Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/OLJL1zDY2dGxe5WIjBvw5rfJotQ.roa
File: OLJL1zDY2dGxe5WIjBvw5rfJotQ.roa (raw, json)
Hash identifier: 6rvv1iVSHTsngOC7CflWsfeBahBrotXLyebnjDm+7Qk=
Subject key identifier: 38:B2:4B:D7:30:D8:D9:D1:B1:7B:95:88:8C:1B:F0:E6:B7:C9:A2:D4
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A0D2E84DF078CE20A5D3F2074A28E4FF5C
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/OLJL1zDY2dGxe5WIjBvw5rfJotQ.roa
Signing time: Thu 24 Sep 2026 10:13:54 +0000
ROA not before: Thu 24 Sep 2026 10:13:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34534
IP address blocks: 5.180.145.0/24 maxlen: 24
5.180.147.0/24 maxlen: 24
194.55.137.0/24 maxlen: 24
194.55.189.0/24 maxlen: 24
194.59.221.0/24 maxlen: 24
194.59.245.0/24 maxlen: 24
194.76.146.0/24 maxlen: 24
194.76.147.0/24 maxlen: 24
194.76.154.0/24 maxlen: 24
194.76.155.0/24 maxlen: 24
194.124.250.0/24 maxlen: 24
194.124.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:e8:4d:f0:78:ce:20:a5:d3:f2:07:4a:28:e4:ff:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 24 10:13:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38b24bd730d8d9d1b17b95888c1bf0e6b7c9a2d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fa:b7:42:34:83:cb:d5:09:79:7b:6e:ed:d0:
80:f9:b6:94:a5:73:0b:40:d9:3f:a5:5b:4f:b8:ea:
f0:45:73:b8:4d:57:a7:95:0c:10:33:5b:21:4c:70:
1d:aa:70:0c:ab:6f:81:70:74:e2:13:f5:81:d5:77:
b7:26:de:39:d0:50:59:a6:f2:6e:31:5c:cd:47:ea:
43:f6:80:67:07:2a:7f:13:d3:2b:1a:88:ac:87:c9:
b9:61:69:76:bc:77:91:bf:3b:7b:11:44:7a:59:18:
a1:de:17:f1:0c:59:0e:b9:b9:17:4f:40:30:31:4c:
60:dd:27:ac:5c:a5:af:c3:f9:f2:5c:82:8f:06:4d:
37:30:d2:22:be:29:7e:21:55:48:80:e9:d3:9b:c8:
ef:e3:23:4f:18:fd:cd:af:84:ce:52:6e:01:f7:b2:
53:b8:f0:b9:5e:2a:52:97:4d:7d:e6:25:7d:3b:ce:
d2:9a:e4:e2:ad:65:ba:b6:96:82:a6:f8:ec:30:e4:
62:dd:6f:70:0e:af:a6:8c:d2:dc:1d:63:98:0f:6f:
b2:93:9a:ee:fb:a6:17:b8:85:26:21:b4:90:98:d0:
af:a2:30:e7:4c:e8:00:3b:3e:4f:7b:88:9b:84:b9:
74:80:9f:58:26:09:27:f5:15:dd:c9:e0:27:d0:c1:
ec:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B2:4B:D7:30:D8:D9:D1:B1:7B:95:88:8C:1B:F0:E6:B7:C9:A2:D4
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/OLJL1zDY2dGxe5WIjBvw5rfJotQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.145.0/24
5.180.147.0/24
194.55.137.0/24
194.55.189.0/24
194.59.221.0/24
194.59.245.0/24
194.76.146.0/23
194.76.154.0/23
194.124.250.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:14:53:9e:d4:b2:70:f8:91:d5:a4:9a:98:67:4a:46:07:aa:
f9:ce:54:ac:01:5d:27:35:d5:a8:f2:ed:3e:41:72:e0:db:27:
12:08:76:f5:00:03:31:7e:31:e0:50:80:dd:19:06:87:c7:87:
2d:53:05:c8:1c:dd:42:d6:bf:49:b4:0b:7d:38:15:67:f0:1e:
1c:4f:8d:61:03:18:2f:25:62:bf:48:4a:ce:1d:71:9d:f1:0e:
56:a2:1a:f5:03:f0:5a:cf:68:31:78:38:7e:e6:bb:e6:74:15:
12:7b:c6:17:90:30:22:97:03:2f:e9:34:48:5b:ff:78:c3:2b:
6c:ab:aa:d3:81:d1:1c:3f:17:6d:90:7a:fc:5f:24:42:17:ec:
10:83:a7:fc:fc:ba:27:10:de:c4:8b:a0:ab:10:ba:2b:28:b8:
e8:e3:01:0e:22:d4:1e:82:ce:65:26:de:24:97:21:c8:3f:47:
72:fb:3b:b2:6e:5c:15:fe:30:25:81:22:12:12:4e:c2:15:e1:
89:cc:87:f7:86:11:39:b2:1c:0f:f7:6f:e9:01:67:86:e8:5d:
9f:cf:f2:01:04:0b:8d:0c:98:57:39:3b:62:3a:0d:31:67:9b:
34:c5:ab:6d:76:75:7e:06:98:b0:5a:f3:d6:a4:40:e2:ce:36:
0d:7e:ec:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:01:48 2026 by rpki-client