Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/OOICJUF2iO-TivY5mYN5Rpa5-UA.roa
File: OOICJUF2iO-TivY5mYN5Rpa5-UA.roa (raw, json)
Hash identifier: SnoGp7uxrSDW9jDKwrxlQHSSUne9+h+90VDZKBSc6B4=
Subject key identifier: 38:E2:02:25:41:76:88:EF:93:8A:F6:39:99:83:79:46:96:B9:F9:40
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019DC53301FF6586409BA5A1C80B7C889D93
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/OOICJUF2iO-TivY5mYN5Rpa5-UA.roa
Signing time: Sat 25 Apr 2026 15:12:27 +0000
ROA not before: Sat 25 Apr 2026 15:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60647
IP address blocks: 86.105.4.0/24 maxlen: 24
89.125.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c5:33:01:ff:65:86:40:9b:a5:a1:c8:0b:7c:88:9d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 25 15:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38e20225417688ef938af6399983794696b9f940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2b:13:5e:5b:68:4a:ae:63:0f:08:1f:38:f9:
df:31:cc:36:85:17:f6:b4:bc:f3:ca:61:54:80:8c:
94:41:c5:51:9a:0c:9b:cf:94:00:cc:e9:7b:83:94:
1b:bf:39:35:35:7b:93:71:30:3e:08:0e:02:ac:b0:
4e:31:a6:d5:7e:c5:b1:d6:bf:64:38:2a:51:3c:f8:
9f:0e:c3:91:fc:b3:1f:91:4c:39:d5:8a:19:58:58:
fd:05:b2:7b:34:fc:45:9a:4c:91:60:60:be:65:c0:
d0:3f:fc:8b:1e:fc:07:c2:3d:2d:35:8b:34:e4:d0:
11:52:fc:96:85:d3:c4:a2:1b:c9:55:52:ca:d8:54:
88:8f:9f:77:b0:6b:af:c4:96:6c:6d:66:70:3e:fb:
02:ba:d1:81:ca:27:68:51:e9:e6:60:4d:82:1c:1d:
5d:2f:69:73:1c:02:b4:78:ba:14:24:4a:aa:4b:52:
03:3f:9d:7c:95:97:60:c3:f7:6d:8c:66:f8:4f:49:
8a:73:d4:fc:c2:b0:62:f8:f8:9a:62:0a:93:66:5c:
67:b5:84:1e:8d:63:34:b4:c6:d7:c1:b8:68:1b:5f:
78:dc:cb:c9:91:af:af:9c:cd:88:31:7a:be:82:27:
80:0d:95:4b:1c:ba:87:6e:64:ab:8e:05:ae:ef:60:
8c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E2:02:25:41:76:88:EF:93:8A:F6:39:99:83:79:46:96:B9:F9:40
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/OOICJUF2iO-TivY5mYN5Rpa5-UA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.4.0/24
89.125.30.0/24
Signature Algorithm: sha256WithRSAEncryption
44:96:b8:ce:d7:9c:d5:05:86:14:e7:b9:ad:d2:cb:2e:ee:83:
fb:7e:0e:0d:5f:26:30:eb:3c:94:0d:18:96:ea:73:32:68:2e:
8b:1c:cf:b4:bb:dd:9c:d3:92:7e:dc:5f:6e:e3:b7:01:59:07:
74:f7:da:99:f7:a2:ff:c3:b7:fe:a2:b1:e6:1b:69:56:e1:a7:
17:72:d4:1e:06:4a:17:23:24:20:ea:af:5d:94:93:48:d9:fb:
c1:4d:b8:7c:a1:9e:56:98:ed:f8:a6:0b:0e:fa:10:17:26:7d:
83:1d:d9:7d:20:00:1e:5d:2c:3b:a4:16:f0:ca:bf:f1:1d:f4:
d7:f2:73:e0:c9:52:0c:dd:4d:3b:36:79:da:f1:f2:31:0d:62:
da:c3:e8:e3:e4:ab:3e:97:7d:ba:a3:e0:01:81:d5:2a:78:fc:
52:3e:fe:b7:12:64:d1:60:ad:ba:b1:9d:35:b4:ad:0a:e8:66:
1c:26:fd:17:3a:9f:51:3f:27:3a:b8:c9:10:2d:33:93:2a:fa:
93:eb:95:ba:40:dd:21:c7:b4:44:42:a1:03:fb:73:14:68:e3:
0c:f1:30:34:d8:8b:5a:13:f9:7e:ac:31:c2:83:18:44:da:b8:
a0:34:f2:e1:57:6f:10:3f:96:00:25:7f:8a:42:6a:e0:07:fb:
f7:77:12:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:13:43 2026 by rpki-client