Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ociSZOFMBPHCgPB_xEzLYBb-UrY.roa
File: ociSZOFMBPHCgPB_xEzLYBb-UrY.roa (raw, json)
Hash identifier: y6EyN795RUjzjkRwT7Viz2ZMJ7Mvtu97MiF8+wPTNWE=
Subject key identifier: A1:C8:92:64:E1:4C:04:F1:C2:80:F0:7F:C4:4C:CB:60:16:FE:52:B6
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A06DDE9F4E71092625AE64CF60E0BB00FE
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ociSZOFMBPHCgPB_xEzLYBb-UrY.roa
Signing time: Fri 04 Sep 2026 19:21:41 +0000
ROA not before: Fri 04 Sep 2026 19:21:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26383
IP address blocks: 62.76.232.0/24 maxlen: 24
62.76.234.0/24 maxlen: 24
62.76.238.0/24 maxlen: 24
62.76.239.0/24 maxlen: 24
192.124.172.0/24 maxlen: 24
192.124.175.0/24 maxlen: 24
192.124.176.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
193.108.112.0/24 maxlen: 24
193.124.2.0/24 maxlen: 24
193.124.22.0/24 maxlen: 24
193.124.41.0/24 maxlen: 24
193.124.46.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.39.0/24 maxlen: 24
194.58.40.0/24 maxlen: 24
194.58.66.0/24 maxlen: 24
194.58.68.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
194.87.10.0/24 maxlen: 24
194.87.17.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
194.87.39.0/24 maxlen: 24
194.87.41.0/24 maxlen: 24
194.87.47.0/24 maxlen: 24
194.87.48.0/24 maxlen: 24
194.87.58.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.89.0/24 maxlen: 24
194.87.105.0/24 maxlen: 24
194.87.106.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.123.0/24 maxlen: 24
194.87.125.0/24 maxlen: 24
194.87.128.0/24 maxlen: 24
194.87.137.0/24 maxlen: 24
194.87.162.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
194.87.227.0/24 maxlen: 24
194.87.230.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.245.0/24 maxlen: 24
195.58.47.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
195.133.67.0/24 maxlen: 24
195.133.83.0/24 maxlen: 24
195.133.92.0/24 maxlen: 24
212.192.223.0/24 maxlen: 24
212.193.1.0/24 maxlen: 24
212.193.2.0/24 maxlen: 24
212.193.6.0/24 maxlen: 24
212.193.18.0/24 maxlen: 24
212.193.20.0/24 maxlen: 24
212.193.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:de:9f:4e:71:09:26:25:ae:64:cf:60:e0:bb:00:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 4 19:21:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1c89264e14c04f1c280f07fc44ccb6016fe52b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5e:f7:80:83:e5:ca:33:fd:cc:0a:12:2a:81:
16:fa:96:7b:e2:da:94:08:73:5f:4a:81:6a:65:25:
f8:d1:64:b8:1c:ee:5f:b1:bf:56:30:03:05:e2:51:
47:cb:f7:c0:7f:5a:ec:dc:57:ee:f4:e2:11:64:a4:
5d:9a:a3:8a:90:8c:bf:87:54:6e:c3:f1:d9:71:f2:
0d:2a:5a:17:4b:e0:10:af:d5:dc:78:bb:0a:6f:dc:
c7:7b:70:67:38:6b:19:d6:06:3b:8b:12:d0:1b:28:
8b:e4:67:ec:5a:6c:e9:96:de:cc:de:3b:28:d9:ce:
1e:e6:8d:d6:f1:a9:98:af:b9:e7:8c:8a:76:e9:d5:
68:7a:a1:cc:97:b1:2e:57:04:4b:2e:79:f5:cd:e2:
3a:0f:12:fe:26:5e:75:fa:7b:9f:32:71:2b:2d:5f:
ea:5e:e0:fa:fc:96:b8:7e:80:8b:b6:06:c7:44:ee:
36:59:0d:bd:1b:61:85:3c:21:2e:c8:69:a4:bb:f1:
9d:08:f3:82:c3:76:a7:8f:a5:9c:60:6f:47:29:dc:
31:fd:d3:bf:6f:62:a1:00:a5:2d:cc:07:dd:cc:24:
09:4f:7d:d2:a2:59:ef:23:8f:5f:4f:fc:c1:1b:d6:
fc:5d:78:75:4b:e1:66:04:45:8e:5b:ff:07:e5:fb:
c4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C8:92:64:E1:4C:04:F1:C2:80:F0:7F:C4:4C:CB:60:16:FE:52:B6
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ociSZOFMBPHCgPB_xEzLYBb-UrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.232.0/24
62.76.234.0/24
62.76.238.0/23
192.124.172.0/24
192.124.175.0-192.124.176.255
192.124.209.0/24
193.108.112.0/24
193.124.2.0/24
193.124.22.0/24
193.124.41.0/24
193.124.46.0/24
194.58.38.0-194.58.40.255
194.58.66.0/24
194.58.68.0/24
194.87.2.0/24
194.87.10.0/24
194.87.17.0-194.87.18.255
194.87.23.0/24
194.87.30.0/24
194.87.39.0/24
194.87.41.0/24
194.87.47.0-194.87.48.255
194.87.58.0/24
194.87.73.0/24
194.87.82.0/24
194.87.89.0/24
194.87.105.0-194.87.106.255
194.87.108.0/24
194.87.123.0/24
194.87.125.0/24
194.87.128.0/24
194.87.137.0/24
194.87.162.0/24
194.87.178.0/24
194.87.198.0/24
194.87.227.0/24
194.87.230.0/24
194.87.240.0/24
194.87.245.0/24
195.58.47.0/24
195.133.55.0/24
195.133.67.0/24
195.133.83.0/24
195.133.92.0/24
212.192.223.0/24
212.193.1.0-212.193.2.255
212.193.6.0/24
212.193.18.0/24
212.193.20.0/24
212.193.23.0/24
Signature Algorithm: sha256WithRSAEncryption
66:99:17:ac:4e:07:35:cb:2a:bf:b7:9a:4a:c9:a5:07:d3:ce:
2e:83:29:1e:61:30:76:0d:26:aa:6f:eb:ab:4b:83:fa:02:39:
dc:fe:63:c7:a5:4f:2c:40:64:d8:7d:e4:c9:9f:4f:2c:25:1d:
aa:4a:28:04:da:5a:ef:2d:db:8d:6d:db:72:9a:8f:18:86:a4:
19:8d:ff:c5:c5:dc:32:fe:38:02:44:16:59:16:5f:6b:54:b8:
19:41:d3:5c:29:20:6e:29:7b:40:e5:05:58:01:9b:cc:1b:80:
02:01:c9:18:44:59:b7:fe:bd:17:c2:1a:47:a9:34:14:30:b0:
1a:e1:25:cc:9f:a5:9d:a0:cd:7d:f0:ca:51:87:3a:3b:02:fe:
18:12:25:75:1e:c2:77:33:8d:52:89:86:17:5b:3f:bb:2d:cc:
61:8b:02:cf:13:7e:c2:93:0c:0c:50:5b:10:f3:bd:aa:84:df:
39:8c:48:5d:fa:4f:72:6d:79:2b:cd:0d:32:70:6e:5d:5f:d8:
eb:da:67:36:f7:18:d2:07:47:20:22:22:81:66:a0:a0:bf:40:
0a:0b:c3:25:ff:32:14:f2:35:83:0f:9a:a0:d5:4c:d9:58:aa:
86:3f:4c:40:12:11:74:d0:1c:5a:4f:14:14:5e:82:d3:8e:92:
07:3b:6f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:09:03 2026 by rpki-client