Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/oHc-nkmsilbbiDnBph8w8RWDedE.roa
File: oHc-nkmsilbbiDnBph8w8RWDedE.roa (raw, json)
Hash identifier: psoNkHS46YmFs3DN1g4YoQU6t9obCYJJ0aBEy2Qjzvs=
Subject key identifier: A0:77:3E:9E:49:AC:8A:56:DB:88:39:C1:A6:1F:30:F1:15:83:79:D1
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 019E4C79E34EE88E1D4F83204787D6AA9034
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/oHc-nkmsilbbiDnBph8w8RWDedE.roa
Signing time: Thu 21 May 2026 21:38:36 +0000
ROA not before: Thu 21 May 2026 21:38:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205406
IP address blocks: 45.151.156.0/24 maxlen: 24
45.151.157.0/24 maxlen: 24
45.151.158.0/24 maxlen: 24
45.154.238.0/24 maxlen: 24
185.208.209.0/24 maxlen: 24
185.208.210.0/24 maxlen: 24
185.227.82.0/24 maxlen: 24
185.228.83.0/24 maxlen: 24
185.243.112.0/24 maxlen: 24
185.243.113.0/24 maxlen: 24
195.26.6.0/24 maxlen: 24
2a0b:3c40:1::/48 maxlen: 48
2a0b:3c40:7::/48 maxlen: 48
2a0b:3c40:11::/48 maxlen: 48
2a0b:3c40:15::/48 maxlen: 48
2a0b:3c40:16::/48 maxlen: 48
2a0b:3c40:f1::/48 maxlen: 48
2a0e:5540:10::/48 maxlen: 48
2a0e:5540:11::/48 maxlen: 48
2a0e:5540:12::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4c:79:e3:4e:e8:8e:1d:4f:83:20:47:87:d6:aa:90:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: May 21 21:38:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0773e9e49ac8a56db8839c1a61f30f1158379d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:de:b7:93:0c:ec:77:ce:3b:7d:6b:76:f9:70:
21:7d:e0:3c:77:b4:ca:39:e6:a0:b6:d4:65:dd:df:
0e:e2:de:04:3e:b1:58:7d:91:2e:c1:eb:3f:07:cb:
2f:7f:76:a8:30:b2:00:7f:3b:a4:0a:88:8d:45:2a:
f9:db:43:81:9b:43:78:7f:27:74:c2:00:7e:25:26:
1e:6a:5f:b5:2e:1f:5f:32:48:82:4f:b5:67:f2:cd:
72:ed:d3:1a:9d:3d:4b:d8:7c:42:04:10:75:05:f4:
9b:df:7f:72:2e:a7:54:2a:73:a5:a1:28:49:4f:6c:
04:21:ad:72:5f:79:e8:5f:d0:21:44:a0:4c:db:75:
ee:45:86:12:b3:4c:2f:d8:57:3c:2c:b7:27:c0:2d:
af:e9:de:c5:58:d5:78:a5:af:0c:37:91:f3:64:86:
0f:f9:47:91:ab:af:22:94:00:7f:a9:34:ba:11:67:
76:5d:0d:63:ea:08:0e:39:e8:e7:1e:d4:63:75:9a:
8b:cd:6e:27:28:c4:6b:ff:ff:98:a0:87:77:19:da:
fc:38:59:a6:98:4e:6e:92:95:93:36:cd:80:e6:61:
51:0c:e4:ab:1c:39:2c:fd:06:b4:c6:43:e7:be:8d:
ba:9e:66:a1:39:42:70:0b:e9:08:04:32:62:e4:04:
b3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:77:3E:9E:49:AC:8A:56:DB:88:39:C1:A6:1F:30:F1:15:83:79:D1
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/oHc-nkmsilbbiDnBph8w8RWDedE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.156.0-45.151.158.255
45.154.238.0/24
185.208.209.0-185.208.210.255
185.227.82.0/24
185.228.83.0/24
185.243.112.0/23
195.26.6.0/24
IPv6:
2a0b:3c40:1::/48
2a0b:3c40:7::/48
2a0b:3c40:11::/48
2a0b:3c40:15::-2a0b:3c40:16:ffff:ffff:ffff:ffff:ffff
2a0b:3c40:f1::/48
2a0e:5540:10::-2a0e:5540:12:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
12:cd:95:9e:ad:6e:26:ab:69:43:11:bc:19:71:d6:5a:46:73:
b8:db:4b:4c:7e:7c:81:a3:73:d2:fd:a2:1d:55:1c:c1:ad:62:
d5:d5:e0:2a:e0:23:b4:8c:e1:d2:71:a7:11:a8:6e:9e:45:e6:
8d:4e:0f:97:9b:6c:f2:8f:6b:d7:48:16:e0:f2:7b:23:6f:de:
9f:58:af:6a:67:03:ef:2a:ae:4d:eb:bc:9f:a8:d3:af:41:ba:
b0:53:a9:59:89:f5:2d:69:21:67:08:bd:8f:fa:aa:91:c4:6d:
8f:1b:9d:f0:b7:44:1e:7a:0a:e2:7f:8e:83:64:b5:79:7a:89:
c3:15:72:34:4d:95:d4:f4:da:29:7d:0b:dc:b0:de:f4:0a:b5:
41:bb:e9:18:57:6e:79:72:d3:2e:12:0b:7b:12:99:a3:4a:b3:
3f:3d:70:64:6b:e1:98:56:54:3f:1e:e7:46:4c:04:95:f9:b0:
ef:05:ff:69:9f:ad:fd:0c:52:16:20:82:3e:ac:e3:0d:38:02:
91:1d:b2:83:ae:ec:26:a6:90:a6:91:24:e7:0d:d6:36:83:ae:
c1:65:81:a2:1d:71:11:70:29:52:6f:1d:99:0d:7d:94:32:21:
c5:0a:6e:13:23:d4:fe:a0:a8:7a:c8:3a:8e:ab:a4:50:b3:f7:
6e:86:c1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:03:47 2026 by rpki-client