Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/OWW7Tr0ddkzX8cpnriB4IyyEFmI.roa
File: OWW7Tr0ddkzX8cpnriB4IyyEFmI.roa (raw, json)
Hash identifier: 65mD2shWItoOmc6tgeQNjaLe4tC+absIZWq2fClFhYk=
Subject key identifier: 39:65:BB:4E:BD:1D:76:4C:D7:F1:CA:67:AE:20:78:23:2C:84:16:62
Certificate issuer: /CN=22ffc723d157934043134ceed03424a942859d83
Certificate serial: 019F23683B8139DD6A266D4151F32E379867
Authority key identifier: 22:FF:C7:23:D1:57:93:40:43:13:4C:EE:D0:34:24:A9:42:85:9D:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/OWW7Tr0ddkzX8cpnriB4IyyEFmI.roa
Signing time: Thu 02 Jul 2026 15:17:41 +0000
ROA not before: Thu 02 Jul 2026 15:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44193
IP address blocks: 91.223.19.0/24 maxlen: 24
185.158.208.0/22 maxlen: 24
194.110.204.0/24 maxlen: 24
195.234.112.0/22 maxlen: 24
2a02:2278:ff00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3b:81:39:dd:6a:26:6d:41:51:f3:2e:37:98:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ffc723d157934043134ceed03424a942859d83
Validity
Not Before: Jul 2 15:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3965bb4ebd1d764cd7f1ca67ae2078232c841662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9e:0a:ff:d3:fc:61:9a:0c:28:dc:a0:35:3f:
47:38:2e:47:ae:a9:12:a8:8c:0c:eb:0a:1f:93:7a:
d7:4e:3f:11:fc:12:b6:11:8d:80:40:95:71:27:f9:
c4:d9:9a:c6:11:ca:93:5c:dd:09:3a:10:2f:61:0d:
2b:fc:2c:f2:d6:b2:85:15:3a:57:93:93:fb:85:99:
bf:d5:67:bc:5f:26:3d:d6:d7:56:22:c0:92:86:e4:
1d:40:71:1c:ec:9a:dd:15:9c:dc:49:5a:13:e0:68:
d0:48:e8:03:fb:49:d1:37:3d:ca:55:9f:b7:4b:21:
03:7f:6d:e0:13:45:47:74:b1:0d:a8:d8:99:f4:fb:
f7:76:15:be:40:79:6c:c1:60:33:f2:0b:a3:d3:bc:
d5:58:2f:35:a7:7e:da:49:1d:25:d8:58:cb:fd:09:
67:44:d8:b2:7b:6f:9a:ce:7c:b6:cc:9f:76:59:0a:
30:ee:5c:64:e1:fc:93:33:1b:10:b1:75:c3:0f:b6:
dd:53:6b:bc:e5:4f:7e:67:d1:f2:76:f4:50:91:09:
3c:4e:bd:c4:d4:a6:1f:a1:ac:7b:cc:55:ed:a2:8e:
d3:1b:ad:95:e3:1b:90:e5:ce:15:91:4a:70:0a:02:
f7:c7:76:f7:28:58:8f:3b:1e:03:cf:6c:6d:e3:bf:
89:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:65:BB:4E:BD:1D:76:4C:D7:F1:CA:67:AE:20:78:23:2C:84:16:62
X509v3 Authority Key Identifier:
keyid:22:FF:C7:23:D1:57:93:40:43:13:4C:EE:D0:34:24:A9:42:85:9D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/OWW7Tr0ddkzX8cpnriB4IyyEFmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.19.0/24
185.158.208.0/22
194.110.204.0/24
195.234.112.0/22
IPv6:
2a02:2278:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
0d:4b:d6:0d:8f:ea:12:c0:fd:f7:b3:52:79:09:36:80:0b:1b:
