Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/oywwoa3u6O9SBHQ8yKsKSnYKa7c.roa
File: oywwoa3u6O9SBHQ8yKsKSnYKa7c.roa (raw, json)
Hash identifier: KgxXs067QD5Y09mePRyVF8hKQftpA+Ff/I39BypEv98=
Subject key identifier: A3:2C:30:A1:AD:EE:E8:EF:52:04:74:3C:C8:AB:0A:4A:76:0A:6B:B7
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 01A0FD1A8C59A18C99B1D8F4860375B794DC
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/oywwoa3u6O9SBHQ8yKsKSnYKa7c.roa
Signing time: Fri 02 Oct 2026 14:52:50 +0000
ROA not before: Fri 02 Oct 2026 14:52:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15562
IP address blocks: 194.32.71.0/24 maxlen: 24
2001:728:1808::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:1a:8c:59:a1:8c:99:b1:d8:f4:86:03:75:b7:94:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Oct 2 14:52:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a32c30a1adeee8ef5204743cc8ab0a4a760a6bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:89:d1:19:8f:fa:87:b4:71:a9:1f:42:ea:92:
ae:f1:9e:b9:a4:4d:3a:5e:23:36:c8:d5:33:cb:01:
21:b2:6e:7d:e2:df:be:54:85:cc:2c:5c:ef:17:bb:
19:aa:7b:25:f0:2b:33:2c:e8:aa:d3:0d:f1:bf:c7:
09:d6:40:05:18:82:46:6a:6b:58:d3:e1:30:71:2c:
56:a7:41:0a:57:e1:98:3b:e4:9e:6a:b9:71:dd:9c:
c5:7f:19:76:18:e2:ff:c7:ab:82:ab:68:bd:d2:98:
64:b7:9f:ce:98:8c:13:a3:bd:93:c1:ec:76:23:cb:
ba:06:3d:be:29:ec:69:01:9a:fd:63:7d:91:6c:33:
cd:0e:cc:50:71:ef:f4:22:2c:46:0c:20:3f:0d:d2:
18:31:bf:16:d9:91:34:81:e4:36:b4:b9:bf:02:bc:
76:f2:c2:6c:c5:bd:ff:f2:aa:6b:0c:e2:8d:92:c2:
90:e1:29:a6:9a:c6:cf:be:54:ee:d0:66:90:cc:64:
11:d9:f6:9e:7b:ed:e3:ca:14:c1:5b:0a:a7:ae:a6:
5f:f8:5e:e7:f5:79:bc:73:74:70:b5:f9:c2:ba:ce:
bb:2a:c0:b3:31:94:f7:7f:bf:2f:dd:c1:b8:d1:90:
dd:db:33:84:32:03:ed:31:7e:bb:c8:a7:8d:f0:46:
11:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:2C:30:A1:AD:EE:E8:EF:52:04:74:3C:C8:AB:0A:4A:76:0A:6B:B7
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/oywwoa3u6O9SBHQ8yKsKSnYKa7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.71.0/24
IPv6:
2001:728:1808::/48
Signature Algorithm: sha256WithRSAEncryption
91:1a:55:5d:4c:55:72:8e:df:8f:cf:11:67:84:fb:0c:64:b3:
d5:6f:2d:2e:eb:78:02:d3:9f:d5:1d:bc:ff:3d:d3:53:fc:2a:
ab:a3:4e:94:63:f5:20:7b:32:7c:c2:bc:39:83:28:27:0a:37:
8b:f4:5f:02:d6:63:b5:4a:e1:5f:4a:df:67:6c:22:3c:f7:6a:
54:3a:48:81:f3:cc:07:83:54:07:3c:da:c1:cf:3d:a4:f9:ab:
e1:41:7c:ed:21:0c:39:c2:7c:89:83:77:e9:fc:40:33:dd:da:
40:9a:bd:84:06:94:e5:33:6d:a6:2c:47:c7:d7:56:6e:3d:6c:
0d:25:37:05:07:d0:8d:f1:7c:6e:14:be:4b:a0:55:c5:68:ff:
86:38:ec:fa:32:ef:02:15:d0:5a:29:19:65:85:7b:15:d1:d2:
8d:70:4c:fc:a9:d8:81:b5:b1:85:65:40:b7:61:96:fd:b9:35:
ce:a3:00:51:15:57:96:6b:ee:1b:ed:2a:79:54:65:6c:5a:5d:
1d:7d:1f:5b:be:04:f9:74:a1:5d:20:8d:13:a9:1d:a9:54:16:
10:d0:b4:0f:a4:5c:bb:ba:06:54:00:bf:4f:09:c9:78:a6:90:
9b:8c:45:78:f1:ff:60:11:fe:c5:d8:9b:db:fa:b2:d6:d7:05:
65:04:62:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:38:28 2026 by rpki-client