Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/oJvITbepfzrc6o9BZXmQMi0rT08.roa
File: oJvITbepfzrc6o9BZXmQMi0rT08.roa (raw, json)
Hash identifier: s+wcpOjEeCx+BjpAw8N3cqojgGpwUPNtyJb5e2nTcLY=
Subject key identifier: A0:9B:C8:4D:B7:A9:7F:3A:DC:EA:8F:41:65:79:90:32:2D:2B:4F:4F
Certificate issuer: /CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Certificate serial: 019EEF030A42AF229C4ECD3F50498615EAD8
Authority key identifier: 7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/oJvITbepfzrc6o9BZXmQMi0rT08.roa
Signing time: Mon 22 Jun 2026 11:06:54 +0000
ROA not before: Mon 22 Jun 2026 11:06:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29119
IP address blocks: 5.57.224.0/22 maxlen: 24
5.57.228.0/22 maxlen: 24
146.255.16.0/22 maxlen: 24
146.255.19.0/24 maxlen: 24
146.255.20.0/22 maxlen: 24
146.255.21.0/24 maxlen: 24
185.2.148.0/23 maxlen: 24
185.2.150.0/23 maxlen: 24
185.47.12.0/22 maxlen: 24
185.57.172.0/23 maxlen: 24
185.57.174.0/23 maxlen: 24
185.99.184.0/22 maxlen: 24
185.99.184.0/23 maxlen: 24
185.103.36.0/22 maxlen: 24
185.104.132.0/22 maxlen: 24
185.104.132.0/23 maxlen: 24
185.104.134.0/23 maxlen: 24
185.104.134.0/24 maxlen: 24
185.105.220.0/22 maxlen: 24
185.105.222.0/23 maxlen: 24
2a00:de40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ef:03:0a:42:af:22:9c:4e:cd:3f:50:49:86:15:ea:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Validity
Not Before: Jun 22 11:06:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a09bc84db7a97f3adcea8f41657990322d2b4f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b7:98:0c:3e:3d:3d:70:6d:18:a8:76:e6:f1:
2f:8c:5d:35:99:8a:84:f7:78:f8:af:84:d9:55:59:
13:fe:2d:11:cc:70:de:c7:b2:7a:b7:59:fc:29:52:
85:d4:0b:d6:38:1d:e6:56:69:4d:3a:56:e0:5b:c7:
0d:5b:96:9b:e3:f0:5b:f8:b5:ef:6c:f2:d5:87:f9:
39:32:8d:c3:a8:de:a2:ad:8f:d5:59:d8:53:c7:ca:
f3:5d:3a:5c:62:bb:ff:8f:34:5c:fe:69:b5:99:27:
d2:91:6c:9a:65:94:25:f5:4d:49:5b:35:7c:38:02:
ab:3a:ce:98:19:d7:37:dc:0c:af:50:66:62:ea:9f:
ba:12:c6:4c:b1:e6:b9:94:d4:1d:e3:3b:ad:86:42:
d3:e2:0e:1d:5b:54:70:d3:42:df:25:ac:b6:f4:81:
f2:67:01:1d:8b:f9:cc:31:ea:b9:01:b0:e1:c9:e6:
de:14:c1:bc:9c:cb:32:5b:6d:53:0a:58:e6:d9:d8:
30:ce:8b:e3:3e:0c:a7:ca:88:7a:1a:7f:90:bb:14:
d1:ab:be:e9:71:d2:68:e1:ca:ad:81:e5:63:0e:47:
00:55:d3:ec:24:35:1c:f4:c4:71:46:e9:da:8b:78:
2c:67:3e:bc:aa:63:b2:2d:58:16:3d:fb:29:00:1b:
20:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9B:C8:4D:B7:A9:7F:3A:DC:EA:8F:41:65:79:90:32:2D:2B:4F:4F
X509v3 Authority Key Identifier:
keyid:7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/oJvITbepfzrc6o9BZXmQMi0rT08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.224.0/21
146.255.16.0/21
185.2.148.0/22
185.47.12.0/22
185.57.172.0/22
185.99.184.0/22
185.103.36.0/22
185.104.132.0/22
185.105.220.0/22
IPv6:
2a00:de40::/32
Signature Algorithm: sha256WithRSAEncryption
69:ea:2a:bd:72:2f:d6:6c:74:24:52:e9:ca:14:89:18:a1:f2:
97:19:b0:28:07:66:88:f9:bc:ba:5b:65:ba:e8:68:bb:ee:3d:
06:e3:1d:c3:0c:0d:af:7b:4a:c1:99:45:81:58:57:2d:76:1b:
e7:94:11:b8:6f:92:96:27:78:ad:88:c8:07:13:4a:0a:20:0e:
4e:cd:30:41:2e:d0:7e:6c:1a:9e:83:16:6b:0a:5f:4a:a8:b8:
f5:70:c9:92:2c:fb:d8:1d:c8:97:06:29:6a:2e:79:26:ad:78:
70:6a:45:50:ca:3e:be:97:18:ab:f4:87:94:f6:85:3d:d0:c0:
b6:81:c1:9f:b9:53:d9:65:c0:17:51:79:b7:75:16:41:32:be:
30:1a:c0:94:b6:48:2b:84:3b:93:c4:63:66:c3:3f:9e:16:a8:
25:55:0a:67:30:d8:6d:5b:05:09:c0:83:92:67:62:db:d9:14:
c8:66:0b:cd:79:6e:1c:45:74:a2:e3:e1:a3:29:f9:7c:84:c3:
a3:d8:3e:9c:12:e1:39:7b:11:a1:a8:28:5d:6b:a8:25:65:24:
b9:c9:80:ee:a7:9a:df:ff:cb:cf:b7:19:19:02:7f:fc:af:bc:
78:41:68:d1:ce:8e:15:1d:7f:aa:a6:d0:f1:d5:d4:d0:c1:0c:
11:4c:05:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:45:50 2026 by rpki-client