Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/olvyqzuNvXrGeqfRmEUXNufvjIE.roa
File: olvyqzuNvXrGeqfRmEUXNufvjIE.roa (raw, json)
Hash identifier: Hprl8Pe8mPAC17YXAu41Cy5RqBefPMudPYxyfqJmQBk=
Subject key identifier: A2:5B:F2:AB:3B:8D:BD:7A:C6:7A:A7:D1:98:45:17:36:E7:EF:8C:81
Certificate issuer: /CN=53d0359f9f8b20815ce4d988e109bf82306e4c74
Certificate serial: 019F6FCD47F4A0CBBC91A7DB0DF33C9DEB9C
Authority key identifier: 53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/olvyqzuNvXrGeqfRmEUXNufvjIE.roa
Signing time: Fri 17 Jul 2026 11:19:11 +0000
ROA not before: Fri 17 Jul 2026 11:19:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207096
IP address blocks: 185.166.40.0/23 maxlen: 23
185.166.42.0/23 maxlen: 23
185.176.204.0/23 maxlen: 23
185.176.205.0/24 maxlen: 24
185.176.206.0/23 maxlen: 23
185.176.207.0/24 maxlen: 24
2a0a:7600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6f:cd:47:f4:a0:cb:bc:91:a7:db:0d:f3:3c:9d:eb:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d0359f9f8b20815ce4d988e109bf82306e4c74
Validity
Not Before: Jul 17 11:19:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a25bf2ab3b8dbd7ac67aa7d198451736e7ef8c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:95:99:5b:5d:c7:80:9a:45:dc:a1:af:8c:51:
69:8b:2b:9f:16:f5:7c:2d:fb:33:89:1a:54:0e:d6:
84:39:36:ee:ba:f4:9f:01:a9:21:c6:c1:6e:0c:81:
e9:b1:58:7e:65:57:34:4d:2b:da:13:54:16:ef:ad:
d3:82:d7:b4:4d:0c:6a:0c:85:8f:71:72:83:6d:22:
cc:98:2b:8e:9b:55:9b:f0:25:e5:55:c7:04:b4:bc:
bc:b6:3e:13:82:28:58:2a:83:cc:1d:e7:08:4d:3a:
1d:2e:6c:c6:b8:ed:6d:d8:9f:35:8f:f8:d9:09:9f:
95:67:b8:9c:82:d5:dc:39:d8:a2:fc:f7:51:de:ac:
34:cf:37:61:41:ff:ba:10:29:24:6f:9a:67:41:45:
7e:de:54:f2:3e:a8:5a:69:cc:f1:10:3b:4b:eb:21:
2a:27:64:b0:be:1b:6e:97:52:9f:20:4b:a1:2d:33:
3b:ee:13:85:37:d7:8e:9f:42:ff:f5:27:1a:8b:d2:
32:d0:2d:c5:f3:e9:3d:2e:ca:c4:09:59:4b:08:e3:
b6:c0:e4:05:c9:cd:39:60:aa:9b:6f:06:1a:75:48:
e1:f7:ca:e2:4f:48:30:49:ba:51:a8:d3:59:cd:cc:
22:f2:d1:23:b4:15:78:44:8c:04:be:b1:0e:f7:b2:
b0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5B:F2:AB:3B:8D:BD:7A:C6:7A:A7:D1:98:45:17:36:E7:EF:8C:81
X509v3 Authority Key Identifier:
keyid:53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/olvyqzuNvXrGeqfRmEUXNufvjIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.40.0/22
185.176.204.0/22
IPv6:
2a0a:7600::/29
Signature Algorithm: sha256WithRSAEncryption
1f:c0:1f:82:b4:a7:f0:00:bd:2e:66:b0:fd:a5:f1:38:b4:6e:
ff:bf:21:21:24:0a:21:50:93:39:d8:2d:ad:cc:98:1b:0f:11:
c9:fb:38:6d:e6:db:0a:1e:d4:c7:5a:e0:9d:c1:a9:8f:70:bb:
d0:3f:aa:29:15:92:96:64:14:6c:cb:9d:a2:2c:e0:e9:dc:db:
da:6d:4c:bb:24:d2:b1:77:04:f3:2c:0e:09:37:52:82:02:f0:
f7:7d:8e:74:4a:9e:9a:d4:60:7b:41:43:fc:22:20:2b:e9:30:
2e:83:ab:cb:f8:c3:98:cf:9d:5a:c6:a6:67:98:6a:29:40:07:
79:61:fe:ad:0b:73:f7:a6:87:25:3e:00:ba:df:70:8c:14:f8:
7e:b7:62:39:f4:6d:14:17:2c:bb:31:71:65:a3:41:f6:99:9b:
10:d2:d0:17:14:ae:54:d8:2b:05:d2:62:66:43:d6:f2:21:2f:
89:46:ba:b2:38:83:4d:a4:2a:eb:33:4b:48:1f:db:29:38:cb:
3f:82:c0:78:9c:50:4e:92:e9:41:53:4f:1d:a6:d0:74:88:b3:
ae:9a:1c:c4:dd:86:83:71:f8:98:a3:9a:f4:f9:1b:57:b7:6b:
3a:be:6a:5d:e8:3c:fd:ff:b4:a9:10:29:82:36:75:c3:7a:38:
54:03:76:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:00:41 2026 by rpki-client