Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/oeyWMuCksF7xQUnt231_k5Ft4iQ.roa
File: oeyWMuCksF7xQUnt231_k5Ft4iQ.roa (raw, json)
Hash identifier: 3akcDMeEYVFhWF0jBJrON6h7BHKn5EQXutPMsrDghQc=
Subject key identifier: A1:EC:96:32:E0:A4:B0:5E:F1:41:49:ED:DB:7D:7F:93:91:6D:E2:24
Certificate issuer: /CN=e19cbb88d2b1a896658506778662e75c732a67e7
Certificate serial: 019F6026818C71F5782B3366924913E16334
Authority key identifier: E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/oeyWMuCksF7xQUnt231_k5Ft4iQ.roa
Signing time: Tue 14 Jul 2026 10:22:43 +0000
ROA not before: Tue 14 Jul 2026 10:22:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59659
IP address blocks: 5.159.120.0/21 maxlen: 24
185.220.88.0/22 maxlen: 24
185.221.144.0/22 maxlen: 24
2a07:c9c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:26:81:8c:71:f5:78:2b:33:66:92:49:13:e1:63:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19cbb88d2b1a896658506778662e75c732a67e7
Validity
Not Before: Jul 14 10:22:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1ec9632e0a4b05ef14149eddb7d7f93916de224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ef:25:a7:d6:4b:96:71:9a:98:f3:e8:5f:8b:
cf:87:7a:ad:1d:73:e5:07:c6:fc:e2:4b:4a:98:8f:
c0:90:ba:96:8c:69:29:1f:31:65:74:55:4a:81:bc:
2e:c7:83:23:fa:1f:f6:fd:1b:a3:65:b6:78:a5:2f:
29:db:e4:30:ef:be:64:1f:91:99:10:44:e9:c6:3f:
87:75:09:5a:36:0f:e5:77:c1:bc:1c:df:31:42:6d:
d9:ae:76:17:18:a8:ac:2f:30:a6:c7:36:ca:6b:3a:
e9:1e:22:e6:2d:22:3a:8b:cc:b8:f5:d5:9e:a3:09:
de:c2:8f:cb:13:70:0f:95:00:d6:b2:81:d5:4f:d1:
66:e9:91:71:97:5a:75:60:46:12:86:b9:40:25:9d:
28:66:53:35:c0:c6:27:79:f8:60:ec:fa:db:c2:35:
23:73:58:92:21:ed:17:6c:5a:d2:b8:52:17:b6:d1:
fc:28:ce:e4:d8:c9:51:6e:40:af:3c:ae:93:5d:f6:
4c:ff:b0:30:01:2a:1c:ae:a2:f2:06:42:fb:6b:ec:
88:95:64:80:36:39:f6:aa:86:92:a0:76:52:7a:ff:
57:08:7a:01:65:1f:71:99:ff:cf:a0:5d:c6:44:fb:
f5:86:58:4b:1f:23:b9:80:6b:40:33:82:cf:93:22:
66:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EC:96:32:E0:A4:B0:5E:F1:41:49:ED:DB:7D:7F:93:91:6D:E2:24
X509v3 Authority Key Identifier:
keyid:E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/oeyWMuCksF7xQUnt231_k5Ft4iQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.120.0/21
185.220.88.0/22
185.221.144.0/22
IPv6:
2a07:c9c0::/29
Signature Algorithm: sha256WithRSAEncryption
8a:f4:cd:a9:ff:21:03:08:16:78:22:d1:51:cc:bb:01:2e:3f:
dd:e3:dc:c6:d8:53:51:82:68:31:59:b2:64:a7:87:70:26:4f:
54:ca:70:9e:e3:14:8b:e7:a8:c0:43:63:2a:9a:31:47:f8:8d:
b1:b2:65:98:0e:0f:3f:63:48:0d:e2:35:68:3e:c4:f2:f7:71:
00:38:e5:f0:83:e1:eb:61:66:93:df:67:ba:9e:e5:e8:77:1a:
4e:90:26:79:e8:8e:d2:cb:0b:a0:53:48:7c:8f:ad:80:32:01:
cc:d0:18:2e:18:cd:76:71:3c:bd:33:3b:6c:cd:67:d0:6a:eb:
2b:79:1c:48:e0:9f:44:29:6f:c5:39:f9:73:a9:9e:22:91:24:
e3:76:07:0f:19:0f:e5:b6:0f:bf:d2:f0:d5:ff:41:f7:99:78:
4c:a8:1b:bb:09:7d:00:87:86:ed:28:f4:0d:34:a3:e2:71:ea:
fa:cd:70:01:58:68:d5:e5:13:77:03:f8:09:d8:44:b2:a3:d5:
1e:7a:5f:ee:54:b2:28:0f:32:a8:ed:1b:56:6d:e9:c8:67:17:
94:36:70:8d:52:16:af:23:43:a0:60:4e:82:97:85:02:91:b9:
5b:58:0b:0d:cf:ee:80:51:2b:22:b6:04:da:39:17:cb:dc:d9:
f2:af:41:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:07:28 2026 by rpki-client