Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/OOzqyBl-3IK9h8aAJujCwJk-92g.roa
File: OOzqyBl-3IK9h8aAJujCwJk-92g.roa (raw, json)
Hash identifier: dpTGH67xDvSqmXU43ZPh6OckhG/DCpqHk3f/7ZGQqAE=
Subject key identifier: 38:EC:EA:C8:19:7E:DC:82:BD:87:C6:80:26:E8:C2:C0:99:3E:F7:68
Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial: 019F8833F4EC5AE895177F30C8F35C64A688
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/OOzqyBl-3IK9h8aAJujCwJk-92g.roa
Signing time: Wed 22 Jul 2026 05:02:14 +0000
ROA not before: Wed 22 Jul 2026 05:02:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199242
IP address blocks: 5.255.61.0/24 maxlen: 24
5.255.62.0/23 maxlen: 23
23.252.66.0/23 maxlen: 23
23.252.68.0/24 maxlen: 24
23.252.71.0/24 maxlen: 24
23.252.75.0/24 maxlen: 24
23.252.76.0/24 maxlen: 24
23.252.79.0/24 maxlen: 24
31.222.234.0/24 maxlen: 24
37.72.142.0/24 maxlen: 24
62.3.11.0/24 maxlen: 24
62.106.90.0/24 maxlen: 24
62.233.61.0/24 maxlen: 24
80.71.144.0/24 maxlen: 24
91.92.112.0/23 maxlen: 23
91.246.50.0/24 maxlen: 24
107.150.162.0/23 maxlen: 23
107.150.175.0/24 maxlen: 24
107.150.177.0/24 maxlen: 24
146.19.4.0/24 maxlen: 24
146.19.199.0/24 maxlen: 24
146.19.203.0/24 maxlen: 24
162.222.88.0/23 maxlen: 23
162.222.90.0/24 maxlen: 24
167.160.27.0/24 maxlen: 24
176.97.217.0/24 maxlen: 24
176.126.101.0/24 maxlen: 24
185.4.224.0/23 maxlen: 23
185.165.47.0/24 maxlen: 24
185.234.12.0/24 maxlen: 24
185.252.210.0/24 maxlen: 24
188.244.119.0/24 maxlen: 24
193.9.48.0/24 maxlen: 24
193.162.132.0/24 maxlen: 24
193.162.133.0/24 maxlen: 24
194.26.230.0/24 maxlen: 24
194.26.231.0/24 maxlen: 24
194.99.158.0/24 maxlen: 24
195.96.130.0/24 maxlen: 24
195.96.131.0/24 maxlen: 24
212.52.14.0/24 maxlen: 24
212.52.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:88:33:f4:ec:5a:e8:95:17:7f:30:c8:f3:5c:64:a6:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Validity
Not Before: Jul 22 05:02:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38eceac8197edc82bd87c68026e8c2c0993ef768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5e:09:86:03:7e:4e:7e:94:82:68:e1:d1:f8:
ac:03:c5:09:11:dc:f0:68:c7:2c:5d:81:70:ce:90:
a7:7e:51:dc:84:04:e1:1f:b8:d6:86:b1:fd:7a:16:
73:06:3b:27:c2:d6:f1:7e:95:32:a9:93:c6:ee:3f:
c5:53:7a:6d:2e:e4:0c:b5:e7:4d:85:ba:52:f2:f5:
32:df:49:cc:bf:ad:9d:7c:26:ea:9e:49:fc:f4:0a:
90:7e:0b:e9:1e:ad:a2:61:9d:19:ae:5c:a2:98:77:
49:e4:77:25:af:ad:74:21:bb:08:4d:a6:95:53:51:
f5:c8:9f:25:cb:5e:d3:c0:2c:5f:2b:29:89:95:0b:
7c:7f:52:33:e3:f6:bb:59:b2:07:31:63:3e:01:ab:
58:01:c6:fc:b1:2a:d9:ea:3f:58:05:e7:03:a3:f6:
34:0f:c4:4c:9d:08:c9:e7:7f:09:75:ca:d2:35:10:
f8:21:c6:17:37:3c:5b:bb:3d:2d:2e:a9:1a:55:86:
12:bf:84:07:e6:ee:04:6c:26:54:f2:c0:85:73:12:
97:29:e6:ee:d2:cf:1d:fb:2c:5c:81:b7:94:05:0b:
43:e7:ba:32:08:8f:5c:96:de:b3:8a:bc:02:4a:8c:
53:ca:a9:60:8b:ba:ab:e7:35:e6:40:0e:23:5d:95:
5d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EC:EA:C8:19:7E:DC:82:BD:87:C6:80:26:E8:C2:C0:99:3E:F7:68
X509v3 Authority Key Identifier:
keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/OOzqyBl-3IK9h8aAJujCwJk-92g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.255.61.0-5.255.63.255
23.252.66.0-23.252.68.255
23.252.71.0/24
23.252.75.0-23.252.76.255
23.252.79.0/24
31.222.234.0/24
37.72.142.0/24
62.3.11.0/24
62.106.90.0/24
62.233.61.0/24
80.71.144.0/24
91.92.112.0/23
91.246.50.0/24
107.150.162.0/23
107.150.175.0/24
107.150.177.0/24
146.19.4.0/24
146.19.199.0/24
146.19.203.0/24
162.222.88.0-162.222.90.255
167.160.27.0/24
176.97.217.0/24
176.126.101.0/24
185.4.224.0/23
185.165.47.0/24
185.234.12.0/24
185.252.210.0/24
188.244.119.0/24
193.9.48.0/24
193.162.132.0/23
194.26.230.0/23
194.99.158.0/24
195.96.130.0/23
212.52.14.0/24
212.52.28.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:94:1e:1b:27:01:56:6d:72:fe:aa:13:93:25:29:24:e8:f5:
f9:a1:85:f3:aa:08:06:33:b5:ca:6d:d6:f9:99:c1:28:96:38:
7a:bf:ee:4e:4c:2e:db:2b:c8:09:a2:4c:2e:71:cf:a2:1d:d6:
e2:8c:3e:9b:59:8e:f4:7b:25:0e:a4:9c:90:fc:64:00:32:e7:
d0:d2:d1:63:d8:40:93:89:79:fe:92:9a:8e:cd:54:52:0f:79:
5d:df:8a:80:1d:c8:59:1a:41:51:cb:51:43:54:a8:25:2d:b5:
e3:77:ae:e3:3a:6d:2c:1b:94:ac:51:4b:a0:1a:ac:2f:b5:af:
6a:eb:72:32:0c:79:18:e8:3d:b6:d6:c7:0e:f4:52:37:de:94:
67:5c:ab:46:c0:4a:d8:e3:4a:7d:53:69:2b:bb:95:65:94:8f:
4c:c9:7b:31:fc:65:0e:3e:f7:51:0e:38:90:4b:17:ca:3e:b3:
83:7a:f4:ad:a0:81:90:83:7f:da:4f:14:87:f8:74:d3:38:f1:
83:db:42:28:76:c9:d6:10:2b:9b:3f:23:76:7b:7d:5d:2d:dc:
8f:7c:24:f0:ac:3e:c2:eb:b7:5a:40:af:47:06:b3:a8:a9:89:
e2:bb:09:27:83:12:d7:af:f3:39:ef:f9:e4:2b:16:67:fb:64:
f8:3a:39:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:04:17 2026 by rpki-client