Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/oDlowibchCJh1kFcZKTYGmPxeww.roa
File: oDlowibchCJh1kFcZKTYGmPxeww.roa (raw, json)
Hash identifier: GrdlCwNl7L8rfiQBP6o71qRezxhAe2vGEE7Ynkj8Aq0=
Subject key identifier: A0:39:68:C2:26:DC:84:22:61:D6:41:5C:64:A4:D8:1A:63:F1:7B:0C
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 019FFF4A0079928F4F4288761171B5A45CDC
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/oDlowibchCJh1kFcZKTYGmPxeww.roa
Signing time: Fri 14 Aug 2026 08:01:07 +0000
ROA not before: Fri 14 Aug 2026 08:01:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208258
IP address blocks: 45.141.204.0/23 maxlen: 24
45.144.244.0/23 maxlen: 24
45.144.246.0/24 maxlen: 24
45.151.156.0/23 maxlen: 24
45.151.156.0/24 maxlen: 24
45.151.158.0/24 maxlen: 24
45.151.159.0/24 maxlen: 24
45.154.238.0/24 maxlen: 24
45.154.239.0/24 maxlen: 24
45.159.192.0/23 maxlen: 23
45.159.194.0/24 maxlen: 24
109.206.248.0/22 maxlen: 22
185.208.208.0/24 maxlen: 24
185.208.210.0/24 maxlen: 24
185.208.211.0/24 maxlen: 24
185.227.82.0/24 maxlen: 24
185.228.80.0/24 maxlen: 24
185.228.83.0/24 maxlen: 24
185.232.85.0/24 maxlen: 24
185.243.112.0/24 maxlen: 24
185.243.113.0/24 maxlen: 24
195.26.6.0/24 maxlen: 24
195.26.7.0/24 maxlen: 24
195.88.226.0/23 maxlen: 23
213.185.86.0/23 maxlen: 23
2a0b:3c40:1::/48 maxlen: 48
2a0b:3c40:2::/48 maxlen: 48
2a0b:3c40:3::/48 maxlen: 48
2a0b:3c40:7::/48 maxlen: 48
2a0b:3c40:9::/48 maxlen: 48
2a0b:3c40:11::/48 maxlen: 48
2a0b:3c40:12::/48 maxlen: 48
2a0b:3c40:14::/48 maxlen: 48
2a0b:3c40:15::/48 maxlen: 48
2a0b:3c40:16::/48 maxlen: 48
2a0b:3c40:17::/48 maxlen: 48
2a0b:3c40:20::/48 maxlen: 48
2a0b:3c40:21::/48 maxlen: 48
2a0b:3c40:25::/48 maxlen: 48
2a0b:3c40:f1::/48 maxlen: 48
2a0b:3c40:fca6::/48 maxlen: 48
2a0e:5540::/48 maxlen: 48
2a0e:5540:10::/48 maxlen: 48
2a0e:5540:11::/48 maxlen: 48
2a0e:5540:12::/48 maxlen: 48
2a0e:5540:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ff:4a:00:79:92:8f:4f:42:88:76:11:71:b5:a4:5c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Aug 14 08:01:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a03968c226dc842261d6415c64a4d81a63f17b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:81:b6:94:3b:e4:a2:e2:79:a3:0e:fc:94:d8:
33:94:9c:8c:b9:ad:ff:b0:6f:63:b5:8b:dd:57:bd:
23:60:49:cc:1f:3f:35:00:1d:2f:01:c8:fd:cb:8a:
58:7f:86:97:af:94:e8:60:b7:6e:e5:12:cc:04:10:
