Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/vOMef8yWl4b6Io1Ya-cU5bgEsLM.roa
File: vOMef8yWl4b6Io1Ya-cU5bgEsLM.roa (raw, json)
Hash identifier: witWV5f61HT6b+BoFWIMQRYRQ3apGBoErwY9t1HJHUU=
Subject key identifier: BC:E3:1E:7F:CC:96:97:86:FA:22:8D:58:6B:E7:14:E5:B8:04:B0:B3
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01A0D77FD654DC3B3C008B3CB57CF2E994FE
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/vOMef8yWl4b6Io1Ya-cU5bgEsLM.roa
Signing time: Fri 25 Sep 2026 07:37:54 +0000
ROA not before: Fri 25 Sep 2026 07:37:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 194.64.89.0/24 maxlen: 24
194.163.68.0/24 maxlen: 24
194.163.80.0/22 maxlen: 24
194.163.92.0/24 maxlen: 24
194.233.31.0/24 maxlen: 24
194.233.148.0/24 maxlen: 24
194.233.150.0/24 maxlen: 24
194.233.151.0/24 maxlen: 24
195.180.128.0/22 maxlen: 24
195.180.139.0/24 maxlen: 24
195.180.150.0/23 maxlen: 24
195.252.175.0/24 maxlen: 24
212.224.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:7f:d6:54:dc:3b:3c:00:8b:3c:b5:7c:f2:e9:94:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Sep 25 07:37:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bce31e7fcc969786fa228d586be714e5b804b0b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:31:07:dc:5d:59:ac:b4:71:d3:b2:7e:a9:f8:
f5:fc:69:3a:59:06:46:67:49:68:02:c2:a7:a7:95:
e1:e2:06:08:f5:ec:a8:42:67:4a:bd:f7:67:72:c0:
eb:d4:9c:46:fc:25:9a:3f:59:0b:9d:40:1f:25:c2:
d2:c8:65:84:c1:ba:91:50:79:8f:ab:ad:8f:1f:30:
ff:13:a9:e3:ea:79:20:a4:7c:f4:37:b0:e4:a6:2d:
fe:63:00:aa:11:66:3f:ec:29:eb:27:49:5c:23:21:
4d:bc:1b:4f:fb:62:7a:fd:57:32:c3:9b:50:c8:3a:
4a:11:8f:8b:1a:70:2b:f1:97:5e:a0:b0:a6:f4:aa:
d3:5a:b0:2c:a1:f7:d1:55:97:22:73:dd:3d:9b:93:
bf:ab:dc:47:ee:1c:6e:2f:81:20:14:2e:51:50:10:
a1:f5:df:00:9b:87:8c:8e:11:ab:f5:0b:6b:b3:ca:
fb:4c:10:17:e6:18:ff:35:55:8e:79:11:e5:7f:c1:
ea:96:14:c4:f5:cb:1b:92:c1:52:08:46:37:49:75:
5d:88:1c:bb:fb:50:1e:1f:b4:e3:2b:70:88:24:07:
fd:66:25:f2:fc:f7:b4:a0:02:ac:f5:16:60:6e:27:
67:98:c2:9f:b3:15:2e:32:17:6b:7f:14:9a:5f:cc:
db:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E3:1E:7F:CC:96:97:86:FA:22:8D:58:6B:E7:14:E5:B8:04:B0:B3
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/vOMef8yWl4b6Io1Ya-cU5bgEsLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.64.89.0/24
194.163.68.0/24
194.163.80.0/22
194.163.92.0/24
194.233.31.0/24
194.233.148.0/24
194.233.150.0/23
195.180.128.0/22
195.180.139.0/24
195.180.150.0/23
195.252.175.0/24
212.224.8.0/24
Signature Algorithm: sha256WithRSAEncryption
36:f2:d0:e9:ec:4c:71:ff:c5:4d:86:c1:f2:a4:cf:eb:0d:17:
d7:df:4c:cc:d5:7f:0c:ad:df:ec:23:93:a3:10:92:b7:4d:b4:
ab:73:aa:87:5e:a3:e0:74:41:d6:c4:18:e7:cf:53:06:72:0f:
86:37:17:a6:96:ff:3c:b6:ae:60:6e:0e:15:31:58:4c:70:22:
f0:b0:6b:d3:9a:65:5f:d3:32:f3:ae:35:f1:2f:7d:e0:6c:f1:
97:98:34:4a:d0:97:cd:6f:81:57:7c:85:16:5b:e7:a2:da:17:
fd:59:c7:f3:bf:63:de:a7:53:6b:cb:06:54:20:00:5c:fc:51:
91:c5:88:81:d0:0b:65:b3:16:72:32:82:21:88:9a:10:a7:e8:
8d:ba:ad:00:b5:81:9e:4a:4c:b5:e5:8a:2f:ab:4a:5e:07:f2:
e3:07:e2:bb:ef:61:87:94:6c:14:8f:ee:c8:d4:f9:12:e8:30:
0d:dd:66:23:58:3e:56:6d:46:d8:2a:79:5e:2e:a8:01:84:ba:
3b:7b:81:27:e9:a3:c8:fa:bd:10:e6:7f:aa:a6:ef:f0:65:19:
9a:fc:a3:88:28:d2:94:e5:85:33:13:2c:07:ad:f3:0d:78:92:
b0:a8:73:b9:02:11:59:8e:be:1d:b2:66:da:7e:19:4f:b4:45:
a0:85:a8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:27:07 2026 by rpki-client