Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/uOBm2HHtiL1ygzBZkyEvZ-yYHSQ.roa
File: uOBm2HHtiL1ygzBZkyEvZ-yYHSQ.roa (raw, json)
Hash identifier: ZLfbp4P8xVbyALUzm93DM46ieUzkAqS9Mn1Fvu7mqJA=
Subject key identifier: B8:E0:66:D8:71:ED:88:BD:72:83:30:59:93:21:2F:67:EC:98:1D:24
Certificate issuer: /CN=0f9ed8d6dc5cf2cdf2e0139f270ed124b46914f5
Certificate serial: 019F23685DB0BDFF136695728DCB515D4B8A
Authority key identifier: 0F:9E:D8:D6:DC:5C:F2:CD:F2:E0:13:9F:27:0E:D1:24:B4:69:14:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D57Y1txc8s3y4BOfJw7RJLRpFPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/uOBm2HHtiL1ygzBZkyEvZ-yYHSQ.roa
Signing time: Thu 02 Jul 2026 15:17:49 +0000
ROA not before: Thu 02 Jul 2026 15:17:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59499
IP address blocks: 5.159.8.0/21 maxlen: 21
5.159.8.0/22 maxlen: 22
5.159.12.0/22 maxlen: 22
185.141.16.0/22 maxlen: 22
185.141.18.0/23 maxlen: 23
185.141.18.0/24 maxlen: 24
185.141.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/D57Y1txc8s3y4BOfJw7RJLRpFPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/D57Y1txc8s3y4BOfJw7RJLRpFPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/D57Y1txc8s3y4BOfJw7RJLRpFPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:5d:b0:bd:ff:13:66:95:72:8d:cb:51:5d:4b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9ed8d6dc5cf2cdf2e0139f270ed124b46914f5
Validity
Not Before: Jul 2 15:17:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8e066d871ed88bd7283305993212f67ec981d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d3:8c:d8:c4:cf:93:db:67:3b:30:bb:14:df:
94:df:75:c8:a3:a6:4d:97:9d:54:07:5f:a2:44:7c:
70:77:ac:6d:ce:8a:f4:7e:1c:78:49:ff:43:f7:6b:
58:cb:b9:7b:63:8e:77:95:5e:fd:a7:50:bd:98:8b:
5c:a7:56:cf:23:1e:40:35:41:a7:16:77:7e:96:f2:
23:f4:25:22:bb:bd:b6:60:84:e8:dd:ea:29:af:b4:
03:66:82:3d:06:9a:c5:c9:03:60:03:ad:62:ae:d6:
a7:19:32:1a:6a:af:5a:35:63:e6:96:f0:b0:ac:05:
c8:69:9f:cc:11:62:7e:7b:bd:f0:85:6a:9b:4a:a9:
eb:cb:2d:3c:59:b6:08:71:ec:01:16:4b:7c:3f:b5:
39:88:d9:fa:8c:30:91:d2:cb:b8:ad:11:ff:08:7e:
07:23:48:0a:8f:63:46:5b:d1:05:16:3e:86:cc:fb:
fc:3b:eb:74:b1:03:86:6e:a7:81:a5:b7:b4:a1:ee:
fd:e4:cc:b8:c3:82:d3:2e:dd:db:db:7b:16:ff:51:
d9:f5:b9:a2:a9:ac:16:13:79:10:d6:80:34:dc:38:
16:46:b7:44:fd:da:db:bb:54:f4:ad:78:cc:89:30:
ee:60:9c:1d:f8:a7:93:b6:b0:6f:27:7c:bf:23:d9:
86:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E0:66:D8:71:ED:88:BD:72:83:30:59:93:21:2F:67:EC:98:1D:24
X509v3 Authority Key Identifier:
keyid:0F:9E:D8:D6:DC:5C:F2:CD:F2:E0:13:9F:27:0E:D1:24:B4:69:14:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D57Y1txc8s3y4BOfJw7RJLRpFPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/uOBm2HHtiL1ygzBZkyEvZ-yYHSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/D57Y1txc8s3y4BOfJw7RJLRpFPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.8.0/21
185.141.16.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:8a:c7:1f:96:00:5c:a9:8e:8c:61:bc:1e:86:ec:2c:42:c8:
3e:4a:7c:65:27:56:da:c0:32:b5:c5:56:d2:53:d9:de:96:a2:
8f:da:80:30:e0:16:70:ab:50:bd:5a:e7:02:58:75:f3:77:b1:
3d:69:55:3b:05:8b:45:f3:51:c2:46:03:74:39:aa:c7:a5:da:
12:52:97:f5:f9:84:37:3e:dc:d6:7e:70:7c:67:41:9f:1a:30:
a7:39:de:3e:ae:ee:1c:1f:91:2a:1e:ff:49:e1:7f:62:96:15:
ba:5b:93:6c:2b:64:b3:2a:27:a5:9c:b5:be:8c:9d:0c:9d:2d:
e6:9c:e4:38:75:83:53:89:7f:69:c6:3a:2f:e3:d1:04:c4:ac:
72:84:c1:98:77:08:3a:ea:fe:29:56:1a:49:22:88:d6:69:9a:
97:02:de:a8:32:ee:27:6a:6b:01:62:a8:1e:e9:78:62:17:83:
f8:a1:52:10:bf:54:98:3a:eb:6f:8c:bb:53:e1:ad:1a:51:1a:
ae:2a:5a:30:8d:b5:8b:f6:c9:17:3a:29:e4:93:3a:f6:5f:47:
1c:17:3c:f2:78:a1:11:ce:12:f6:05:74:5c:ad:ae:92:48:b5:
2a:f3:03:f0:57:fc:e7:0e:d1:df:44:26:5b:5e:d2:4a:b1:d4:
d0:4f:9a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:49:05 2026 by rpki-client