Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/jOTxkiOPdU5nGdnvSM-DcXfM4x0.roa
File: jOTxkiOPdU5nGdnvSM-DcXfM4x0.roa (raw, json)
Hash identifier: DfKoS47qDsnRByR5J15LUCrTzvv6IfPekWLLNKdn6JI=
Subject key identifier: 8C:E4:F1:92:23:8F:75:4E:67:19:D9:EF:48:CF:83:71:77:CC:E3:1D
Certificate issuer: /CN=21df245ead9980d2b39533782f65d7566d0462d1
Certificate serial: 019DD5B0D514885722C564D815D2CACF456F
Authority key identifier: 21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/jOTxkiOPdU5nGdnvSM-DcXfM4x0.roa
Signing time: Tue 28 Apr 2026 20:03:49 +0000
ROA not before: Tue 28 Apr 2026 20:03:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207003
IP address blocks: 185.188.30.0/24 maxlen: 24
185.218.192.0/22 maxlen: 22
185.218.192.0/23 maxlen: 23
185.218.192.0/24 maxlen: 24
185.218.193.0/24 maxlen: 24
185.218.194.0/24 maxlen: 24
185.218.195.0/24 maxlen: 24
193.163.5.0/24 maxlen: 24
2a0b:a700::/29 maxlen: 29
2a0b:dbc0::/29 maxlen: 29
2a10:f2c0::/29 maxlen: 29
2a10:f2c0:1751::/48 maxlen: 48
2a10:f2c0:a001::/48 maxlen: 48
2a10:f2c0:a002::/48 maxlen: 48
2a10:f2c0:a003::/48 maxlen: 48
2a10:f2c0:a004::/48 maxlen: 48
2a10:f2c1::/32 maxlen: 32
2a10:f2c2::/32 maxlen: 32
2a10:f2c3::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d5:b0:d5:14:88:57:22:c5:64:d8:15:d2:ca:cf:45:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21df245ead9980d2b39533782f65d7566d0462d1
Validity
Not Before: Apr 28 20:03:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ce4f192238f754e6719d9ef48cf837177cce31d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:04:c7:b3:7b:30:b1:5a:6a:7f:54:20:95:4a:
8f:6c:8f:03:96:48:aa:a9:02:a7:d0:b3:af:58:5e:
b3:5f:46:01:89:a4:b2:3d:3a:a9:00:eb:d4:b8:c5:
06:d6:32:1a:e8:8c:f3:5e:bc:de:21:24:37:d4:71:
b3:4c:18:98:03:4a:01:69:f2:6b:0d:e9:33:23:df:
37:92:7f:d8:d5:24:c4:aa:99:f1:b4:a3:d0:19:b0:
9d:6c:be:f1:a7:14:22:15:b6:18:bf:9c:a4:49:fd:
32:b4:ce:c5:65:46:ed:41:6e:8e:ab:09:da:68:e7:
d1:36:10:92:2e:aa:d8:11:87:17:59:2c:77:6f:0c:
e0:ee:b1:4a:fb:e2:30:ee:79:77:bd:b5:dc:77:ce:
8b:15:06:d7:6e:b2:0c:d2:04:60:2a:08:f5:ad:99:
92:c8:53:97:47:81:af:1d:f4:95:ce:86:53:dc:62:
67:e4:c1:15:37:46:f1:63:e8:42:22:54:49:08:30:
f3:58:f4:59:dc:43:c2:25:57:a9:8d:6e:3b:64:07:
bd:13:be:7b:ee:c8:ab:8c:18:7e:74:58:45:b3:cf:
c4:8e:ed:c9:41:23:24:3d:ff:65:df:6a:58:e9:67:
ce:33:02:81:d7:97:e5:1f:fc:86:85:ce:64:fb:03:
32:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E4:F1:92:23:8F:75:4E:67:19:D9:EF:48:CF:83:71:77:CC:E3:1D
X509v3 Authority Key Identifier:
keyid:21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/jOTxkiOPdU5nGdnvSM-DcXfM4x0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.30.0/24
185.218.192.0/22
193.163.5.0/24
IPv6:
2a0b:a700::/29
2a0b:dbc0::/29
2a10:f2c0::/29
Signature Algorithm: sha256WithRSAEncryption
98:71:70:41:e8:b6:f2:1a:9a:d2:2b:9d:ab:d9:c8:0f:6f:eb:
2b:5c:5b:68:76:89:bd:a5:56:b9:f5:6d:03:0a:72:f8:d2:49:
91:28:20:99:f3:f2:b6:2c:ca:26:c9:42:54:08:cb:ba:65:d7:
ae:0d:c8:60:8c:cf:37:a6:25:bb:1d:98:ae:06:a2:a6:6a:85:
f2:4e:9e:25:ac:df:82:b4:95:82:58:3d:a1:e6:c7:d4:48:f7:
70:27:9c:ff:8d:b3:e5:30:a0:af:92:39:7c:94:82:af:21:33:
c6:b9:75:42:07:76:ca:28:46:59:ec:a0:7f:c4:a1:30:a9:ae:
90:47:21:c0:0a:d0:04:dc:24:b7:14:e2:79:d9:af:e7:07:10:
fe:e8:20:d2:97:7b:87:ec:21:68:c7:c1:fc:b2:13:a9:12:fc:
c8:25:71:26:a8:c1:de:28:f1:49:4c:2a:33:ae:95:fd:7e:6f:
26:03:b2:51:6d:6b:e3:7f:55:ab:9b:85:1c:62:ab:ec:56:72:
75:fb:18:41:6e:39:77:8d:70:ad:4b:29:39:f7:37:17:42:4d:
67:4c:34:a3:5e:9a:4f:f8:96:57:96:bb:5f:88:24:9e:e1:35:
36:26:52:2b:9e:82:2d:84:6d:5c:5e:aa:e3:1e:a3:e9:26:82:
3c:5f:43:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:37 2026 by rpki-client