Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/OOLI65R0yCKZEu3Vq7zDXU2EWX4.roa
File: OOLI65R0yCKZEu3Vq7zDXU2EWX4.roa (raw, json)
Hash identifier: 4DqbTA05LGH4CBe/nZXvETcQrYnAANXi1pLFxFMD7zg=
Subject key identifier: 38:E2:C8:EB:94:74:C8:22:99:12:ED:D5:AB:BC:C3:5D:4D:84:59:7E
Certificate issuer: /CN=c5f152b6a0d004627d285d879aa83e58461ab2df
Certificate serial: 01A11BC56FF55BC78FFE534DD26F6A20ECAC
Authority key identifier: C5:F1:52:B6:A0:D0:04:62:7D:28:5D:87:9A:A8:3E:58:46:1A:B2:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/OOLI65R0yCKZEu3Vq7zDXU2EWX4.roa
Signing time: Thu 08 Oct 2026 13:48:06 +0000
ROA not before: Thu 08 Oct 2026 13:48:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28686
IP address blocks: 93.191.255.0/24 maxlen: 24
103.55.232.0/22 maxlen: 22
159.168.0.0/16 maxlen: 16
159.168.0.0/24 maxlen: 24
159.168.1.0/24 maxlen: 24
159.168.7.0/24 maxlen: 24
159.168.12.0/24 maxlen: 24
159.168.14.0/24 maxlen: 24
159.168.24.0/23 maxlen: 23
159.168.112.0/20 maxlen: 20
159.168.136.0/23 maxlen: 23
159.168.138.0/24 maxlen: 24
159.168.140.0/24 maxlen: 24
159.168.141.0/24 maxlen: 24
159.168.144.0/21 maxlen: 21
159.168.152.0/21 maxlen: 21
185.94.144.0/22 maxlen: 22
185.130.140.0/22 maxlen: 22
193.222.224.0/20 maxlen: 20
193.222.240.0/24 maxlen: 24
194.147.176.0/20 maxlen: 20
2001:67c:638::/48 maxlen: 48
2a05:14c0::/29 maxlen: 29
2a06:d9c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 22:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:c5:6f:f5:5b:c7:8f:fe:53:4d:d2:6f:6a:20:ec:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f152b6a0d004627d285d879aa83e58461ab2df
Validity
Not Before: Oct 8 13:48:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38e2c8eb9474c8229912edd5abbcc35d4d84597e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e7:af:0e:e4:45:0f:87:82:dd:e3:dd:f3:3e:
61:88:28:9c:76:43:be:4b:7c:4a:de:88:6c:9b:e9:
ff:d3:6b:e7:3f:cf:d6:5b:9f:a3:6b:6c:dc:f4:56:
f5:ab:8b:4b:fa:8f:1f:09:32:88:d7:0e:f1:fb:d7:
96:25:56:d0:d2:9b:a9:f9:cb:4b:6a:d4:d1:da:08:
58:71:a1:d2:0c:aa:00:5b:75:03:8d:00:86:38:3d:
6e:c4:d0:4c:ec:42:30:44:90:de:ac:e2:b0:fc:fc:
84:7f:c2:9a:ba:4b:4b:0b:88:70:8f:60:05:7e:b1:
fd:ab:ef:c9:a6:0e:3e:23:fe:c0:f8:bd:bf:fe:b5:
b7:36:32:4b:f3:fb:ca:30:19:ab:14:a7:cc:50:43:
29:b3:79:b9:c2:3e:c4:19:ab:62:d3:89:5a:f9:4f:
08:61:fc:7d:e9:8d:cf:13:02:ab:14:a2:2a:f5:e0:
ba:8a:80:48:a6:e1:95:40:c4:60:d5:e9:f2:10:a9:
6b:81:0f:79:a7:c0:22:fa:e0:dc:d5:20:f8:4d:4a:
4b:f9:78:79:83:1c:f9:7e:d4:85:ae:ac:88:52:7b:
cf:66:03:ff:dc:e3:58:b3:d9:c0:23:eb:29:61:c9:
ba:8e:c3:51:62:47:6f:6c:24:20:4f:b2:89:b5:68:
0b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E2:C8:EB:94:74:C8:22:99:12:ED:D5:AB:BC:C3:5D:4D:84:59:7E
X509v3 Authority Key Identifier:
keyid:C5:F1:52:B6:A0:D0:04:62:7D:28:5D:87:9A:A8:3E:58:46:1A:B2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/OOLI65R0yCKZEu3Vq7zDXU2EWX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.255.0/24
103.55.232.0/22
159.168.0.0/16
185.94.144.0/22
185.130.140.0/22
193.222.224.0-193.222.240.255
194.147.176.0/20
IPv6:
2001:67c:638::/48
2a05:14c0::/29
2a06:d9c0::/29
Signature Algorithm: sha256WithRSAEncryption
30:3e:7a:db:88:1f:5f:17:63:99:39:21:80:80:ab:33:f0:5d:
0a:0e:40:ed:84:65:e0:b0:71:a8:32:58:82:36:72:4f:48:78:
97:3a:bc:89:78:c5:23:da:4c:46:4c:65:5c:0c:74:c3:17:f6:
c4:24:a3:b5:6a:53:e4:77:91:16:9a:be:dd:14:6a:68:32:1c:
64:22:cf:b5:66:a8:34:fe:b0:3f:e4:09:25:c0:f8:b0:c5:8e:
76:d1:11:18:9b:8f:d0:29:2e:d7:88:c3:1f:27:8c:2b:3f:10:
e9:77:31:f1:4a:20:b4:c1:d8:3f:75:67:f8:df:a7:6f:3b:84:
3e:55:5b:e3:81:8f:15:08:de:44:d2:7e:ef:2f:38:e5:a1:7b:
95:5e:06:b5:d0:fd:87:6b:2e:6e:e2:0c:dd:e8:59:ec:ca:c7:
78:74:7d:9d:b6:62:5b:93:ff:d4:62:58:41:b1:fb:6e:80:62:
da:6d:a4:bb:d0:e3:9d:f8:c5:cc:86:19:75:95:bc:fc:2d:c7:
22:90:34:10:a5:68:a6:61:89:84:9d:51:34:ba:78:8b:99:5b:
a0:0a:94:d9:95:7f:2b:8b:f5:18:a7:d3:9d:a8:3e:71:f1:5e:
bb:c9:e1:84:10:bf:cc:13:a6:eb:a3:dc:6d:03:3b:88:e1:a8:
3c:80:73:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 06:18:32 2026 by rpki-client