Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/oTGkNvJRZNRjPu-ktqx2ylM1aRI.roa
File: oTGkNvJRZNRjPu-ktqx2ylM1aRI.roa (raw, json)
Hash identifier: Ek0IIB7EUCOuxacTHXe38ILHEJXneuaGMfbJ/YMGwwk=
Subject key identifier: A1:31:A4:36:F2:51:64:D4:63:3E:EF:A4:B6:AC:76:CA:53:35:69:12
Certificate issuer: /CN=1f0614e195c1656a28e8b19b22784e8b55bb4533
Certificate serial: 019F4C1009CFB1DF1141D84337275C05C7AF
Authority key identifier: 1F:06:14:E1:95:C1:65:6A:28:E8:B1:9B:22:78:4E:8B:55:BB:45:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/oTGkNvJRZNRjPu-ktqx2ylM1aRI.roa
Signing time: Fri 10 Jul 2026 12:45:47 +0000
ROA not before: Fri 10 Jul 2026 12:45:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51373
IP address blocks: 91.218.156.0/22 maxlen: 22
91.218.156.0/24 maxlen: 24
91.218.157.0/24 maxlen: 24
91.218.158.0/24 maxlen: 24
91.218.159.0/24 maxlen: 24
94.24.28.0/24 maxlen: 24
178.251.120.0/24 maxlen: 24
185.44.216.0/22 maxlen: 22
185.44.216.0/24 maxlen: 24
185.44.217.0/24 maxlen: 24
185.44.218.0/24 maxlen: 24
185.44.219.0/24 maxlen: 24
185.80.59.0/24 maxlen: 24
193.33.8.0/23 maxlen: 23
2a04:9a40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4c:10:09:cf:b1:df:11:41:d8:43:37:27:5c:05:c7:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0614e195c1656a28e8b19b22784e8b55bb4533
Validity
Not Before: Jul 10 12:45:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a131a436f25164d4633eefa4b6ac76ca53356912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a1:9a:b3:a4:5c:be:4e:7e:bf:f2:4c:17:94:
37:d7:03:38:15:d0:94:b7:c9:e7:86:e7:38:ad:fa:
23:39:1d:c2:63:fb:91:8e:05:e8:f2:77:23:64:be:
b6:a2:50:ed:06:2f:c8:ed:ba:71:65:af:ed:e3:37:
a4:20:6e:2e:9f:38:e6:be:f4:b7:c5:07:e1:e2:32:
bb:29:1c:6e:92:7a:96:83:e0:42:ef:02:77:82:17:
f3:31:b9:03:a0:ba:da:65:6a:08:fa:8f:d3:44:5a:
a9:95:da:cf:df:2a:29:3e:8f:e0:8d:be:62:69:14:
6b:b9:b5:53:2a:3e:38:7a:1d:18:37:f9:7c:d4:db:
2b:fd:1b:18:b8:a6:bc:61:a9:cf:62:2f:f3:28:1d:
fa:ac:a4:28:d1:c2:28:16:2a:e4:5f:b5:4b:8d:56:
f2:9f:13:0b:58:06:8f:91:4f:54:98:b2:dc:ee:e4:
fb:01:55:46:64:63:cc:78:a9:9f:d4:50:a5:26:71:
5d:af:c5:6a:0d:cd:b3:a1:d2:15:30:7b:a1:2d:67:
79:f4:8c:de:fd:58:07:8a:96:4a:a3:a3:bc:a6:b0:
27:0b:aa:78:d5:08:cb:12:f3:69:f9:ef:44:ba:c0:
2d:06:89:21:1b:fe:bf:13:ee:58:87:5d:33:54:49:
7c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:31:A4:36:F2:51:64:D4:63:3E:EF:A4:B6:AC:76:CA:53:35:69:12
X509v3 Authority Key Identifier:
keyid:1F:06:14:E1:95:C1:65:6A:28:E8:B1:9B:22:78:4E:8B:55:BB:45:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/oTGkNvJRZNRjPu-ktqx2ylM1aRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.156.0/22
94.24.28.0/24
178.251.120.0/24
185.44.216.0/22
185.80.59.0/24
193.33.8.0/23
IPv6:
2a04:9a40::/29
Signature Algorithm: sha256WithRSAEncryption
64:c4:98:46:0b:5b:80:b3:3c:b8:2b:2f:be:e3:01:b0:ae:4f:
3e:88:36:df:23:aa:02:bd:5a:5f:39:c0:a0:0d:8c:01:e1:03:
55:39:41:47:5a:ea:39:7c:c7:eb:22:72:7c:dc:cc:79:55:d5:
64:96:0c:bb:73:99:d3:09:81:d1:2f:85:6b:1d:08:ed:2d:85:
d5:86:e4:55:45:6d:78:7b:be:eb:f9:58:48:20:4d:ee:d2:ee:
f5:8d:0f:05:65:8c:4a:9f:73:8c:37:dd:02:c2:84:27:e6:eb:
33:99:5c:23:57:4b:55:f7:4d:1d:4c:7a:11:10:78:a4:6c:e1:
95:17:50:03:26:4e:35:27:6f:df:eb:39:1a:da:09:7c:65:2d:
b2:3e:45:cf:8b:5e:14:f6:96:e0:89:80:82:35:dd:db:02:a5:
0b:d8:fc:ed:76:6c:e8:0c:97:9f:00:9b:24:d8:66:b9:c7:44:
77:96:0f:b5:fa:fc:f8:4e:da:9e:a5:24:5d:7c:02:4e:05:3a:
15:86:7a:1b:73:ad:f9:00:6b:95:2f:45:b9:46:0f:a2:8a:c4:
fa:0b:d6:9a:ea:29:08:3d:f2:65:07:7d:81:53:24:65:a3:22:
dc:ca:58:21:3e:47:ba:00:a9:bc:c1:54:62:88:39:35:1d:6b:
00:14:39:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:32:23 2026 by rpki-client