Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/ObHLTJq1aBz3HWS_14dGi7ZnpUA.roa
File: ObHLTJq1aBz3HWS_14dGi7ZnpUA.roa (raw, json)
Hash identifier: rjgdc1W6vPpG3uPNkDBN/qtt12z0N51cOglFEFDyoWY=
Subject key identifier: 39:B1:CB:4C:9A:B5:68:1C:F7:1D:64:BF:D7:87:46:8B:B6:67:A5:40
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 019F9450D9DDB6121FD47068ED19C38EE975
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/ObHLTJq1aBz3HWS_14dGi7ZnpUA.roa
Signing time: Fri 24 Jul 2026 13:29:14 +0000
ROA not before: Fri 24 Jul 2026 13:29:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 812
IP address blocks: 31.13.214.0/24 maxlen: 24
93.123.111.0/24 maxlen: 24
94.156.43.0/24 maxlen: 24
152.163.108.0/23 maxlen: 23
185.145.216.0/22 maxlen: 22
189.104.0.0/23 maxlen: 23
189.104.10.0/23 maxlen: 23
189.104.100.0/23 maxlen: 23
192.175.2.0/24 maxlen: 24
198.160.152.0/24 maxlen: 24
203.17.237.0/24 maxlen: 24
203.25.139.0/24 maxlen: 24
203.78.163.0/24 maxlen: 24
205.188.104.0/22 maxlen: 22
205.188.112.0/22 maxlen: 22
205.188.120.0/22 maxlen: 22
205.188.128.0/22 maxlen: 22
205.188.136.0/22 maxlen: 22
205.188.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:50:d9:dd:b6:12:1f:d4:70:68:ed:19:c3:8e:e9:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Jul 24 13:29:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39b1cb4c9ab5681cf71d64bfd787468bb667a540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:22:2f:0a:fa:86:70:43:61:fb:3d:09:e1:fe:
41:6c:3b:94:82:f7:66:c4:80:b1:64:48:cc:68:43:
c0:3b:61:95:24:22:ab:d9:95:60:fd:07:a8:a5:90:
f2:f4:63:b5:99:8d:74:c8:a6:19:33:b8:8c:7e:09:
61:4c:0f:65:bd:c8:53:41:0f:88:8c:a6:08:7a:59:
49:c0:db:85:5a:a5:9a:7d:52:53:c3:25:c0:9c:30:
f0:93:3c:35:ce:86:2a:ef:29:9b:b8:07:5f:a9:71:
f0:9d:81:ff:6c:7c:48:31:a7:78:7a:5b:84:6b:a5:
70:a9:5d:4d:66:d1:49:b6:59:97:e8:d0:53:55:0e:
f5:7f:28:8b:1b:e6:7b:d8:00:3c:9f:c6:97:ef:ad:
8b:ba:9e:ba:e6:ce:91:b6:ea:99:b4:0f:0c:40:ee:
da:56:d6:39:b1:bd:01:be:61:ce:ce:c5:dd:68:ab:
21:3f:c5:f7:58:12:04:ce:3c:a4:0d:6a:d7:f4:7c:
04:14:e3:e3:c8:41:3c:29:cb:b1:a5:b5:54:c7:8c:
c1:0e:30:4f:8e:20:d0:9f:38:ab:1d:02:f0:53:60:
17:4f:87:18:d1:74:b2:30:d9:10:53:fe:93:4a:2c:
08:db:10:b4:22:71:83:13:c0:11:7c:4c:36:43:ac:
36:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B1:CB:4C:9A:B5:68:1C:F7:1D:64:BF:D7:87:46:8B:B6:67:A5:40
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/ObHLTJq1aBz3HWS_14dGi7ZnpUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.214.0/24
93.123.111.0/24
94.156.43.0/24
152.163.108.0/23
185.145.216.0/22
189.104.0.0/23
189.104.10.0/23
189.104.100.0/23
192.175.2.0/24
198.160.152.0/24
203.17.237.0/24
203.25.139.0/24
203.78.163.0/24
205.188.104.0/22
205.188.112.0/22
205.188.120.0/22
205.188.128.0/22
205.188.136.0/22
205.188.144.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:c6:db:ac:1b:85:cf:e2:da:1d:dc:6d:00:67:13:ee:b2:c6:
bf:20:57:bd:6c:06:6d:64:58:16:28:bb:94:85:6f:ff:ac:2d:
f9:d3:95:33:44:cd:ea:95:df:0b:13:81:ff:2c:56:70:6f:3d:
76:f3:ce:5c:41:66:73:46:1e:22:9a:50:db:a6:0b:08:77:82:
34:37:6c:e6:a0:f9:18:9b:a3:28:ed:7a:61:d3:3f:f2:53:e9:
3a:c5:8f:db:6d:26:99:b4:68:72:87:64:9e:75:bb:02:5e:b3:
0d:3d:d2:72:5a:e2:5e:95:d6:10:ff:5d:ca:5a:80:db:5c:69:
72:df:2d:a6:73:ff:73:b7:b1:63:59:8b:f5:c1:07:30:91:15:
9e:e6:27:61:6a:92:c3:3c:4b:60:3e:a8:73:bb:07:6e:d6:09:
8c:b4:1c:13:59:81:a9:e8:49:d2:92:62:11:5e:eb:a8:5c:8b:
7d:e8:98:d2:dd:9f:71:fb:23:27:4b:0f:55:5a:76:da:5d:a4:
84:90:ee:eb:d7:20:07:c3:e7:99:91:de:a9:cb:27:a6:63:82:
81:df:e3:22:12:22:71:ec:1f:54:33:d6:7f:5d:6a:44:4d:f7:
eb:07:97:16:f4:61:8e:9d:09:32:83:58:cd:59:f4:4b:5d:fd:
9e:b8:65:0c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jul 26 21:33:04 2026 by rpki-client