Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/OaWrgNTcsfTMgZj01K3xk6cBhyg.roa
File: OaWrgNTcsfTMgZj01K3xk6cBhyg.roa (raw, json)
Hash identifier: vPAJEJvm5TZP3JpnL3FA456bm2C66YI3nl6FDcYk//M=
Subject key identifier: 39:A5:AB:80:D4:DC:B1:F4:CC:81:98:F4:D4:AD:F1:93:A7:01:87:28
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 01A16ADE751D76277B7E52E74D363DAE7DB6
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/OaWrgNTcsfTMgZj01K3xk6cBhyg.roa
Signing time: Fri 23 Oct 2026 22:25:26 +0000
ROA not before: Fri 23 Oct 2026 22:25:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200019
IP address blocks: 2.59.219.0/24 maxlen: 24
45.93.8.0/24 maxlen: 24
45.93.9.0/24 maxlen: 24
45.148.244.0/24 maxlen: 24
46.16.34.0/24 maxlen: 24
93.185.167.0/24 maxlen: 24
94.103.188.0/24 maxlen: 24
94.231.223.0/24 maxlen: 24
176.116.0.0/24 maxlen: 24
176.125.242.0/23 maxlen: 24
176.125.242.0/24 maxlen: 24
176.125.243.0/24 maxlen: 24
185.103.164.0/24 maxlen: 24
185.103.167.0/24 maxlen: 24
185.139.214.0/24 maxlen: 24
185.139.215.0/24 maxlen: 24
185.212.117.0/24 maxlen: 24
185.234.9.0/24 maxlen: 24
193.27.90.0/24 maxlen: 24
213.232.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:de:75:1d:76:27:7b:7e:52:e7:4d:36:3d:ae:7d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Oct 23 22:25:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39a5ab80d4dcb1f4cc8198f4d4adf193a7018728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ff:7b:e6:3a:ff:36:44:87:e4:a1:6c:20:9f:
e2:8d:6b:0b:8c:db:b8:e5:b9:38:41:fc:2a:01:9e:
d0:78:5d:f4:ea:66:51:e3:a2:bf:70:81:cb:46:78:
35:a8:26:b4:b0:94:fe:b6:52:47:a3:b8:e8:64:1e:
72:0f:83:68:7a:d9:f5:35:6b:13:fa:9b:82:cb:b1:
c2:6f:a3:5d:5b:3c:59:f2:6b:43:11:c8:45:b3:b9:
08:1c:26:4c:89:23:f3:a0:12:91:cb:4e:2d:71:9b:
cc:8f:dd:db:72:b6:a5:4f:cd:6f:96:3b:0d:d0:77:
d2:7f:42:ce:78:77:f4:30:e1:b3:57:63:70:53:a7:
54:59:83:95:f7:c8:1e:0d:d8:43:fe:a6:d0:e1:27:
0a:42:4c:69:56:a2:f9:7e:67:35:7f:fc:58:26:3d:
7f:97:15:69:36:8d:9b:88:cd:5f:d0:7a:99:78:37:
0c:bc:d8:0d:8d:d6:cc:e1:32:e3:90:89:01:f2:4a:
36:5d:0f:88:a6:1e:d2:d7:9b:6b:c0:39:50:a2:ab:
11:0c:d1:a5:05:d1:d7:df:4b:8b:69:ee:cd:d9:cc:
cc:29:e5:72:b0:05:eb:c8:2e:0e:51:51:e7:b9:ae:
a8:39:ce:ec:a1:a1:e3:74:16:1b:01:63:73:a5:27:
6f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A5:AB:80:D4:DC:B1:F4:CC:81:98:F4:D4:AD:F1:93:A7:01:87:28
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/OaWrgNTcsfTMgZj01K3xk6cBhyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.219.0/24
45.93.8.0/23
45.148.244.0/24
46.16.34.0/24
93.185.167.0/24
94.103.188.0/24
94.231.223.0/24
176.116.0.0/24
176.125.242.0/23
185.103.164.0/24
185.103.167.0/24
185.139.214.0/23
185.212.117.0/24
185.234.9.0/24
193.27.90.0/24
213.232.235.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:71:0c:43:4b:80:16:9d:9b:e7:5c:17:63:c2:eb:98:e9:10:
a9:d7:5e:e0:96:2a:49:af:f6:ff:b8:ae:6d:b9:1d:97:f5:ce:
dc:5c:71:43:94:98:86:3c:e9:38:24:0e:36:cc:16:c2:c9:a0:
da:4e:a9:87:06:a2:79:6a:b4:18:72:1a:c2:8d:0d:3d:1d:59:
a4:92:b0:23:4d:32:0d:62:05:38:db:73:72:f6:60:58:c1:22:
aa:41:0e:0f:4b:2b:8c:2e:2b:99:fb:f6:96:89:a6:3d:ca:e4:
c8:cc:c6:75:f7:cb:4e:cb:cb:ff:f5:f5:33:e6:1f:44:6e:c8:
17:8c:7a:f6:43:6b:99:7e:80:aa:a6:12:00:46:4d:c8:16:cd:
43:a4:8b:be:70:e8:69:70:39:b0:6b:e5:d4:b7:c3:a1:42:91:
cc:a4:f5:93:4c:bc:04:fc:f2:be:3f:d5:93:be:79:6f:21:47:
8f:ac:34:35:7f:12:90:04:e2:71:3e:64:92:e7:06:a9:ad:a6:
cb:1c:4d:c2:f8:52:77:a2:4a:f3:22:8f:16:77:20:44:47:bd:
fa:0b:37:4f:c4:01:44:25:90:78:76:b9:1b:ea:fa:ac:53:d8:
96:40:51:34:31:58:5a:08:22:d9:78:fd:46:01:50:16:b1:9c:
2a:32:47:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:25:02 2026 by rpki-client