Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/oxHWxJb881Hqvgr6_bkVxzPYtJ0.roa
File: oxHWxJb881Hqvgr6_bkVxzPYtJ0.roa (raw, json)
Hash identifier: LvSqBtGBwUlDrk5yPIFmOlNvJAZkPXTZ0vhmoLk6f1g=
Subject key identifier: A3:11:D6:C4:96:FC:F3:51:EA:BE:0A:FA:FD:B9:15:C7:33:D8:B4:9D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A138C3FEBE98FD07920F796D37D7BDCF9B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/oxHWxJb881Hqvgr6_bkVxzPYtJ0.roa
Signing time: Wed 14 Oct 2026 04:55:31 +0000
ROA not before: Wed 14 Oct 2026 04:55:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 192.124.188.0/24 maxlen: 24
194.87.75.0/24 maxlen: 24
194.87.229.0/24 maxlen: 24
195.133.43.0/24 maxlen: 24
195.133.95.0/24 maxlen: 24
212.192.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:c3:fe:be:98:fd:07:92:0f:79:6d:37:d7:bd:cf:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 14 04:55:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a311d6c496fcf351eabe0afafdb915c733d8b49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8e:bd:3e:2e:06:f0:29:0b:fe:31:17:b8:7e:
2d:d7:16:f7:63:11:6a:ec:2b:5a:09:60:36:5b:51:
e4:f7:da:30:24:fc:ef:c1:12:1e:36:21:2b:4f:33:
73:10:14:f8:28:f3:b3:94:51:3e:92:b9:1d:69:b7:
64:61:c1:86:38:46:d7:a5:fb:0e:c3:34:be:5e:71:
cd:c6:5b:4d:8d:28:4a:ec:16:52:84:88:c9:bc:1a:
29:cb:3b:db:28:d2:46:56:bb:e2:3f:ed:3b:fc:30:
e9:38:50:99:d3:60:0d:c9:17:46:5d:d1:df:44:80:
18:b0:63:78:21:e0:3a:cb:96:7a:c9:49:85:1b:44:
7c:9b:d6:c6:d9:f0:69:f3:e2:5e:19:ca:d0:b8:25:
25:51:45:8c:8d:46:ce:0f:cd:9f:fd:7b:63:83:98:
7d:61:90:e6:11:c2:02:c3:0a:31:1a:3a:6f:5d:3e:
5c:d3:dc:78:4f:a9:f7:5e:96:ea:43:6d:ff:0a:b5:
86:18:5d:8f:de:54:86:01:21:5e:77:81:4b:1b:14:
0f:14:34:b4:38:4a:e1:60:81:eb:a3:03:23:a7:c5:
2a:8f:7d:3b:c6:6e:2e:c2:30:ca:9f:f1:f4:95:d0:
ca:92:74:8e:fe:c1:59:9c:77:fe:95:10:20:fc:4e:
b2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:11:D6:C4:96:FC:F3:51:EA:BE:0A:FA:FD:B9:15:C7:33:D8:B4:9D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/oxHWxJb881Hqvgr6_bkVxzPYtJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.188.0/24
194.87.75.0/24
194.87.229.0/24
195.133.43.0/24
195.133.95.0/24
212.192.252.0/24
Signature Algorithm: sha256WithRSAEncryption
09:f0:97:ef:ce:e1:19:30:80:e8:2c:f6:3f:32:bf:28:21:28:
f9:3c:eb:24:2e:a6:6a:90:f3:c7:7a:27:91:3f:4a:99:9d:3b:
95:d1:60:66:6d:92:95:69:11:77:84:8a:c0:2b:36:45:26:ef:
bb:4d:e9:af:96:45:dc:ae:3b:44:fc:86:0c:ce:ae:95:c2:ae:
66:19:99:a3:33:1b:f6:54:69:e3:4a:b9:bd:09:5e:e1:b6:f4:
de:bd:c2:3e:e5:44:26:14:e2:07:7a:55:e1:47:cf:22:bf:8d:
45:8a:6c:bf:b1:fd:38:33:18:30:59:b9:39:53:9a:24:f7:9f:
6b:51:d4:5f:74:e6:b5:67:bd:b0:6d:18:4d:50:75:62:c0:e7:
72:37:68:27:eb:56:f3:76:39:1e:72:b2:49:47:5d:b7:d7:21:
4d:98:eb:17:11:71:09:d7:6b:1e:e4:96:dc:a3:f6:38:a1:2e:
7a:11:c8:76:f4:3b:f3:4a:46:36:a9:11:fe:e4:3d:4b:68:a5:
11:98:e0:a9:48:35:91:9b:fc:94:90:bd:b0:6c:6b:91:9c:28:
ed:7e:bb:77:55:b6:a0:bb:c9:ec:8b:d0:92:62:ee:75:e9:9d:
5a:7f:bc:a4:c2:9c:e7:84:95:5f:73:1e:49:ca:c5:ed:af:01:
60:a0:83:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 09:00:24 2026 by rpki-client