Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oSEjLh7tE7vzCV32cKgJCqIbOfQ.roa
File: oSEjLh7tE7vzCV32cKgJCqIbOfQ.roa (raw, json)
Hash identifier: ok2Rd/dHH1xrcTOxIJkwbkzjT9nJscBwgfvl/QmA4kw=
Subject key identifier: A1:21:23:2E:1E:ED:13:BB:F3:09:5D:F6:70:A8:09:0A:A2:1B:39:F4
Certificate issuer: /CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
Certificate serial: 019FEACCB1A35BC87FBC6C2CCD618B87F608
Authority key identifier: A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oSEjLh7tE7vzCV32cKgJCqIbOfQ.roa
Signing time: Mon 10 Aug 2026 08:31:51 +0000
ROA not before: Mon 10 Aug 2026 08:31:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206492
IP address blocks: 5.154.170.0/24 maxlen: 24
45.150.248.0/22 maxlen: 22
130.78.96.0/20 maxlen: 20
185.185.32.0/22 maxlen: 22
185.185.32.0/24 maxlen: 24
194.148.52.0/22 maxlen: 22
2a0b:4d80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ea:cc:b1:a3:5b:c8:7f:bc:6c:2c:cd:61:8b:87:f6:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
Validity
Not Before: Aug 10 08:31:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a121232e1eed13bbf3095df670a8090aa21b39f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:94:ec:8a:4d:cc:e5:52:b2:d3:52:14:6a:b9:
e9:64:db:28:bb:53:eb:02:8e:c7:01:5e:80:1b:a8:
7c:3d:18:dd:22:75:0d:82:ba:fd:8d:9b:97:8e:86:
72:65:47:1f:f8:b1:5d:b3:76:00:80:c6:b3:ea:87:
ff:6c:84:d7:39:8a:bf:87:70:21:6e:d1:d0:6b:8d:
8b:bb:9f:c5:a5:8e:96:fc:22:2c:e6:8a:fc:d1:03:
c7:52:f8:d0:09:d3:e4:05:67:8b:e9:fa:2a:86:36:
fe:2c:f8:18:3c:04:ee:a0:6b:c7:61:8d:46:90:46:
32:5f:44:5e:75:9c:17:d4:23:75:53:e4:a4:be:1e:
e2:9a:f4:40:5b:1e:69:93:2b:95:ef:0f:c3:5c:38:
cd:19:57:f3:f7:29:75:93:08:65:1c:6f:0f:86:de:
69:75:1c:a8:99:d2:54:2f:7d:0c:73:5f:47:8a:8a:
be:58:41:25:78:98:47:42:a9:7b:03:27:8a:ed:29:
2f:1e:83:08:fc:ea:e1:38:3f:c5:e1:6c:c0:0d:1b:
ba:0c:70:50:b7:11:20:dc:27:e6:35:09:73:74:b3:
84:18:17:82:ed:e6:47:ac:17:6a:61:c3:3a:4c:1a:
ad:ab:65:3b:74:09:6c:34:6e:61:77:70:cb:1d:54:
28:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:21:23:2E:1E:ED:13:BB:F3:09:5D:F6:70:A8:09:0A:A2:1B:39:F4
X509v3 Authority Key Identifier:
keyid:A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oSEjLh7tE7vzCV32cKgJCqIbOfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.170.0/24
45.150.248.0/22
130.78.96.0/20
185.185.32.0/22
194.148.52.0/22
IPv6:
2a0b:4d80::/29
Signature Algorithm: sha256WithRSAEncryption
6d:ab:4a:1b:80:75:0f:91:b5:d8:2e:98:2d:1c:0b:c0:d4:98:
