Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/okixmTwTEetm_-4ccdSg2P1dVEI.roa
File: okixmTwTEetm_-4ccdSg2P1dVEI.roa (raw, json)
Hash identifier: PqDmfv2k09xU1u0kT1HRAFdJ3dTTpJtSAJzHVBsPnlM=
Subject key identifier: A2:48:B1:99:3C:13:11:EB:66:FF:EE:1C:71:D4:A0:D8:FD:5D:54:42
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F69EF6E65B39755BF2D47CCAADC205446
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/okixmTwTEetm_-4ccdSg2P1dVEI.roa
Signing time: Thu 16 Jul 2026 07:58:46 +0000
ROA not before: Thu 16 Jul 2026 07:58:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 62.105.195.0/24 maxlen: 24
62.105.218.0/24 maxlen: 24
194.122.80.0/24 maxlen: 24
195.21.144.0/24 maxlen: 24
195.21.146.0/24 maxlen: 24
212.189.26.0/24 maxlen: 24
212.222.168.0/24 maxlen: 24
217.8.200.0/24 maxlen: 24
217.8.203.0/24 maxlen: 24
217.117.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:69:ef:6e:65:b3:97:55:bf:2d:47:cc:aa:dc:20:54:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 16 07:58:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a248b1993c1311eb66ffee1c71d4a0d8fd5d5442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ca:e4:18:6e:c4:a4:0c:b8:23:5b:7b:72:9d:
c6:ec:1a:1f:b0:6c:e9:c7:06:05:7b:ef:28:1e:fb:
57:df:8e:a4:f8:c9:6b:06:72:6c:95:19:c0:df:3c:
1b:a4:35:a6:c8:bb:a6:1b:da:3c:e7:c9:22:94:2e:
0a:0e:ed:6e:71:4e:82:2a:76:42:71:a7:90:be:02:
b0:84:b4:66:c2:60:83:a9:93:dd:b6:3c:3e:3f:8d:
f5:94:e4:f2:b9:d5:75:e4:f5:3e:dc:c1:a8:10:d5:
8e:f0:af:4b:2c:d6:c7:01:34:d8:59:97:55:3c:a0:
91:83:e6:97:f6:c6:4d:01:a3:f9:d2:b9:87:72:59:
cc:5f:e9:44:fb:1c:a6:86:da:39:d6:79:34:a0:81:
78:d4:dc:09:13:f1:b4:96:4a:e2:1d:b3:d5:41:81:
df:4e:3a:35:5f:ec:38:86:cc:70:31:5a:6e:38:a3:
b0:1b:02:ef:cf:d1:8f:c6:8e:9d:d2:b2:c5:30:e2:
a4:53:a0:44:69:b0:cf:5c:67:56:ab:5a:3f:d0:1b:
a3:f4:37:bb:f1:1f:4d:1e:34:42:98:a6:f7:54:2a:
4f:2d:48:8f:5d:5f:e9:fa:f9:18:b7:8e:9b:12:f8:
ef:94:f9:23:cd:4b:4e:b6:67:a4:e2:33:af:84:c5:
68:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:48:B1:99:3C:13:11:EB:66:FF:EE:1C:71:D4:A0:D8:FD:5D:54:42
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/okixmTwTEetm_-4ccdSg2P1dVEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.195.0/24
62.105.218.0/24
194.122.80.0/24
195.21.144.0/24
195.21.146.0/24
212.189.26.0/24
212.222.168.0/24
217.8.200.0/24
217.8.203.0/24
217.117.163.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:8b:cb:31:be:91:63:ba:3c:b9:48:06:87:5b:4c:08:12:0a:
9a:24:65:05:78:60:47:2e:b5:34:81:71:37:1a:fa:76:05:f3:
b4:b8:97:c8:d5:34:25:2d:70:9c:f7:58:01:c1:fa:7d:be:04:
e5:57:7e:ab:30:79:bf:52:af:99:54:04:ea:bf:f8:66:82:df:
e9:b1:72:59:e0:0b:9e:48:18:14:fb:73:01:97:83:c7:a5:cf:
de:91:66:c8:ae:dc:d5:6d:24:c5:6e:70:5e:6c:47:19:c6:8f:
1b:7a:57:ec:83:d8:26:9a:ee:4c:0a:1e:65:44:41:34:9a:93:
70:9e:21:10:44:61:23:f5:54:34:0e:ef:56:8f:69:61:67:a8:
c8:8a:15:07:18:e8:68:dc:d5:a9:79:a6:3a:cb:85:16:78:a5:
b0:f8:d7:5a:63:92:3a:36:a5:ce:2c:d0:05:f1:13:49:7c:f9:
43:50:ac:88:56:5b:83:1a:fe:8e:9e:f3:9f:ac:19:dc:02:69:
82:0b:25:13:9a:06:55:33:56:93:2e:3b:e1:85:38:92:a9:a7:
62:f8:6e:46:0c:ed:22:11:78:18:c9:23:6a:17:53:62:4f:f3:
d7:01:40:ae:ed:ca:41:45:a9:01:f2:6b:e7:77:55:34:30:6e:
74:b8:f0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:31 2026 by rpki-client