Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/ocY70Yt7qprLim2mTu297m9-o2U.roa
File: ocY70Yt7qprLim2mTu297m9-o2U.roa (raw, json)
Hash identifier: 6sPyz7kDxqJwF7yTxqQ7gDV39uN8BMfMMUG8+PSgNKc=
Subject key identifier: A1:C6:3B:D1:8B:7B:AA:9A:CB:8A:6D:A6:4E:ED:BD:EE:6F:7E:A3:65
Certificate issuer: /CN=ee9ccd38a5d6496880bc094706e68fa04fa2cd96
Certificate serial: 019EEFAD416FE26CB104F0A37025B13AD6B7
Authority key identifier: EE:9C:CD:38:A5:D6:49:68:80:BC:09:47:06:E6:8F:A0:4F:A2:CD:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/ocY70Yt7qprLim2mTu297m9-o2U.roa
Signing time: Mon 22 Jun 2026 14:12:49 +0000
ROA not before: Mon 22 Jun 2026 14:12:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213417
IP address blocks: 37.58.28.0/24 maxlen: 24
45.10.56.0/24 maxlen: 24
195.140.217.0/24 maxlen: 24
2a14:ff00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ef:ad:41:6f:e2:6c:b1:04:f0:a3:70:25:b1:3a:d6:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee9ccd38a5d6496880bc094706e68fa04fa2cd96
Validity
Not Before: Jun 22 14:12:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1c63bd18b7baa9acb8a6da64eedbdee6f7ea365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:19:88:a4:15:fb:58:53:80:bf:a4:87:a8:9a:
1b:f6:65:cf:c1:7c:8f:46:a8:03:d2:f1:70:db:f1:
12:bf:46:2f:d3:f3:d8:2b:d2:18:e6:9b:82:0a:95:
1d:08:1d:51:06:ea:97:c1:ad:38:52:d4:29:4a:b0:
d5:c5:af:08:36:c1:61:bc:36:0a:d8:f7:ab:32:84:
3a:4c:53:23:43:2e:8f:7b:dc:73:fb:1e:ed:c7:b6:
99:1d:51:31:f4:67:ac:2f:aa:9e:ab:52:d0:2f:e3:
f2:ce:04:63:0f:82:d7:ef:32:dd:07:12:b8:2e:0e:
d1:d4:09:db:cc:d7:9f:0d:27:9c:1a:d5:33:b4:10:
17:0c:86:12:01:72:e1:e7:9e:74:d7:6e:7c:54:71:
21:2f:cf:93:8f:6b:52:42:6d:6f:29:8d:3a:0f:b6:
36:24:b6:0b:bf:82:0d:25:3a:87:9c:98:85:58:70:
8d:0a:e2:40:20:8e:53:85:84:8f:8d:40:62:fb:e7:
b2:16:11:75:35:da:17:58:91:1f:04:e8:34:aa:08:
2e:77:96:f3:ca:18:19:30:bf:8e:ca:55:05:1a:11:
4c:14:fc:31:04:ae:e6:e6:4e:7a:26:9a:ce:c4:eb:
9c:86:4d:3f:17:97:f3:fa:ac:29:34:43:14:40:48:
f7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C6:3B:D1:8B:7B:AA:9A:CB:8A:6D:A6:4E:ED:BD:EE:6F:7E:A3:65
X509v3 Authority Key Identifier:
keyid:EE:9C:CD:38:A5:D6:49:68:80:BC:09:47:06:E6:8F:A0:4F:A2:CD:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/ocY70Yt7qprLim2mTu297m9-o2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.58.28.0/24
45.10.56.0/24
195.140.217.0/24
IPv6:
2a14:ff00::/29
Signature Algorithm: sha256WithRSAEncryption
a1:98:a7:d6:bd:41:7e:3b:43:dd:ef:c4:b8:27:94:c5:bc:e8:
42:90:fa:1f:1e:79:5f:76:98:b3:03:df:6f:05:33:fc:51:56:
e5:fc:96:a2:e3:3d:cc:40:ac:da:7b:2b:f4:83:b8:d1:0e:9b:
4a:44:03:cb:2b:b6:ba:47:e0:54:be:c5:06:00:54:de:09:e0:
e2:ef:33:b4:ad:5c:03:79:2a:b1:c0:79:71:3c:e6:9b:80:88:
7d:d2:42:f6:8d:bb:cf:7e:e3:07:b1:45:04:52:5c:aa:72:84:
1f:c0:99:b7:cf:c8:45:34:40:78:69:cb:b6:fd:f4:b1:fd:33:
5b:dc:9c:b5:63:fa:76:61:dc:12:d2:61:61:81:3a:df:bc:1e:
18:8b:28:05:83:24:56:3c:e8:ca:40:34:d2:b6:98:bc:ad:50:
9c:f5:0d:23:a9:3d:37:87:a8:90:58:82:88:c8:a9:7b:bc:79:
d8:72:44:a5:30:a6:3f:9b:dc:cd:45:74:b8:a2:f0:3b:22:1d:
4e:0b:df:e7:c0:8c:90:fc:ee:b3:e4:26:46:9b:37:06:29:c7:
6c:1b:99:99:de:09:2f:97:1d:c9:64:61:cd:9f:fd:58:29:7d:
ae:ae:ad:71:ff:19:fa:dd:52:e5:12:34:11:1f:a5:75:cd:c1:
0a:82:c3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:19 2026 by rpki-client