28:53:f0:d0:57:7d:46:b9:ea:eb:56:5f:b2:78:b6:
ac:fc:77:08:2e:bf:8e:a5:5f:04:ef:8d:79:a3:97:
7e:83:f6:64:32:57:c3:f6:41:01:ba:50:ed:ae:44:
a7:46:41:15:cb:c6:dc:f0:d8:1d:95:1f:58:be:ce:
28:be:2c:dc:e2:3b:25:db:23:16:6b:66:e3:92:39:
16:7e:52:7e:df:aa:51:93:0b:e6:70:91:71:48:21:
47:4e:93:4f:15:6d:2c:ef:0e:0b:84:4d:f8:91:a7:
b9:7f:2f:7d:ad:eb:b4:82:12:89:c2:b9:d8:d2:fd:
55:ed:9b:ac:bb:9d:61:a0:1b:22:44:a2:6f:fc:e2:
65:1a:5d:35:e7:85:a6:00:95:0d:c5:d0:da:18:34:
ed:d6:5b:07:10:9d:51:7d:e6:b1:c1:7e:cc:78:d2:
8c:ce:9e:4d:23:89:2b:46:55:b7:8f:6f:8d:08:14:
c0:ca:8d:1c:cb:a9:0f:9a:40:a0:5b:9c:20:36:6a:
cd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:39:68:C2:26:DC:84:22:61:D6:41:5C:64:A4:D8:1A:63:F1:7B:0C
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/oDlowibchCJh1kFcZKTYGmPxeww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.204.0/23
45.144.244.0-45.144.246.255
45.151.156.0/22
45.154.238.0/23
45.159.192.0-45.159.194.255
109.206.248.0/22
185.208.208.0/24
185.208.210.0/23
185.227.82.0/24
185.228.80.0/24
185.228.83.0/24
185.232.85.0/24
185.243.112.0/23
195.26.6.0/23
195.88.226.0/23
213.185.86.0/23
IPv6:
2a0b:3c40:1::-2a0b:3c40:3:ffff:ffff:ffff:ffff:ffff
2a0b:3c40:7::/48
2a0b:3c40:9::/48
2a0b:3c40:11::-2a0b:3c40:12:ffff:ffff:ffff:ffff:ffff
2a0b:3c40:14::/46
2a0b:3c40:20::/47
2a0b:3c40:25::/48
2a0b:3c40:f1::/48
2a0b:3c40:fca6::/48
2a0e:5540::/48
2a0e:5540:10::-2a0e:5540:12:ffff:ffff:ffff:ffff:ffff
2a0e:5540:100::/48
Signature Algorithm: sha256WithRSAEncryption
65:b1:f3:67:5d:0d:ed:89:48:05:a6:0a:53:c6:11:b1:50:bb:
ae:e0:f8:c8:27:0b:1a:8a:36:9c:5e:7d:68:c1:5d:47:30:85:
13:fb:6d:8f:e6:3f:b6:ff:78:c8:86:15:10:35:09:74:59:8c:
8f:77:04:3c:81:c6:4a:d4:d8:2f:c5:91:9b:b1:01:a7:d9:2a:
37:17:c3:5a:e4:af:7d:ed:a3:a3:9a:0d:fb:11:f4:9b:d3:09:
3e:1a:b3:78:0b:e7:f2:3d:79:27:d4:55:1f:20:1b:91:9e:fe:
c4:e3:2d:76:b3:31:b7:ae:4d:0f:35:29:36:c2:f0:18:db:f3:
df:60:a7:a8:e7:c9:93:4a:cc:61:6a:1e:6b:58:f3:e0:60:6d:
66:26:79:f0:59:96:a2:c5:e3:bf:a9:83:bd:be:cd:98:f0:37:
0b:38:fd:90:b0:15:18:f4:59:16:54:68:2d:04:d6:4f:c8:00:
f7:1c:3a:24:6d:d7:60:6c:94:d9:42:7b:b0:a5:66:c4:fa:7b:
d7:a5:d0:5d:01:0f:54:ca:eb:46:32:69:cd:d4:2c:fd:db:7a:
05:00:24:3e:5d:91:67:06:a7:1c:e3:1f:3e:5d:7e:c1:3c:74:
52:14:ff:69:b3:78:93:81:97:6c:d4:07:26:62:8b:db:c4:88:
96:5b:f6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:49:35 2026 by rpki-client