Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/lOIMCulf3GuUI-StD1Yh4jlDqeM.roa
File: lOIMCulf3GuUI-StD1Yh4jlDqeM.roa (raw, json)
Hash identifier: 4dwpJqsJk7jN6O3n0GStqU7QEqIZidtJe8tQJ1wjz+Y=
Subject key identifier: 94:E2:0C:0A:E9:5F:DC:6B:94:23:E4:AD:0F:56:21:E2:39:43:A9:E3
Certificate issuer: /CN=331bce2ee806e93621112dbd618536f775f44fba
Certificate serial: 01A158D013FBB981A13D0D9C1BDF76816812
Authority key identifier: 33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/lOIMCulf3GuUI-StD1Yh4jlDqeM.roa
Signing time: Tue 20 Oct 2026 10:16:33 +0000
ROA not before: Tue 20 Oct 2026 10:16:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39582
IP address blocks: 185.130.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:d0:13:fb:b9:81:a1:3d:0d:9c:1b:df:76:81:68:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331bce2ee806e93621112dbd618536f775f44fba
Validity
Not Before: Oct 20 10:16:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=94e20c0ae95fdc6b9423e4ad0f5621e23943a9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:02:4f:83:c7:a2:e7:2d:13:96:14:2b:d7:e8:
b4:bb:a6:a3:5b:a6:3f:c8:16:cf:dd:6e:12:45:98:
68:e4:da:63:9b:f0:32:38:d0:3e:cb:0f:3a:6f:14:
af:00:e7:8b:c0:62:39:70:a6:22:1b:f9:95:25:d8:
fc:0f:6f:66:b8:8d:f3:1d:a5:91:7e:fa:19:c7:3a:
75:54:f0:7c:38:13:21:3d:de:6c:85:24:d1:88:89:
1a:b7:83:26:f4:85:5b:19:ac:f0:4c:da:0d:9b:d2:
cf:d8:67:a5:9a:2e:05:cb:4c:3f:12:90:38:9e:b5:
85:17:5a:06:30:77:77:bb:e2:e1:ad:4e:1a:71:37:
ad:8e:90:6c:bd:12:77:12:6d:db:36:07:90:15:ab:
8c:51:cf:11:eb:36:e1:ba:4d:0c:0d:f3:19:d7:18:
c1:82:9a:2b:4d:ba:a3:0a:0a:60:41:31:7c:3a:df:
87:48:8f:12:d6:6b:a7:b5:23:c9:a0:b3:4e:c0:bb:
d0:c1:80:c0:90:40:22:81:4a:db:2b:0d:f4:7f:a6:
1d:89:ac:20:c7:38:34:06:5a:da:ae:c9:62:6d:e6:
ba:10:af:5a:1a:8b:ad:fc:f2:99:44:57:be:80:d1:
7f:9a:04:4f:e8:3c:dd:85:8e:19:d7:b3:f9:52:c6:
6c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E2:0C:0A:E9:5F:DC:6B:94:23:E4:AD:0F:56:21:E2:39:43:A9:E3
X509v3 Authority Key Identifier:
keyid:33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/lOIMCulf3GuUI-StD1Yh4jlDqeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.56.0/24
Signature Algorithm: sha256WithRSAEncryption
09:fa:8f:51:00:e7:51:eb:81:d8:a6:04:b6:33:50:e8:62:78:
4f:c0:d1:a4:73:30:ae:ad:23:1d:3f:6d:8f:2f:18:e1:07:46:
e8:12:43:91:fd:e2:d0:74:f0:b8:9d:c0:a8:b7:b5:35:1c:e4:
08:d0:c0:fc:0d:8f:95:ae:81:c6:fb:b3:89:ce:2e:33:ff:3b:
eb:54:8f:f8:c5:6f:82:ad:25:68:0e:e0:77:5b:4c:9e:29:53:
a6:29:b4:ac:56:cc:2c:3f:c9:94:55:ed:e2:ca:13:f5:30:92:
72:59:67:fa:ec:e3:59:ea:c5:ab:cb:06:77:c7:04:9b:1a:c8:
2a:1f:4f:dd:95:44:64:07:5c:97:46:07:64:23:82:1e:95:2d:
ae:67:7c:f0:00:d2:76:2a:4a:ab:52:72:aa:db:ab:80:09:55:
35:c1:ca:83:db:35:44:8e:1c:aa:b8:47:a0:84:f5:e4:4d:cd:
c4:50:51:6e:4f:ac:89:e8:3e:6f:0f:68:97:34:c3:b0:32:7b:
c8:78:cd:da:e8:d5:45:14:f0:8b:59:8a:4a:59:84:c8:0f:30:
70:b4:34:f3:67:30:34:64:0d:2f:7c:e1:b5:7d:3b:c9:e4:8e:
bd:ba:df:ad:af:19:88:15:0f:20:89:ed:7e:45:c7:35:dc:7b:
33:86:7e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:35:03 2026 by rpki-client