Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/OF82b50F4RRpDQH5D4gfKbMSuFU.roa
File: OF82b50F4RRpDQH5D4gfKbMSuFU.roa (raw, json)
Hash identifier: CW0u7XK/Whu40GYHN4SjzF3iC2jQoiML5rDldm5EIp0=
Subject key identifier: 38:5F:36:6F:9D:05:E1:14:69:0D:01:F9:0F:88:1F:29:B3:12:B8:55
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 019E02527E6FC3BC9B0B7C0C60324C60A8FE
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/OF82b50F4RRpDQH5D4gfKbMSuFU.roa
Signing time: Thu 07 May 2026 12:03:41 +0000
ROA not before: Thu 07 May 2026 12:03:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50132
IP address blocks: 185.115.33.0/24 maxlen: 24
185.115.34.0/24 maxlen: 24
185.192.22.0/24 maxlen: 24
185.200.198.0/24 maxlen: 24
185.200.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:02:52:7e:6f:c3:bc:9b:0b:7c:0c:60:32:4c:60:a8:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: May 7 12:03:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=385f366f9d05e114690d01f90f881f29b312b855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cb:21:93:8c:9b:44:b2:d5:23:48:a1:6e:c4:
3e:4b:fa:cc:1e:d0:a4:55:7f:aa:b8:94:da:c2:28:
cc:d8:ed:d4:0f:10:4d:a6:45:68:1f:42:38:dd:fa:
70:34:f0:8b:dd:8e:39:bb:87:67:21:53:18:1d:b4:
11:39:c9:a7:7e:e5:cd:7c:01:aa:3a:07:34:08:df:
96:a7:11:86:6f:14:61:f1:f1:c5:0e:b9:bb:00:e9:
fb:61:71:a0:0a:ca:d7:9f:df:f4:de:9a:de:7e:11:
14:67:39:da:45:e8:eb:a8:3a:e3:9a:2d:b5:bf:19:
93:d5:0f:bb:b7:71:bf:bc:be:d7:61:a1:54:22:07:
c5:75:9a:07:95:7a:4a:e2:ef:b0:04:18:56:9a:e5:
42:df:63:03:a7:2c:73:a4:72:99:e8:93:44:ad:95:
e8:7a:8a:f7:c4:8d:7c:d9:bc:36:6f:91:86:a7:7f:
de:6c:01:24:5c:00:80:8f:5f:d7:ec:2b:d6:dd:76:
2b:9d:3e:78:45:d9:aa:d6:89:85:3d:56:c0:07:d7:
d4:06:4d:0d:7c:b5:cd:6e:67:3c:42:fc:81:2c:51:
95:33:23:b4:8c:73:cb:66:38:bd:ca:7d:aa:6d:56:
87:7f:29:dc:07:69:5b:65:d1:25:28:42:ac:18:27:
c0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5F:36:6F:9D:05:E1:14:69:0D:01:F9:0F:88:1F:29:B3:12:B8:55
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/OF82b50F4RRpDQH5D4gfKbMSuFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.33.0-185.115.34.255
185.192.22.0/24
185.200.198.0/23
Signature Algorithm: sha256WithRSAEncryption
58:a9:85:3a:24:df:1a:f7:99:d0:2f:41:ed:5a:54:f8:20:e8:
28:4e:a0:4e:b1:65:0a:b8:89:5b:79:93:5d:d8:12:be:9a:09:
ca:cd:9b:8c:b5:6c:a7:52:dc:db:63:b4:c3:b0:c2:16:03:5b:
48:c1:1f:99:a5:df:0e:f2:78:79:04:b3:65:d8:bb:16:7d:f9:
44:28:5a:c6:f5:65:0f:c0:24:9c:73:83:4f:9c:a3:15:45:92:
97:fc:83:49:23:22:b6:2a:3f:72:9e:e7:9a:ce:5b:df:8d:01:
dc:8e:58:12:d7:1e:84:96:91:36:e4:98:aa:43:c3:1c:aa:c1:
05:d9:51:ab:00:66:03:a7:b1:d9:95:6b:00:f5:b4:d4:98:e6:
23:99:3b:61:24:2e:57:54:45:6a:73:f1:3f:84:d6:1d:b2:7d:
0d:0f:39:68:1a:1b:be:e8:46:fc:69:a9:bd:62:59:2b:fb:8a:
2f:2b:6f:93:1e:93:76:48:f0:99:2f:58:f4:c3:4f:32:0d:5c:
59:6b:c1:21:d5:87:43:3b:31:94:45:df:36:f9:b1:81:01:ea:
59:10:91:9f:d9:c6:83:59:1e:78:dd:bf:3c:f1:f7:ff:16:68:
20:69:b7:d6:69:a3:e3:6f:a7:3a:d9:29:76:cb:73:bb:c9:96:
55:8b:2f:11
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZ4CUn5vw7ybC3wMYDJMYKj+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZjVjYjJmNTkwZDA0MTY1NGY0ZGZkYjYwYTI4ZjlhMTU0
NGY0NDQwHhcNMjYwNTA3MTIwMzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODVmMzY2ZjlkMDVlMTE0NjkwZDAxZjkwZjg4MWYyOWIzMTJiODU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8shk4ybRLLVI0ihbsQ+S/rMHtCk
VX+quJTawijM2O3UDxBNpkVoH0I43fpwNPCL3Y45u4dnIVMYHbQROcmnfuXNfAGq
Ogc0CN+WpxGGbxRh8fHFDrm7AOn7YXGgCsrXn9/03prefhEUZznaRejrqDrjmi21
vxmT1Q+7t3G/vL7XYaFUIgfFdZoHlXpK4u+wBBhWmuVC32MDpyxzpHKZ6JNErZXo
eor3xI182bw2b5GGp3/ebAEkXACAj1/X7CvW3XYrnT54Rdmq1omFPVbAB9fUBk0N
fLXNbmc8QvyBLFGVMyO0jHPLZji9yn2qbVaHfyncB2lbZdElKEKsGCfA7wIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFDhfNm+dBeEUaQ0B+Q+IHymzErhVMB8GA1UdIwQY
MBaAFA71yy9ZDQQWVPTf22Cij5oVRPREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmIt
ZWU0MzVkM2NkNTg1LzEvT0Y4MmI1MEY0UlJwRFFINUQ0Z2ZLYk1TdUZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmItZWU0MzVkM2NkNTg1
LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAC5cyED
BAC5cyIDBAC5wBYDBAG5yMYwDQYJKoZIhvcNAQELBQADggEBAFiphTok3xr3mdAv
Qe1aVPgg6ChOoE6xZQq4iVt5k13YEr6aCcrNm4y1bKdS3NtjtMOwwhYDW0jBH5ml
3w7yeHkEs2XYuxZ9+UQoWsb1ZQ/AJJxzg0+coxVFkpf8g0kjIrYqP3Ke55rOW9+N
AdyOWBLXHoSWkTbkmKpDwxyqwQXZUasAZgOnsdmVawD1tNSY5iOZO2EkLldURWpz
8T+E1h2yfQ0POWgaG77oRvxpqb1iWSv7ii8rb5Mek3ZI8JkvWPTDTzINXFlrwSHV
h0M7MZRF3zb5sYEB6lkQkZ/ZxoNZHnjdvzzx9/8WaCBpt9Zpo+NvpzrZKXbLc7vJ
llWLLxE=
-----END CERTIFICATE-----
Generated at Wed May 13 12:40:33 2026 by rpki-client