Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/olrnK_m_iBhYQvCZdghG4LMwlT0.roa
File: olrnK_m_iBhYQvCZdghG4LMwlT0.roa (raw, json)
Hash identifier: mmgP86v8tYAz0NDLtAZnFrjVC2nRQCofTVnYWX1cX5I=
Subject key identifier: A2:5A:E7:2B:F9:BF:88:18:58:42:F0:99:76:08:46:E0:B3:30:95:3D
Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Certificate serial: 01A0581873513EF8DDCC776C8B73DBB64164
Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/olrnK_m_iBhYQvCZdghG4LMwlT0.roa
Signing time: Mon 31 Aug 2026 13:53:12 +0000
ROA not before: Mon 31 Aug 2026 13:53:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5065
IP address blocks: 62.217.1.0/24 maxlen: 24
62.217.18.0/24 maxlen: 24
62.217.20.0/24 maxlen: 24
62.217.22.0/24 maxlen: 24
212.180.111.0/24 maxlen: 24
212.180.112.0/24 maxlen: 24
212.180.113.0/24 maxlen: 24
212.180.114.0/24 maxlen: 24
212.180.117.0/24 maxlen: 24
212.180.118.0/24 maxlen: 24
212.180.119.0/24 maxlen: 24
212.180.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 19:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:18:73:51:3e:f8:dd:cc:77:6c:8b:73:db:b6:41:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Validity
Not Before: Aug 31 13:53:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a25ae72bf9bf88185842f099760846e0b330953d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:43:51:cd:f6:0a:4e:aa:58:aa:ee:6d:b4:f0:
fe:02:f0:e6:3a:4c:2a:30:2d:8b:f0:dc:29:82:97:
8b:35:3a:f6:d4:2a:1a:40:7c:64:95:ab:54:5b:85:
a3:d5:f8:2b:ce:b8:bd:39:64:fb:e1:10:1f:6a:7f:
51:b8:ee:44:a5:d8:6d:ad:0e:9a:a1:1e:fc:6b:f9:
db:84:08:1b:06:08:84:ae:6f:65:16:5a:9c:19:db:
f4:87:ca:ae:6b:11:0c:e4:71:cc:61:2d:c4:e4:6c:
db:46:0a:27:2e:7a:5d:b6:49:d1:de:02:f4:95:42:
2c:b8:66:81:46:1a:0a:eb:06:11:d3:b6:64:e5:57:
3f:00:d0:40:48:2b:a1:3a:33:dc:68:1f:6c:37:83:
5f:49:94:d2:13:60:87:03:9e:34:97:99:45:b7:98:
b8:0f:09:36:b2:a1:15:49:ba:c7:30:4b:9b:ae:e7:
e0:1d:97:68:16:92:b7:4e:9d:ee:a0:cd:7c:0e:7b:
c2:08:2a:c4:40:b9:43:70:9d:b8:01:47:aa:3e:e4:
0b:ba:97:c9:11:46:8d:8a:9e:de:3c:88:16:9b:33:
ca:c7:21:f5:d3:a7:90:0b:fc:48:55:5e:86:23:4a:
82:77:87:56:6d:92:6d:c1:64:d4:9f:e8:8d:f3:d4:
fe:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5A:E7:2B:F9:BF:88:18:58:42:F0:99:76:08:46:E0:B3:30:95:3D
X509v3 Authority Key Identifier:
keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/olrnK_m_iBhYQvCZdghG4LMwlT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.217.1.0/24
62.217.18.0/24
62.217.20.0/24
62.217.22.0/24
212.180.111.0-212.180.114.255
212.180.117.0-212.180.119.255
212.180.125.0/24
Signature Algorithm: sha256WithRSAEncryption
01:a3:fe:ee:cd:a8:a9:ed:55:b7:47:c6:00:33:80:74:45:4f:
18:b5:ad:08:37:c8:96:b4:fb:0b:03:a3:c7:ab:07:f7:c7:6d:
d1:63:dd:7a:ea:6e:e5:d9:aa:1d:d0:7c:e2:ca:43:2f:4d:b7:
af:12:6d:ab:69:2c:15:10:fa:49:7a:64:9d:bb:4f:98:d7:04:
2f:8b:15:e3:5f:f7:c5:f3:cf:45:55:5d:27:d4:95:9f:d6:0e:
54:e6:37:9d:5e:e2:a0:31:cc:dc:d4:3f:c9:4a:39:30:84:d4:
3d:d7:7c:8b:af:9c:22:51:94:15:2d:6f:7b:63:c2:7e:74:6f:
ad:6e:ce:19:d2:74:b2:52:ec:f6:34:72:ba:0a:0a:28:48:16:
f1:cd:64:0e:0c:95:a9:4d:be:6c:6a:0e:a1:91:92:33:76:2e:
6b:af:76:7e:8c:ae:b8:8c:c1:25:8d:9f:05:1e:21:01:77:eb:
5d:16:36:33:62:b7:a0:58:b6:08:6c:dd:0d:62:85:31:99:6e:
02:4e:25:5d:be:eb:38:c8:9e:be:ca:28:6a:e0:9c:a6:89:78:
29:03:6d:9d:25:7a:0c:d0:15:d8:ee:59:3c:8a:7e:a9:2c:ae:
8d:a6:47:0f:54:ce:5d:ce:59:cb:4c:20:6f:1d:5a:91:46:cb:
8f:47:58:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 02:28:16 2026 by rpki-client