Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/OQAcJ8twO-0txHfmVy59HWTOP9w.roa
File: OQAcJ8twO-0txHfmVy59HWTOP9w.roa (raw, json)
Hash identifier: /n9+qfj0nnJqEu6wg9q6/DDasUmZSfO528DRTQrF9kg=
Subject key identifier: 39:00:1C:27:CB:70:3B:ED:2D:C4:77:E6:57:2E:7D:1D:64:CE:3F:DC
Certificate issuer: /CN=78c46c097e176bce6c895c1ed744bfa43eb3dc6e
Certificate serial: 019F2368E933E90F8AD7E421137CBE3A0ECF
Authority key identifier: 78:C4:6C:09:7E:17:6B:CE:6C:89:5C:1E:D7:44:BF:A4:3E:B3:DC:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eMRsCX4Xa85siVwe10S_pD6z3G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/OQAcJ8twO-0txHfmVy59HWTOP9w.roa
Signing time: Thu 02 Jul 2026 15:18:25 +0000
ROA not before: Thu 02 Jul 2026 15:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58321
IP address blocks: 5.104.248.0/21 maxlen: 24
81.161.192.0/20 maxlen: 20
81.161.192.0/21 maxlen: 21
81.161.192.0/24 maxlen: 24
81.161.193.0/24 maxlen: 24
81.161.194.0/24 maxlen: 24
81.161.195.0/24 maxlen: 24
81.161.196.0/24 maxlen: 24
81.161.197.0/24 maxlen: 24
81.161.198.0/24 maxlen: 24
81.161.199.0/24 maxlen: 24
81.161.200.0/21 maxlen: 21
81.161.200.0/24 maxlen: 24
81.161.201.0/24 maxlen: 24
81.161.202.0/24 maxlen: 24
81.161.203.0/24 maxlen: 24
81.161.204.0/24 maxlen: 24
81.161.205.0/24 maxlen: 24
81.161.206.0/24 maxlen: 24
91.232.44.0/23 maxlen: 24
109.199.0.0/19 maxlen: 24
109.207.48.0/20 maxlen: 24
176.227.160.0/21 maxlen: 24
178.249.88.0/21 maxlen: 24
185.34.76.0/22 maxlen: 24
185.73.88.0/22 maxlen: 22
185.80.212.0/22 maxlen: 22
193.242.168.0/23 maxlen: 23
193.242.168.0/24 maxlen: 24
193.242.169.0/24 maxlen: 24
195.3.232.0/22 maxlen: 22
2a04:4c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/eMRsCX4Xa85siVwe10S_pD6z3G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/eMRsCX4Xa85siVwe10S_pD6z3G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eMRsCX4Xa85siVwe10S_pD6z3G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 09:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e9:33:e9:0f:8a:d7:e4:21:13:7c:be:3a:0e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78c46c097e176bce6c895c1ed744bfa43eb3dc6e
Validity
Not Before: Jul 2 15:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39001c27cb703bed2dc477e6572e7d1d64ce3fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cc:ff:88:d1:22:e6:4c:60:30:ba:fe:d4:6f:
56:ea:b0:2d:d1:cb:79:fe:89:74:69:c1:83:59:ed:
21:1f:c6:72:f2:c8:48:c4:ff:69:ea:25:41:81:9a:
75:fd:c8:4e:09:c2:ee:0f:cf:32:7b:db:e0:30:72:
c1:fd:2f:64:80:27:f3:49:e4:a2:f3:cc:40:51:1a:
05:3f:5f:3a:37:64:82:5f:ad:f8:27:37:01:59:32:
b8:1d:fd:0e:71:15:60:0e:08:0a:f8:21:be:5a:da:
6b:ac:8a:9c:6a:52:84:2f:2b:16:da:ca:cd:69:31:
24:cb:84:87:33:29:a1:2d:8c:33:74:e4:d8:d7:64:
dc:d9:9e:01:3e:7f:2b:71:ce:90:2e:57:b3:d1:43:
46:ce:6d:f7:a4:4c:74:33:1e:79:70:fd:65:f7:82:
f4:a0:5f:4a:28:14:e2:26:f4:90:78:21:bd:d0:d7:
24:c5:6e:b0:6a:3c:e9:11:e2:ba:bf:d8:48:ff:4f:
91:bb:fd:ce:ff:8a:72:78:ed:48:49:86:fd:0f:91:
09:b4:5f:14:10:be:30:f5:b1:be:b1:c6:57:d6:f6:
89:7c:5b:05:6f:21:17:83:42:9a:8f:f8:1b:96:67:
4f:ab:e2:e4:1a:47:0f:54:5a:6f:ac:de:a8:15:e2:
22:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:00:1C:27:CB:70:3B:ED:2D:C4:77:E6:57:2E:7D:1D:64:CE:3F:DC
X509v3 Authority Key Identifier:
keyid:78:C4:6C:09:7E:17:6B:CE:6C:89:5C:1E:D7:44:BF:A4:3E:B3:DC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMRsCX4Xa85siVwe10S_pD6z3G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/OQAcJ8twO-0txHfmVy59HWTOP9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/eMRsCX4Xa85siVwe10S_pD6z3G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.248.0/21
81.161.192.0/20
91.232.44.0/23
109.199.0.0/19
109.207.48.0/20
176.227.160.0/21
178.249.88.0/21
185.34.76.0/22
185.73.88.0/22
185.80.212.0/22
193.242.168.0/23
195.3.232.0/22
IPv6:
2a04:4c0::/29
Signature Algorithm: sha256WithRSAEncryption
be:14:67:4e:36:3a:a4:22:e8:72:d7:49:7f:3d:77:b8:87:6c:
85:d5:18:7c:b2:05:73:d8:cf:38:72:05:e9:1d:d1:cf:d0:6e:
29:52:16:0b:e6:ed:9b:6b:a5:5c:40:d0:37:dc:67:44:c8:c3:
94:f5:b5:98:34:fa:09:97:62:a4:f6:2c:ea:0f:32:f2:84:db:
ae:ff:e7:aa:ce:38:36:d1:e7:d7:a9:07:95:5b:07:24:43:4b:
59:87:7a:ac:33:4a:f3:cb:47:a3:f4:7c:06:c6:13:d5:64:46:
d2:23:d3:66:b1:45:7e:87:28:f3:1a:2c:59:0c:48:3e:de:22:
b5:a6:e4:19:3e:e9:92:03:e7:88:8f:86:2e:5d:4e:43:f9:cc:
23:38:5e:06:54:81:52:e3:93:59:b4:2a:fd:6f:c8:95:4b:50:
53:b2:c5:00:72:b9:5f:2d:79:64:dd:68:12:1b:b2:bf:11:a1:
9c:03:0a:ab:6b:f6:83:1d:2a:a0:a3:0a:b9:f6:cf:81:03:a0:
67:a4:99:e6:49:c8:d1:91:c3:d8:92:11:94:35:d6:16:c0:3e:
a2:5d:77:93:d0:75:69:1e:97:7b:c8:f9:cf:57:11:90:c3:6f:
8a:22:94:18:1f:41:d7:30:bb:bb:99:44:0a:4d:cd:c3:ab:05:
d0:db:b0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 17:39:06 2026 by rpki-client