Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/ojrMPx1-tQNbAF4hMIUgHuBaYeE.roa
File: ojrMPx1-tQNbAF4hMIUgHuBaYeE.roa (raw, json)
Hash identifier: F2Akw9SRKWHNYtCBe57Z5/dMgA6NRuzoGi2Gdg4KMiM=
Subject key identifier: A2:3A:CC:3F:1D:7E:B5:03:5B:00:5E:21:30:85:20:1E:E0:5A:61:E1
Certificate issuer: /CN=f30e445195b64d799b822e99947792e0cab32b6d
Certificate serial: 019F1251C47B356E8E03311BC8A5FF89413D
Authority key identifier: F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/ojrMPx1-tQNbAF4hMIUgHuBaYeE.roa
Signing time: Mon 29 Jun 2026 07:39:36 +0000
ROA not before: Mon 29 Jun 2026 07:39:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17497
IP address blocks: 189.13.158.0/24 maxlen: 24
189.13.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 11:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:51:c4:7b:35:6e:8e:03:31:1b:c8:a5:ff:89:41:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f30e445195b64d799b822e99947792e0cab32b6d
Validity
Not Before: Jun 29 07:39:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a23acc3f1d7eb5035b005e213085201ee05a61e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b8:57:4f:e1:eb:ea:cf:8d:17:bc:3c:ff:44:
32:37:cd:8f:a9:94:d4:a7:a4:32:d8:38:12:fe:3b:
7d:a9:35:d1:a4:26:a5:2b:69:8a:55:ae:d6:29:bf:
b7:89:b4:e2:68:f2:86:df:32:b0:e1:2d:25:cd:3e:
ff:e1:79:1c:74:16:2b:7a:37:49:73:09:db:cd:a3:
73:99:f6:a6:44:b1:88:43:6e:de:70:9f:82:c8:06:
1b:79:68:3b:e6:42:5e:91:26:e7:43:e9:75:89:d3:
5e:f2:68:e9:0a:ec:8e:a7:55:a9:5d:5d:59:1f:94:
fe:56:6b:4c:47:2e:a1:c8:3a:61:a6:f9:c4:84:5c:
43:d7:b0:ab:53:cf:5f:ae:99:c2:cf:e0:60:5a:5d:
44:a5:94:e2:51:b0:2e:c1:8c:97:7b:d1:b3:5a:a4:
cc:ba:5c:67:07:f0:1c:3f:fc:63:43:91:76:1e:34:
a5:21:e3:aa:2c:7e:92:98:a8:f8:54:e7:5d:cf:04:
7c:03:08:d0:26:1d:2c:73:f6:d3:ff:20:f3:e6:a1:
69:6f:87:e5:20:f6:41:80:a2:2f:19:68:86:b3:68:
4d:df:ad:92:7b:71:62:2a:0e:e7:f6:9f:09:39:88:
4e:7d:be:9a:bb:3b:b6:9d:8c:c9:a4:aa:97:74:f9:
b0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3A:CC:3F:1D:7E:B5:03:5B:00:5E:21:30:85:20:1E:E0:5A:61:E1
X509v3 Authority Key Identifier:
keyid:F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/ojrMPx1-tQNbAF4hMIUgHuBaYeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.13.158.0/23
Signature Algorithm: sha256WithRSAEncryption
16:13:1a:f5:cb:80:52:fe:82:e6:50:4c:d6:5c:90:b6:31:87:
96:14:99:fb:a0:cc:9e:bc:cf:a1:c4:36:fb:a3:67:a5:32:f1:
f5:e6:46:c1:1f:af:d8:92:96:fb:40:dd:fb:c9:bc:04:d7:eb:
30:9d:a8:57:32:63:58:3b:0c:93:ec:aa:df:e4:9c:7c:40:a1:
55:e0:b8:e7:2b:24:ff:55:09:d1:30:36:e6:e1:cf:7b:68:37:
a1:60:49:45:30:5e:d6:f9:b4:a5:79:f0:4b:b6:69:5d:9f:36:
21:51:18:d2:9e:a0:0c:52:6b:46:4d:93:90:b0:64:eb:7f:a9:
00:b1:80:b5:51:4e:e6:77:67:7a:55:78:88:9d:58:93:5a:5b:
e9:99:ab:f2:d1:f7:cc:10:f4:3c:c0:b2:05:6c:81:7f:f8:94:
cd:04:c5:85:dc:1f:28:56:45:48:de:8d:38:3f:2d:82:92:e6:
48:a4:0f:a1:ec:2d:90:e7:bf:f5:6f:38:1d:7f:f5:e0:06:68:
e2:49:8c:58:26:59:5a:87:93:77:59:7b:2e:86:30:df:ab:18:
3f:96:2d:bf:9a:83:e9:98:a9:51:8d:8a:74:ce:17:bc:22:0d:
e5:e8:27:65:4a:96:ab:2d:90:86:4e:08:bd:d2:c1:ba:be:05:
5a:a5:db:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:01:48 2026 by rpki-client