Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/OKSPa8mzNk_qq-j1U7rgAv7ffgM.roa
File: OKSPa8mzNk_qq-j1U7rgAv7ffgM.roa (raw, json)
Hash identifier: wmHdiaZTSDXsWXW8dypkj9Ghpyj4Czm7t9dAC9g04Gs=
Subject key identifier: 38:A4:8F:6B:C9:B3:36:4F:EA:AB:E8:F5:53:BA:E0:02:FE:DF:7E:03
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 01A0D3A7A5E37191E93F022CDEEE7127CCAA
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/OKSPa8mzNk_qq-j1U7rgAv7ffgM.roa
Signing time: Thu 24 Sep 2026 13:42:54 +0000
ROA not before: Thu 24 Sep 2026 13:42:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 85.8.150.0/24 maxlen: 24
185.145.47.0/24 maxlen: 24
185.196.26.0/24 maxlen: 24
185.235.123.0/24 maxlen: 24
185.242.185.0/24 maxlen: 24
193.31.114.0/24 maxlen: 24
194.50.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 07:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:a7:a5:e3:71:91:e9:3f:02:2c:de:ee:71:27:cc:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Sep 24 13:42:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38a48f6bc9b3364feaabe8f553bae002fedf7e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ec:e8:e8:a3:ca:c8:46:d7:c4:93:bc:8d:7f:
ca:75:3a:6e:c7:ce:49:83:22:e3:b1:7d:1d:31:e6:
3d:f1:b5:88:e8:80:fc:25:37:3e:48:34:71:d7:70:
02:f4:ee:4d:a8:ff:68:30:db:12:99:ae:b5:f1:f8:
08:6e:7a:1c:94:54:6d:b5:51:e1:3a:b9:32:c4:d5:
3d:d8:dc:5a:ee:45:ad:23:c2:36:07:99:3e:a2:ab:
b5:55:7e:4b:a3:3f:cb:0f:4f:d0:80:d4:d8:dc:95:
b5:13:5d:37:f3:6f:15:f3:dd:4c:6d:86:b0:30:d8:
f3:31:97:0d:9d:5b:2c:a9:f7:94:42:58:da:9a:21:
a3:7f:b9:5b:2c:6c:8b:72:68:69:4f:88:05:8a:57:
89:8c:95:d5:1c:5a:6c:7f:98:6f:6c:9c:d1:f4:90:
4e:c1:40:60:9f:9c:90:72:ce:a3:c5:33:9c:48:78:
30:a5:1c:d7:67:47:38:b9:f7:4a:fd:4c:9e:75:b7:
cb:67:10:43:59:f3:e0:88:a8:7e:8a:0f:02:95:df:
7d:f9:ed:2b:d5:16:b7:bf:17:ae:e5:3d:e8:a7:37:
ab:d7:5a:f5:f6:58:41:f6:3c:3b:93:ad:aa:ef:f9:
53:88:03:66:74:3a:26:a6:aa:33:31:44:c4:e2:47:
20:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A4:8F:6B:C9:B3:36:4F:EA:AB:E8:F5:53:BA:E0:02:FE:DF:7E:03
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/OKSPa8mzNk_qq-j1U7rgAv7ffgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.150.0/24
185.145.47.0/24
185.196.26.0/24
185.235.123.0/24
185.242.185.0/24
193.31.114.0/24
194.50.194.0/24
Signature Algorithm: sha256WithRSAEncryption
02:46:71:f9:f1:ad:b4:77:01:51:d2:e4:93:ef:8e:d7:79:3d:
62:af:9f:bc:99:95:b8:f5:3c:09:e4:21:2b:56:18:e8:47:fe:
7a:cb:59:45:b0:7c:0e:02:69:74:d1:08:9e:8c:91:06:fa:08:
4c:af:93:85:6f:3e:da:43:d4:5b:99:d1:4e:4b:05:f9:b6:11:
c1:c8:04:2b:14:03:4c:d8:f7:6c:a7:ef:94:ac:3f:68:94:a3:
eb:1d:69:2a:e2:46:16:f9:52:a1:64:66:5e:44:74:18:3c:84:
10:ba:a3:e3:63:88:45:2b:e4:26:95:71:33:06:ae:55:9a:42:
95:ad:47:23:c8:c0:51:ec:03:f4:59:81:a1:b5:10:4b:2b:23:
22:67:0d:38:08:59:fc:09:3e:99:2b:77:26:65:87:85:2c:b5:
14:72:10:b9:93:47:4f:fc:92:21:8d:b9:12:54:ee:01:80:23:
25:dc:a7:c9:e2:65:30:02:5b:fd:a6:01:85:87:87:af:31:6e:
84:58:3c:27:86:13:aa:ed:39:2b:cd:37:de:57:a2:ac:8a:16:
60:f4:a1:97:fa:14:87:ce:14:13:b7:63:4b:db:c0:45:61:6e:
80:41:80:8a:3c:6f:52:b4:6b:fb:eb:27:0e:37:f3:cb:13:9b:
4f:82:7f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:09:09 2026 by rpki-client