: 24
212.115.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:74:f6:6b:ef:1b:5d:56:a8:42:55:9d:f9:83:53:67:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Validity
Not Before: Jul 18 11:22:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a2bc7cd8d4ec267ffb74306a7d7f9a44355c0a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:af:5f:e4:4d:15:58:f9:82:ad:14:9b:b4:85:
d2:da:d3:ca:a2:3a:a4:11:ce:e5:d1:cb:e5:e7:59:
32:12:dd:cf:ee:93:5e:fc:96:ce:6d:89:1d:3c:da:
05:b6:c3:f2:82:d8:ef:16:94:a6:5c:6b:e9:0a:d4:
f0:2a:b0:04:3d:1e:7f:7f:46:2e:7a:54:02:fc:25:
16:b0:89:61:c0:06:43:95:1f:02:d3:53:29:a6:54:
55:d8:8c:50:9f:55:a0:53:88:b7:6c:a6:f9:58:15:
94:eb:72:c4:40:ef:7f:0b:00:13:74:67:ea:e1:0e:
cf:5f:cf:ab:9c:1a:d6:1d:c1:cd:74:c9:b0:e7:2b:
3c:a9:bf:c8:38:bd:54:bd:37:13:5e:e2:c8:72:0e:
cd:34:88:ef:a5:19:6a:da:f4:2d:3a:37:7c:4f:7e:
8f:86:3e:8e:8b:67:17:df:9a:4b:d7:28:e9:e1:a7:
6c:0e:8c:f4:22:1c:0e:c8:ca:ce:2b:6f:d8:90:01:
10:de:ee:63:8b:ac:92:5b:d0:02:63:88:7a:a6:d2:
8c:6c:26:91:18:69:09:e2:56:10:ef:f8:6a:5d:36:
d0:8d:23:f7:4c:2c:d6:98:64:1e:80:95:a2:7d:61:
9c:af:cc:c9:63:88:4c:64:ba:2b:63:66:5c:7f:5a:
82:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2B:C7:CD:8D:4E:C2:67:FF:B7:43:06:A7:D7:F9:A4:43:55:C0:A7
X509v3 Authority Key Identifier:
keyid:4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/OivHzY1Owmf_t0MGp9f5pENVwKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.164.0/22
80.65.220.0/22
185.228.216.0/22
194.15.104.0/22
195.242.208.0/22
212.115.60.0/22
Signature Algorithm: sha256WithRSAEncryption
28:fc:4b:54:e3:db:7b:54:20:00:6c:04:cf:c0:24:3f:2a:18:
77:bc:88:81:48:fe:fe:80:09:d5:7c:e0:9a:f8:43:67:be:e2:
36:b3:35:7a:f1:c3:17:bc:49:cc:b4:df:d6:92:c3:1a:e6:dc:
98:02:66:0e:1c:76:4c:51:8e:21:9e:55:ce:dd:60:e8:f5:37:
f6:a9:fb:25:e7:6c:8a:f9:a7:06:ad:ad:2a:3b:8e:f5:8d:98:
ae:5a:50:75:73:6c:96:64:c8:55:bf:a0:18:c8:ee:33:38:a4:
e3:2d:2f:87:03:15:4f:d8:17:08:62:bd:7f:90:1d:69:36:19:
f8:85:08:1d:55:9c:b3:ed:68:9b:57:64:b0:17:46:4a:4b:f9:
be:f6:1d:87:ce:24:80:1f:9d:67:61:f7:d8:80:4b:f8:d6:62:
a2:d2:89:5e:a8:62:be:3a:43:f2:7a:18:ef:48:09:a3:d0:8a:
1a:f8:49:b2:d2:48:d5:00:71:97:24:de:23:6d:14:8b:60:a4:
3a:7f:af:f1:81:97:fc:7b:26:63:35:ac:39:6c:06:8d:6e:dd:
34:c4:c4:20:c5:ff:28:09:5e:b4:86:d3:33:6b:54:54:52:c0:
e9:b8:26:49:46:cc:a7:5b:10:d8:15:14:3a:df:50:06:71:3f:
73:b9:f9:07
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZ909mvvG11WqEJVnfmDU2e9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjY2JjNWUwNDVlYWE1Zjc2MmE5MTQ2MjQ0YzE5MjQ4YjYy
YmE5NzYwHhcNMjYwNzE4MTEyMjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTJiYzdjZDhkNGVjMjY3ZmZiNzQzMDZhN2Q3ZjlhNDQzNTVjMGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArq9f5E0VWPmCrRSbtIXS2tPKojqk
Ec7l0cvl51kyEt3P7pNe/JbObYkdPNoFtsPygtjvFpSmXGvpCtTwKrAEPR5/f0Yu
elQC/CUWsIlhwAZDlR8C01MpplRV2IxQn1WgU4i3bKb5WBWU63LEQO9/CwATdGfq
4Q7PX8+rnBrWHcHNdMmw5ys8qb/IOL1UvTcTXuLIcg7NNIjvpRlq2vQtOjd8T36P
hj6Oi2cX35pL1yjp4adsDoz0IhwOyMrOK2/YkAEQ3u5ji6ySW9ACY4h6ptKMbCaR
GGkJ4lYQ7/hqXTbQjSP3TCzWmGQegJWifWGcr8zJY4hMZLorY2Zcf1qCAQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFDorx82NTsJn/7dDBqfX+aRDVcCnMB8GA1UdIwQY
MBaAFEzLxeBF6qX3YqkUYkTBkki2K6l2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE12RjRFWHFwZmRpcVJSaVJNR1NTTFlycVhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iZjY2ZGQtNjIzNy00OGRlLWFlZDct
YTdjNTlkZGNmNzZiLzEvT2l2SHpZMU93bWZfdDBNR3A5ZjVwRU5Wd0tjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9iZjY2ZGQtNjIzNy00OGRlLWFlZDctYTdjNTlkZGNmNzZi
LzEvVE12RjRFWHFwZmRpcVJSaVJNR1NTTFlycVhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCTVOkAwQC
UEHcAwQCueTYAwQCwg9oAwQCw/LQAwQC1HM8MA0GCSqGSIb3DQEBCwUAA4IBAQAo
/EtU49t7VCAAbATPwCQ/Khh3vIiBSP7+gAnVfOCa+ENnvuI2szV68cMXvEnMtN/W
ksMa5tyYAmYOHHZMUY4hnlXO3WDo9Tf2qfsl52yK+acGra0qO471jZiuWlB1c2yW
ZMhVv6AYyO4zOKTjLS+HAxVP2BcIYr1/kB1pNhn4hQgdVZyz7WibV2SwF0ZKS/m+
9h2HziSAH51nYffYgEv41mKi0oleqGK+OkPyehjvSAmj0Ioa+Emy0kjVAHGXJN4j
bRSLYKQ6f6/xgZf8eyZjNaw5bAaNbt00xMQgxf8oCV60htMza1RUUsDpuCZJRsyn
WxDYFRQ631AGcT9zufkH
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:19 2026 by rpki-client