Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/oc6e_YKg8912v6VDvH8ngDmsWfM.roa
File: oc6e_YKg8912v6VDvH8ngDmsWfM.roa (raw, json)
Hash identifier: 41DdsXilU15WJYeBRPmAhAA7JB/24PpGTu8+VCcE5nM=
Subject key identifier: A1:CE:9E:FD:82:A0:F3:DD:76:BF:A5:43:BC:7F:27:80:39:AC:59:F3
Certificate issuer: /CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Certificate serial: 019F221EA8F511F7D301E517D968AD293F59
Authority key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/oc6e_YKg8912v6VDvH8ngDmsWfM.roa
Signing time: Thu 02 Jul 2026 09:17:42 +0000
ROA not before: Thu 02 Jul 2026 09:17:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29119
IP address blocks: 5.252.92.0/24 maxlen: 24
5.253.158.0/24 maxlen: 24
5.253.159.0/24 maxlen: 24
62.122.228.0/22 maxlen: 22
62.122.228.0/24 maxlen: 24
62.122.230.0/24 maxlen: 24
62.122.231.0/24 maxlen: 24
81.172.68.0/24 maxlen: 24
81.172.69.0/24 maxlen: 24
91.210.126.0/24 maxlen: 24
185.210.192.0/24 maxlen: 24
185.218.160.0/24 maxlen: 24
185.218.161.0/24 maxlen: 24
185.218.162.0/24 maxlen: 24
185.218.163.0/24 maxlen: 24
2a07:a4c4::/30 maxlen: 30
2a0b:d940::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:1e:a8:f5:11:f7:d3:01:e5:17:d9:68:ad:29:3f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Validity
Not Before: Jul 2 09:17:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1ce9efd82a0f3dd76bfa543bc7f278039ac59f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:da:69:1b:90:8a:f5:7c:e9:61:dc:43:4d:e9:
c1:c3:f9:4c:3b:db:1c:be:ec:26:89:8c:db:43:97:
e8:85:d4:ef:f9:46:06:3a:8d:27:07:03:9b:99:98:
49:7a:e7:4f:1e:1e:19:2a:43:1a:cd:62:dc:c5:1e:
43:63:13:1f:1b:0d:70:8b:43:4b:32:ea:63:42:35:
9f:72:86:2c:ee:e1:b8:93:58:74:15:64:ae:b8:e5:
f3:a2:cc:bf:fa:71:d9:ea:83:6c:db:f6:3e:e5:92:
dd:99:bb:83:99:1e:2e:ab:4f:01:67:67:8e:58:7d:
d4:b7:84:6a:a0:69:1a:84:f5:03:49:cf:13:fe:2d:
e2:7f:16:ea:8b:58:19:2a:d5:88:b4:da:2c:db:a7:
59:eb:e2:d4:3f:ed:9d:6c:31:d1:69:8b:dd:5e:75:
e9:43:10:f2:4c:a9:ee:d5:a0:99:ba:02:a6:2c:97:
35:ee:3f:bc:ac:19:0b:5a:b8:09:3f:e6:7d:30:2c:
74:27:08:1f:8c:71:2c:38:26:0d:ef:13:2c:7b:ce:
b1:f7:c8:53:4a:37:08:5a:66:de:62:1a:3a:80:6b:
05:46:88:ab:d7:d0:0f:96:7e:a5:95:7c:46:af:cd:
61:5f:15:56:1b:75:67:13:2d:fa:f1:5e:f5:bd:6d:
b0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CE:9E:FD:82:A0:F3:DD:76:BF:A5:43:BC:7F:27:80:39:AC:59:F3
X509v3 Authority Key Identifier:
keyid:57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/oc6e_YKg8912v6VDvH8ngDmsWfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.92.0/24
5.253.158.0/23
62.122.228.0/22
81.172.68.0/23
91.210.126.0/24
185.210.192.0/24
185.218.160.0/22
IPv6:
2a07:a4c4::/30
2a0b:d940::/29
Signature Algorithm: sha256WithRSAEncryption
55:2c:03:75:45:a2:4e:05:15:ed:fe:f8:67:2e:5f:c5:64:bb:
ed:1e:a6:0b:f9:75:29:11:b2:61:5c:a3:96:0e:32:4d:29:d8:
e3:b6:49:7a:2b:89:a7:ec:ed:07:61:ed:3d:b5:1c:50:b9:7f:
63:c1:13:c3:53:15:4e:71:cb:d1:76:d7:e5:d6:4b:9d:7e:f0:
a8:45:bf:11:8e:e2:03:84:a5:97:14:18:0c:b9:de:66:0e:15:
2f:45:7a:b6:8b:f0:2a:dc:fa:24:58:cc:fb:6a:cb:c9:a8:11:
36:a9:6c:42:8c:37:e0:81:e6:e9:a3:a1:d3:e5:d2:4f:3a:ac:
3d:a2:87:ef:f1:bb:0f:c3:43:4b:8e:45:4a:42:3d:db:bc:b4:
1e:1a:c9:1b:96:8e:39:d1:a7:15:85:35:4b:ff:ff:d8:f3:49:
7f:25:7a:91:7c:2d:2b:32:c9:9c:bc:1d:c7:a9:9f:f3:a4:71:
68:b7:fe:56:d7:35:ff:7d:e8:5d:05:45:9d:4e:f3:9d:71:70:
24:64:90:59:a3:e3:e3:d6:70:ae:49:b2:6c:53:7c:0d:46:90:
a2:c0:60:80:f0:3a:63:d8:25:ba:3d:3b:7d:58:74:14:31:31:
ac:05:de:3a:bb:57:9b:7a:47:f3:cb:14:7d:8f:d9:91:eb:81:
7c:fc:a7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:35 2026 by rpki-client