Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/OJChlAeBefFDZbtuSHaUfnb--9k.roa
File: OJChlAeBefFDZbtuSHaUfnb--9k.roa (raw, json)
Hash identifier: J0JotRQEaNht8j15M4E6BVlAfKP+U4/x+g3HkKx99fI=
Subject key identifier: 38:90:A1:94:07:81:79:F1:43:65:BB:6E:48:76:94:7E:76:FE:FB:D9
Certificate issuer: /CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Certificate serial: 019F23687BF78DD5D66614FCEB512093EFEC
Authority key identifier: D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/OJChlAeBefFDZbtuSHaUfnb--9k.roa
Signing time: Thu 02 Jul 2026 15:17:57 +0000
ROA not before: Thu 02 Jul 2026 15:17:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137427
IP address blocks: 2.59.152.0/22 maxlen: 22
2.59.153.0/24 maxlen: 24
45.91.224.0/22 maxlen: 22
45.91.225.0/24 maxlen: 24
45.91.226.0/24 maxlen: 24
45.91.227.0/24 maxlen: 24
45.142.152.0/22 maxlen: 22
91.204.224.0/22 maxlen: 22
91.204.224.0/24 maxlen: 24
91.204.225.0/24 maxlen: 24
91.204.226.0/24 maxlen: 24
91.204.227.0/24 maxlen: 24
185.202.100.0/22 maxlen: 22
185.202.101.0/24 maxlen: 24
193.239.150.0/23 maxlen: 23
193.239.150.0/24 maxlen: 24
193.239.151.0/24 maxlen: 24
193.239.154.0/23 maxlen: 23
193.239.154.0/24 maxlen: 24
194.126.202.0/24 maxlen: 24
194.126.215.0/24 maxlen: 24
194.126.219.0/24 maxlen: 24
194.126.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:7b:f7:8d:d5:d6:66:14:fc:eb:51:20:93:ef:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Validity
Not Before: Jul 2 15:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3890a194078179f14365bb6e4876947e76fefbd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0f:0d:2f:2b:31:56:cd:45:51:57:43:cf:fe:
e2:47:38:79:07:1e:51:ba:33:0e:08:b6:d1:b2:8b:
e1:35:28:8b:33:3c:f4:ba:3c:b2:cd:b9:ec:c4:75:
bc:17:92:cb:53:f7:bb:3d:46:33:9c:da:e0:b0:49:
0f:05:51:83:72:02:95:83:cd:cc:8e:c4:4a:55:39:
2a:dc:9b:a7:b1:1a:0a:be:06:41:db:a9:a7:d5:c8:
ff:8f:29:f4:fa:c0:e4:46:ce:9a:e7:2c:28:56:64:
7a:5b:55:4a:c3:97:51:22:f2:11:4e:e6:f3:7c:7b:
2a:5e:4f:c4:19:53:98:f8:43:ce:6d:a2:83:a4:86:
c2:c3:56:cc:79:d0:bb:8a:5b:52:7d:ae:f6:b5:1e:
47:c9:e2:a4:7c:ea:60:0c:8d:3d:ab:1f:85:41:81:
fa:d7:ba:65:a6:19:2a:d1:81:9b:19:1f:d5:97:35:
75:4a:fc:7b:55:a7:3c:b6:09:4f:c6:62:71:ef:3b:
bc:1e:aa:38:7c:e1:7a:61:32:dd:2a:16:bc:c4:af:
39:d2:75:62:da:2a:f1:ce:60:af:f8:5b:39:3a:fd:
5f:93:67:68:a3:84:de:a7:00:2e:6a:4e:37:01:dc:
81:bb:ea:ff:2f:da:e9:98:d4:da:e8:e0:d7:78:d4:
93:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:90:A1:94:07:81:79:F1:43:65:BB:6E:48:76:94:7E:76:FE:FB:D9
X509v3 Authority Key Identifier:
keyid:D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/OJChlAeBefFDZbtuSHaUfnb--9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.152.0/22
45.91.224.0/22
45.142.152.0/22
91.204.224.0/22
185.202.100.0/22
193.239.150.0/23
193.239.154.0/23
194.126.202.0/24
194.126.215.0/24
194.126.219.0/24
194.126.227.0/24
Signature Algorithm: sha256WithRSAEncryption
85:f4:bb:34:8a:a7:cf:8d:81:59:ea:7c:7a:59:85:15:90:f3:
63:56:e1:6a:2b:ee:7d:7f:b1:c4:5d:0b:9b:f2:98:07:4f:95:
23:e1:6a:8c:53:81:08:69:ae:19:00:f3:16:ec:c4:78:74:f3:
36:15:a2:38:02:15:0a:4d:c5:bc:ab:d9:c2:ca:c2:e1:bd:e6:
24:c8:f0:fb:67:f5:50:0d:58:1d:93:85:17:e6:1d:32:30:c5:
d2:5e:7b:ee:82:f2:85:e6:aa:28:16:32:f5:0c:4d:09:54:1b:
4f:9e:1d:6f:1a:7e:a1:9f:05:34:79:e2:c0:14:77:d9:c8:ec:
38:c1:8c:01:80:a3:53:7a:bd:54:49:22:76:c3:ae:1e:f8:26:
e4:c2:a0:9d:5c:7c:d3:3d:30:03:1d:b9:d4:bb:80:e0:0e:e5:
7b:a9:ff:ff:ec:71:42:26:e1:c6:e5:8b:20:dd:d3:ca:78:0d:
28:dd:55:01:a7:26:03:ba:17:e4:7a:6c:f6:3c:39:28:5d:52:
71:75:31:8b:24:2d:2a:9b:7b:f9:65:10:07:2d:72:46:cb:62:
88:34:3e:1f:e5:9a:b3:37:54:90:87:24:5d:ec:c2:e5:7b:6d:
ee:d3:d8:39:fb:e1:69:d6:f7:2b:0a:c6:b0:4b:d9:63:58:22:
97:2f:2c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:46:12 2026 by rpki-client