Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/oqbInV5y5jVijngnsT6Z4KkwCJs.roa
File: oqbInV5y5jVijngnsT6Z4KkwCJs.roa (raw, json)
Hash identifier: Jofbkqy8kOPIsDBzvJum0QcsSO9pDkw/9K4nko6x7wQ=
Subject key identifier: A2:A6:C8:9D:5E:72:E6:35:62:8E:78:27:B1:3E:99:E0:A9:30:08:9B
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 01A037C3675BA92E4DB6E5FC43289CAEC94F
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/oqbInV5y5jVijngnsT6Z4KkwCJs.roa
Signing time: Tue 25 Aug 2026 07:12:27 +0000
ROA not before: Tue 25 Aug 2026 07:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24589
IP address blocks: 31.42.80.0/21 maxlen: 21
83.243.88.0/21 maxlen: 21
84.38.136.0/21 maxlen: 21
87.99.64.0/19 maxlen: 19
87.99.64.0/24 maxlen: 24
87.99.65.0/24 maxlen: 24
87.99.66.0/24 maxlen: 24
87.99.67.0/24 maxlen: 24
87.99.95.0/24 maxlen: 24
88.135.128.0/20 maxlen: 20
88.135.144.0/21 maxlen: 21
88.135.156.0/22 maxlen: 22
91.90.224.0/19 maxlen: 29
91.90.225.0/24 maxlen: 24
91.90.230.0/24 maxlen: 24
91.90.231.0/24 maxlen: 24
91.90.236.0/24 maxlen: 24
91.90.237.0/25 maxlen: 25
91.90.238.0/24 maxlen: 24
91.90.252.64/29 maxlen: 29
91.90.255.0/24 maxlen: 24
91.233.214.0/23 maxlen: 23
109.197.208.0/21 maxlen: 21
109.197.208.0/24 maxlen: 24
109.229.192.0/20 maxlen: 20
109.229.208.0/21 maxlen: 21
171.25.218.0/23 maxlen: 23
176.103.176.0/22 maxlen: 22
176.103.184.0/24 maxlen: 24
176.106.48.0/20 maxlen: 20
176.106.100.0/23 maxlen: 23
176.106.160.0/20 maxlen: 20
176.106.176.0/21 maxlen: 21
185.47.10.0/24 maxlen: 24
185.47.11.0/24 maxlen: 24
185.220.198.0/24 maxlen: 24
193.111.244.0/22 maxlen: 22
193.238.212.0/22 maxlen: 22
193.238.212.128/25 maxlen: 25
193.238.216.0/21 maxlen: 21
194.9.212.0/22 maxlen: 22
194.9.212.0/24 maxlen: 24
195.69.88.0/22 maxlen: 22
213.110.64.0/23 maxlen: 23
213.110.76.0/22 maxlen: 22
213.110.80.0/20 maxlen: 20
2a01:8ca0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:24:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:37:c3:67:5b:a9:2e:4d:b6:e5:fc:43:28:9c:ae:c9:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Aug 25 07:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2a6c89d5e72e635628e7827b13e99e0a930089b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6e:ed:08:50:13:bb:0a:a6:70:8a:7b:ca:e9:
8d:23:46:97:68:e8:d4:ec:c4:0e:8d:53:55:ad:64:
f2:22:b1:0d:df:2f:ba:0d:8c:c8:37:61:60:fa:fb:
60:be:fc:29:da:fa:64:ab:85:43:91:9c:5b:cc:1e:
54:68:e1:84:2d:79:9a:22:f6:5c:e5:bb:bd:3b:12:
0d:97:88:1b:ce:84:20:bd:a5:59:51:cf:b5:58:cd:
0c:45:fd:48:aa:2c:02:a9:0b:a1:39:f3:fc:37:58:
0e:58:ad:34:f8:5b:dd:87:03:d7:8c:8e:36:50:73:
c5:c2:55:5a:50:b2:44:52:26:10:2a:36:11:6f:d9:
9c:df:ed:24:a9:a8:09:17:ca:dd:2f:46:dd:b8:64:
49:83:a5:84:4e:38:38:7a:56:b8:03:d9:f3:7d:6f:
25:05:07:20:e0:83:b6:9d:4b:d9:d3:ea:86:3c:ae:
47:ad:9a:37:70:13:43:d9:66:3e:23:08:b0:46:b4:
bb:73:bb:8a:8a:7b:55:90:ea:07:05:78:91:ce:15:
40:76:8b:6d:0e:38:d4:90:8f:bb:27:72:d2:81:05:
3c:6b:88:2b:8e:6b:2a:11:18:ef:c9:77:59:83:65:
60:1e:fa:6d:8c:a2:44:f1:b1:36:74:99:01:cc:c7:
88:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A6:C8:9D:5E:72:E6:35:62:8E:78:27:B1:3E:99:E0:A9:30:08:9B
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/oqbInV5y5jVijngnsT6Z4KkwCJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.80.0/21
83.243.88.0/21
84.38.136.0/21
87.99.64.0/19
88.135.128.0-88.135.151.255
88.135.156.0/22
91.90.224.0/19
91.233.214.0/23
109.197.208.0/21
109.229.192.0-109.229.215.255
171.25.218.0/23
176.103.176.0/22
176.103.184.0/24
176.106.48.0/20
176.106.100.0/23
176.106.160.0-176.106.183.255
185.47.10.0/23
185.220.198.0/24
193.111.244.0/22
193.238.212.0-193.238.223.255
194.9.212.0/22
195.69.88.0/22
213.110.64.0/23
213.110.76.0-213.110.95.255
IPv6:
2a01:8ca0::/32
Signature Algorithm: sha256WithRSAEncryption
87:a0:81:46:88:61:00:a9:f1:91:1a:63:96:04:53:78:0d:15:
90:97:03:52:64:f8:8e:57:ed:d4:8f:f7:43:8a:53:1b:5b:f0:
5e:5f:00:d0:dc:ec:05:9a:3e:14:3c:2a:8d:fa:5e:93:eb:8f:
eb:24:d7:2a:ca:d6:e7:94:f2:07:f0:5c:f0:1c:9e:13:24:2a:
b1:c0:51:1b:eb:56:5e:e6:c9:0d:17:3f:d6:bc:5f:d4:0a:8b:
8a:dd:33:ac:41:2e:c0:b5:00:ad:41:44:eb:33:c0:f4:56:da:
3e:a2:fc:28:6a:f9:c2:21:81:c5:49:4c:07:16:01:f7:a7:bd:
0f:c1:fe:d2:21:00:dd:86:3b:75:8f:69:3d:2f:d5:b4:20:ff:
b1:26:7f:d3:88:50:61:ab:da:8b:1b:a8:ad:11:eb:b1:3f:21:
a8:85:eb:65:00:aa:9f:a4:15:b2:ec:86:b5:af:a1:f0:01:e3:
46:54:72:ac:5f:a9:8f:00:aa:88:85:d1:0d:b4:a6:b4:4b:2b:
f6:64:a9:a9:5b:0a:35:eb:60:0f:c0:b2:a4:86:87:e8:be:f4:
8f:c1:c4:5b:97:cb:6b:23:68:83:56:87:d8:43:68:c6:cc:5f:
c8:20:a4:5b:b6:62:6e:b1:1b:77:f3:8c:5a:cf:cc:80:af:9c:
35:ea:59:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:52:40 2026 by rpki-client