Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/OUHOzLFqtWz2bbGyeYwSXrj00Uk.roa
File: OUHOzLFqtWz2bbGyeYwSXrj00Uk.roa (raw, json)
Hash identifier: nlfqukJpNrtb/c5u87BSEisv1zmW8J3zLBOfs6U7Nrw=
Subject key identifier: 39:41:CE:CC:B1:6A:B5:6C:F6:6D:B1:B2:79:8C:12:5E:B8:F4:D1:49
Certificate issuer: /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Certificate serial: 019EF456E38E1633B29A854B6A2E2CCC2852
Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/OUHOzLFqtWz2bbGyeYwSXrj00Uk.roa
Signing time: Tue 23 Jun 2026 11:56:35 +0000
ROA not before: Tue 23 Jun 2026 11:56:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35042
IP address blocks: 88.214.25.0/24 maxlen: 24
88.214.26.0/24 maxlen: 24
91.228.101.0/24 maxlen: 24
95.133.236.0/24 maxlen: 24
185.55.240.0/22 maxlen: 22
185.55.241.0/24 maxlen: 24
185.55.243.0/24 maxlen: 24
193.24.208.0/22 maxlen: 22
193.24.208.0/23 maxlen: 23
193.24.208.0/24 maxlen: 24
193.24.209.0/24 maxlen: 24
193.24.210.0/24 maxlen: 24
194.24.160.0/24 maxlen: 24
2a00:1910::/32 maxlen: 32
2a00:1911::/32 maxlen: 32
2a00:1911::/48 maxlen: 48
2a00:1911:1::/48 maxlen: 48
2a00:1911:3::/48 maxlen: 48
2a00:1911:4::/48 maxlen: 48
2a00:1911:5::/48 maxlen: 48
2a00:1911:6::/48 maxlen: 48
2a00:1911:7::/48 maxlen: 48
2a00:1911:8::/48 maxlen: 48
2a00:1911:9::/48 maxlen: 48
2a00:1911:10::/48 maxlen: 48
2a00:1912::/32 maxlen: 32
2a00:1912:1::/48 maxlen: 48
2a00:1913::/32 maxlen: 32
2a09:8700::/32 maxlen: 32
2a09:8700:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f4:56:e3:8e:16:33:b2:9a:85:4b:6a:2e:2c:cc:28:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Validity
Not Before: Jun 23 11:56:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3941ceccb16ab56cf66db1b2798c125eb8f4d149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5f:ba:ab:75:78:85:8c:17:6d:22:ed:d2:2f:
af:ff:7a:99:86:96:1d:c0:41:1b:5f:2c:19:bc:db:
4c:1d:74:2b:ed:d4:fc:4c:df:44:14:06:15:af:05:
da:14:40:8b:6d:00:da:f0:76:17:7a:9b:bb:bd:ec:
56:4d:ff:cd:2c:93:ec:7c:6d:6a:26:60:e2:16:5b:
aa:83:29:c9:d9:6f:c5:13:97:59:fe:fe:ed:48:1c:
94:4f:f3:fd:1b:3a:fb:9e:48:7b:16:6d:5b:f8:86:
9b:13:d0:6b:76:54:97:ee:ae:a5:c1:cd:75:fa:7d:
46:a7:13:68:e6:e2:83:08:be:38:4d:e8:db:2a:d0:
2a:21:ab:d8:b8:68:52:c1:96:af:a6:9a:12:36:ce:
a1:96:e9:39:f4:66:a6:8d:43:cc:26:11:bb:ba:16:
e8:28:13:20:e4:6a:b7:6d:8b:df:0f:50:16:f2:dd:
d5:66:e3:68:a9:73:2e:d7:96:22:d2:20:dd:61:10:
70:61:45:e5:a3:d9:17:44:5c:7a:fb:8a:26:9e:cf:
b9:62:d0:7d:7d:25:8b:53:26:8c:20:e9:6b:d5:69:
6d:5c:a8:bf:7d:60:35:93:98:a5:19:ab:81:ba:70:
2e:7b:53:61:0a:13:37:c3:68:eb:92:fe:55:ec:0b:
be:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:41:CE:CC:B1:6A:B5:6C:F6:6D:B1:B2:79:8C:12:5E:B8:F4:D1:49
X509v3 Authority Key Identifier:
keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/OUHOzLFqtWz2bbGyeYwSXrj00Uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.25.0-88.214.26.255
91.228.101.0/24
95.133.236.0/24
185.55.240.0/22
193.24.208.0/22
194.24.160.0/24
IPv6:
2a00:1910::/30
2a09:8700::/32
Signature Algorithm: sha256WithRSAEncryption
69:82:97:91:82:c4:77:cb:b6:28:35:ba:a6:56:d4:bc:44:c6:
3e:91:f1:be:5f:87:89:80:c5:68:91:3a:f0:07:cf:79:92:56:
1b:d2:50:3c:82:64:44:bb:a4:87:34:2b:3b:32:2e:cb:e8:e4:
4f:10:17:a7:4c:76:bc:30:d0:8f:0b:32:4a:d1:0f:d1:53:fa:
a0:7a:42:f3:5c:8a:13:e4:96:49:d8:9b:48:71:8f:40:5d:8f:
61:8d:e6:75:0d:1f:04:b7:16:ad:bf:0b:2b:5d:b6:e8:67:11:
e1:4f:7a:2f:0e:08:cc:5c:f4:5d:3c:55:5e:bb:7f:cd:c9:6f:
e1:06:c1:54:ca:fe:44:2d:67:67:ee:de:5b:7b:f0:4e:cc:36:
4d:fb:02:9d:dd:74:1f:9a:f6:16:2d:6a:40:86:48:34:43:82:
d6:d9:68:7d:08:62:8f:83:d1:df:58:26:7a:ae:72:46:76:27:
f4:30:25:d8:ac:50:28:dd:d5:90:59:fb:10:0d:3a:1b:59:f3:
c1:1a:71:5b:57:f2:e3:3f:6c:d1:c5:dd:cb:00:33:a7:a2:13:
94:26:d7:ba:18:ce:57:bc:71:35:25:e2:b5:d2:09:e9:95:4b:
da:56:3a:2e:da:02:df:75:89:68:85:fc:11:a2:07:c0:1d:61:
47:9c:1e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 17:52:32 2026 by rpki-client