74:da:40:6c:75:41:5d:a5:d7:5e:ca:87:f8:df:b8:fb:61:5d:
57:16:c3:2a:4d:74:56:f1:f8:57:66:8d:16:70:c4:7f:63:1f:
8a:8c:b3:53:fc:4c:c8:8c:77:fe:30:f0:bd:c4:eb:07:a3:fc:
95:4f:d4:0c:3d:d7:0d:34:58:dd:66:ab:d1:fe:dc:73:47:07:
b7:1e:17:72:9a:3a:01:a3:8e:1f:ec:c5:d4:c2:39:a0:10:9c:
8d:c5:ff:4b:d6:2d:27:64:28:2e:bd:59:9d:a1:02:1a:fa:d2:
57:46:b2:f5:74:e9:95:66:f0:95:19:9f:46:75:87:27:38:4c:
b2:b0:f6:c0:8a:ed:37:1b:b5:2e:68:ae:e5:e4:9b:41:92:fa:
6f:52:c5:3c:e0:30:59:57:99:7d:84:15:0d:9a:2a:d8:82:50:
4e:37:de:04:d1:7f:ae:aa:cc:b1:ad:63:89:40:35:5c:5a:2f:
bf:91:c9:44:a4:50:df:f5:b3:1d:55:52:8e:5a:45:b0:8f:03:
2e:85:10:18:5a:b4:7e:a5:39:75:a2:e0:41:90:3d:3b:6d:ad:
3d:11:62:51:a1:0c:62:4b:a2:f2:aa:03:8b:61:75:74:ec:b5:
55:3a:93:62
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZ8jaDuBOd1qJm1BUfMuN5hnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZmZjNzIzZDE1NzkzNDA0MzEzNGNlZWQwMzQyNGE5NDI4
NTlkODMwHhcNMjYwNzAyMTUxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTY1YmI0ZWJkMWQ3NjRjZDdmMWNhNjdhZTIwNzgyMzJjODQxNjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4J4K/9P8YZoMKNygNT9HOC5HrqkS
qIwM6wofk3rXTj8R/BK2EY2AQJVxJ/nE2ZrGEcqTXN0JOhAvYQ0r/Czy1rKFFTpX
k5P7hZm/1We8XyY91tdWIsCShuQdQHEc7JrdFZzcSVoT4GjQSOgD+0nRNz3KVZ+3
SyEDf23gE0VHdLENqNiZ9Pv3dhW+QHlswWAz8guj07zVWC81p37aSR0l2FjL/Qln
RNiye2+azny2zJ92WQow7lxk4fyTMxsQsXXDD7bdU2u85U9+Z9HydvRQkQk8Tr3E
1KYfoax7zFXtoo7TG62V4xuQ5c4VkUpwCgL3x3b3KFiPOx4Dz2xt47+JYQIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFDllu069HXZM1/HKZ64geCMshBZiMB8GA1UdIwQY
MBaAFCL/xyPRV5NAQxNM7tA0JKlChZ2DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXZfSEk5RlhrMEJERTB6dTBEUWtxVUtGbllNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80YTc1MzktYjE0OS00OGU5LTg4ZTct
MDYwYWMwODkwOTY2LzEvT1dXN1RyMGRka3pYOGNwbnJpQjRJeXlFRm1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS80YTc1MzktYjE0OS00OGU5LTg4ZTctMDYwYWMwODkwOTY2
LzEvSXZfSEk5RlhrMEJERTB6dTBEUWtxVUtGbllNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAeBAIAATAYAwQAW98TAwQC
uZ7QAwQAwm7MAwQCw+pwMA4EAgACMAgDBgAqAiJ4/zANBgkqhkiG9w0BAQsFAAOC
AQEADUvWDY/qEsD997NSeQk2gAsbdNpAbHVBXaXXXsqH+N+4+2FdVxbDKk10VvH4
V2aNFnDEf2MfioyzU/xMyIx3/jDwvcTrB6P8lU/UDD3XDTRY3War0f7cc0cHtx4X
cpo6AaOOH+zF1MI5oBCcjcX/S9YtJ2QoLr1ZnaECGvrSV0ay9XTplWbwlRmfRnWH
JzhMsrD2wIrtNxu1Lmiu5eSbQZL6b1LFPOAwWVeZfYQVDZoq2IJQTjfeBNF/rqrM
sa1jiUA1XFovv5HJRKRQ3/WzHVVSjlpFsI8DLoUQGFq0fqU5daLgQZA9O22tPRFi
UaEMYkui8qoDi2F1dOy1VTqTYg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:40:12 2026 by rpki-client