Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/oKvGombAP6zFiKxQyPCxsJpdsV8.roa
File: oKvGombAP6zFiKxQyPCxsJpdsV8.roa (raw, json)
Hash identifier: OHBBt8TvhvG6NzZ25cC5UsyV6FmN521L3MqKZPmEqtI=
Subject key identifier: A0:AB:C6:A2:66:C0:3F:AC:C5:88:AC:50:C8:F0:B1:B0:9A:5D:B1:5F
Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Certificate serial: 01A000BA59A923B501EBFB912C4B50107651
Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/oKvGombAP6zFiKxQyPCxsJpdsV8.roa
Signing time: Fri 14 Aug 2026 14:43:27 +0000
ROA not before: Fri 14 Aug 2026 14:43:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214143
IP address blocks: 212.11.1.0/24 maxlen: 24
212.11.2.0/24 maxlen: 24
212.11.3.0/24 maxlen: 24
212.11.4.0/24 maxlen: 24
212.11.5.0/24 maxlen: 24
212.11.7.0/24 maxlen: 24
212.11.11.0/24 maxlen: 24
212.11.12.0/24 maxlen: 24
212.11.14.0/24 maxlen: 24
212.11.15.0/24 maxlen: 24
212.11.45.0/24 maxlen: 24
212.11.46.0/24 maxlen: 24
212.11.47.0/24 maxlen: 24
212.11.50.0/24 maxlen: 24
212.11.51.0/24 maxlen: 24
212.11.53.0/24 maxlen: 24
212.11.54.0/24 maxlen: 24
212.11.56.0/24 maxlen: 24
212.11.57.0/24 maxlen: 24
212.11.58.0/24 maxlen: 24
212.11.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ba:59:a9:23:b5:01:eb:fb:91:2c:4b:50:10:76:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Validity
Not Before: Aug 14 14:43:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0abc6a266c03facc588ac50c8f0b1b09a5db15f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e0:c4:48:47:a9:a2:8e:e4:43:1a:27:c6:23:
08:33:5c:fb:a5:49:c9:17:9d:9a:3b:b3:cf:55:ca:
d4:9d:33:fd:af:b6:09:23:18:3e:6d:93:f6:c1:ba:
45:28:0c:42:97:29:f8:b4:55:a7:74:b9:e7:0b:7e:
fb:36:f3:5f:8d:71:d8:5c:3c:7e:1d:da:5e:f9:76:
50:4f:46:cb:8d:4e:fc:f5:c8:09:c2:8f:bb:fe:e0:
8f:00:56:39:cf:40:2c:a9:3f:84:f6:f1:de:96:15:
ca:0a:0f:7a:28:c6:f0:4a:32:62:8f:8e:71:52:14:
09:83:93:c3:4a:2a:97:57:ae:af:25:22:ad:c4:71:
41:9c:e5:38:db:14:41:57:92:08:c3:ed:27:cf:fe:
ab:3c:ef:9c:f3:a6:ef:7b:d0:6e:1d:29:b0:48:85:
10:b4:59:17:67:9a:bf:92:92:6d:23:1c:20:a2:51:
a6:6a:21:61:f5:c6:bf:d7:f7:55:1f:40:03:f9:18:
de:eb:cf:8b:65:73:de:4e:20:63:a0:36:00:7a:b0:
95:56:08:63:d8:fb:45:64:1f:c8:03:16:d1:d7:81:
fa:2d:73:29:25:72:c4:8a:ad:6c:d0:07:f8:00:19:
bf:f7:dd:11:b5:de:d7:bd:3c:2a:88:f2:b2:54:35:
67:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AB:C6:A2:66:C0:3F:AC:C5:88:AC:50:C8:F0:B1:B0:9A:5D:B1:5F
X509v3 Authority Key Identifier:
keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/oKvGombAP6zFiKxQyPCxsJpdsV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.11.1.0-212.11.5.255
212.11.7.0/24
212.11.11.0-212.11.12.255
212.11.14.0/23
212.11.45.0-212.11.47.255
212.11.50.0/23
212.11.53.0-212.11.54.255
212.11.56.0/22
Signature Algorithm: sha256WithRSAEncryption
83:13:4d:ba:f5:b9:e8:b7:ff:ae:f0:d0:58:65:9d:b2:b7:95:
64:86:72:ae:72:19:79:47:be:b5:18:31:91:d5:0d:c3:6a:de:
16:c4:0d:c6:d3:65:f7:51:94:f3:56:b9:ef:e2:3e:9c:cf:cc:
00:63:51:eb:c0:39:17:66:49:f7:ea:80:65:2e:16:d6:16:09:
9f:04:58:8c:b6:12:d0:8e:63:e2:0e:a6:bc:34:c2:78:10:2c:
0e:36:0f:57:26:44:61:c0:ea:cf:cc:3c:59:c0:76:04:18:35:
17:f2:0d:a2:ab:11:fc:14:a1:ba:43:2d:44:53:3e:36:42:b7:
51:e1:43:2f:69:06:55:3e:de:cf:14:b9:69:d0:e9:82:ff:f3:
ea:63:34:43:ea:b6:b1:81:69:97:eb:77:e1:d1:1e:45:7e:ce:
bf:d0:0e:36:4e:37:e9:2f:3e:50:ec:2a:1e:cf:21:0b:8a:f7:
62:37:86:ea:92:55:b1:1c:05:46:14:7d:b4:ed:ac:ee:69:a7:
3e:97:5e:d7:6f:ae:6d:4a:48:06:1e:fd:92:60:96:ab:9d:85:
1d:91:1f:5e:9d:66:ca:5c:6c:2c:19:ee:39:7a:cf:19:7e:33:
75:55:cb:ad:4a:0f:9f:bd:e2:bc:c8:1d:55:b4:cf:34:35:6c:
34:7d:f9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 21:55:30 2026 by rpki-client