65:88:10:a2:e1:9e:3c:4e:3d:99:b6:56:de:81:cb:a8:0a:40:
ec:0b:10:ef:16:62:6d:15:04:6d:b1:5d:2c:06:6b:2c:a0:c9:
81:a2:21:54:5f:56:4c:45:8f:f6:c7:25:73:2a:2e:71:f2:b9:
4d:0b:2d:ae:3f:d7:ec:87:df:94:ae:4f:a5:64:f0:94:55:49:
d6:b6:ad:d8:d2:5c:f9:06:50:b9:16:f8:33:f6:5d:ad:29:db:
1d:d3:47:85:13:39:07:b8:5a:b1:05:5c:63:88:96:93:59:d8:
3a:2b:01:88:c0:c1:b2:f3:a8:fb:12:d7:4e:df:8f:16:9c:a3:
7e:7e:4c:e1:9b:45:e4:d1:3e:a3:05:6c:e3:b0:ca:74:6c:1c:
9e:8d:66:10:ca:38:ff:13:fa:38:45:ce:ed:f9:bc:da:7f:b9:
99:c5:1b:a0:f6:4d:80:64:f7:5a:48:29:25:b3:25:e1:53:73:
4f:f8:2b:10:23:3f:13:de:50:22:b6:33:25:58:12:90:2a:65:
bf:65:04:fb:45:c2:f2:74:81:d3:d2:e8:ed:5d:a4:53:d3:e7:
db:8d:3a:d1:d5:ed:08:0a:7e:1f:1a:6f:72:55:6a:a8:d9:0b:
36:58:ff:03
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAZ/qzLGjW8h/vGwszWGLh/YIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZWE4ZGUzMWNlY2E1NTgwM2NmM2FmMTRkNGE3Mjc5YWU4
NDQ2ZDAwHhcNMjYwODEwMDgzMTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTIxMjMyZTFlZWQxM2JiZjMwOTVkZjY3MGE4MDkwYWEyMWIzOWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5Tsik3M5VKy01IUarnpZNsou1Pr
Ao7HAV6AG6h8PRjdInUNgrr9jZuXjoZyZUcf+LFds3YAgMaz6of/bITXOYq/h3Ah
btHQa42Lu5/FpY6W/CIs5or80QPHUvjQCdPkBWeL6foqhjb+LPgYPATuoGvHYY1G
kEYyX0RedZwX1CN1U+Skvh7imvRAWx5pkyuV7w/DXDjNGVfz9yl1kwhlHG8Pht5p
dRyomdJUL30Mc19Hioq+WEEleJhHQql7AyeK7SkvHoMI/OrhOD/F4WzADRu6DHBQ
txEg3CfmNQlzdLOEGBeC7eZHrBdqYcM6TBqtq2U7dAlsNG5hd3DLHVQopwIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFKEhIy4e7RO78wld9nCoCQqiGzn0MB8GA1UdIwQY
MBaAFKHqjeMc7KVYA8868U1KcnmuhEbQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2VxTjR4enNwVmdEenpyeFRVcHllYTZFUnRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jYTk5ZDgtODUyNy00NWI4LWFmNmEt
NzY1MjYyZjI5ZWFmLzEvb1NFakxoN3RFN3Z6Q1YzMmNLZ0pDcUliT2ZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9jYTk5ZDgtODUyNy00NWI4LWFmNmEtNzY1MjYyZjI5ZWFm
LzEvb2VxTjR4enNwVmdEenpyeFRVcHllYTZFUnRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQABZqqAwQC
LZb4AwQEgk5gAwQCubkgAwQCwpQ0MA0EAgACMAcDBQMqC02AMA0GCSqGSIb3DQEB
CwUAA4IBAQBtq0obgHUPkbXYLpgtHAvA1JhliBCi4Z48Tj2ZtlbegcuoCkDsCxDv
FmJtFQRtsV0sBmssoMmBoiFUX1ZMRY/2xyVzKi5x8rlNCy2uP9fsh9+Urk+lZPCU
VUnWtq3Y0lz5BlC5Fvgz9l2tKdsd00eFEzkHuFqxBVxjiJaTWdg6KwGIwMGy86j7
EtdO348WnKN+fkzhm0Xk0T6jBWzjsMp0bByejWYQyjj/E/o4Rc7t+bzaf7mZxRug
9k2AZPdaSCklsyXhU3NP+CsQIz8T3lAitjMlWBKQKmW/ZQT7RcLydIHT0ujtXaRT
0+fbjTrR1e0ICn4fGm9yVWqo2Qs2WP8D
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:52:17 2026 by rpki-client