Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/oKhpIH_BWd5Noqx6eV2DySEcGb0.roa
File: oKhpIH_BWd5Noqx6eV2DySEcGb0.roa (raw, json)
Hash identifier: N7FlWOqyJoex6ZmwsucsTTYLs5nNX4sZKRbn/6c/tug=
Subject key identifier: A0:A8:69:20:7F:C1:59:DE:4D:A2:AC:7A:79:5D:83:C9:21:1C:19:BD
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 019F944D30B5A25DE3090EC4A924A21324D4
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/oKhpIH_BWd5Noqx6eV2DySEcGb0.roa
Signing time: Fri 24 Jul 2026 13:25:14 +0000
ROA not before: Fri 24 Jul 2026 13:25:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 18530
IP address blocks: 31.13.214.0/24 maxlen: 24
37.60.142.0/24 maxlen: 24
37.61.225.0/24 maxlen: 24
37.61.230.0/24 maxlen: 24
46.243.160.0/24 maxlen: 24
87.120.58.0/24 maxlen: 24
87.120.62.0/24 maxlen: 24
87.120.247.0/24 maxlen: 24
87.121.102.0/24 maxlen: 24
93.123.25.0/24 maxlen: 24
93.123.111.0/24 maxlen: 24
94.156.40.0/23 maxlen: 23
94.156.43.0/24 maxlen: 24
94.156.62.0/23 maxlen: 23
94.156.132.0/23 maxlen: 23
94.156.145.0/24 maxlen: 24
94.156.224.0/23 maxlen: 23
158.120.252.0/23 maxlen: 23
188.212.110.0/24 maxlen: 24
192.175.2.0/24 maxlen: 24
198.160.152.0/24 maxlen: 24
203.17.237.0/24 maxlen: 24
203.25.139.0/24 maxlen: 24
203.78.161.0/24 maxlen: 24
203.78.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:4d:30:b5:a2:5d:e3:09:0e:c4:a9:24:a2:13:24:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Jul 24 13:25:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0a869207fc159de4da2ac7a795d83c9211c19bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e4:dd:39:32:36:c8:d3:ba:44:a7:9d:82:35:
b4:65:6f:2b:b2:f0:57:23:1a:6e:e7:67:c2:ae:5c:
05:a7:ca:96:91:13:e2:15:88:e3:be:35:03:f8:da:
b4:78:ef:c7:ef:4a:ee:be:c6:72:05:59:05:29:6a:
61:df:ef:ba:08:ae:c2:66:5c:08:b8:26:e6:24:7b:
aa:1d:3a:74:26:a2:e3:19:43:c4:af:fa:ef:f1:16:
4d:43:e9:51:8d:a4:97:26:1f:eb:ce:f8:d5:85:0e:
e0:26:d1:7e:3f:38:97:58:46:e4:b0:f9:d3:b9:5c:
1e:3a:1b:75:e1:7d:cb:79:b7:17:a9:10:dc:36:18:
fb:73:f5:eb:17:29:37:94:66:1c:34:74:1c:a6:b9:
57:89:5a:f9:d1:b8:ba:87:bb:25:bc:cb:de:9b:84:
ce:74:59:9f:9e:b2:f0:d8:b5:e1:ae:e4:66:27:9d:
3a:8a:fa:fc:33:f1:de:9e:88:9d:3c:42:3e:71:05:
d6:dc:ce:1e:ef:13:da:11:2e:79:6f:61:ea:99:63:
f5:19:0c:3f:e4:44:82:97:61:b2:c6:18:68:ae:f6:
56:dc:bc:44:bb:b0:95:70:a9:32:3b:40:78:e9:49:
7d:71:28:6a:cd:7d:76:7d:97:ba:66:32:34:49:42:
f1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A8:69:20:7F:C1:59:DE:4D:A2:AC:7A:79:5D:83:C9:21:1C:19:BD
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/oKhpIH_BWd5Noqx6eV2DySEcGb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.214.0/24
37.60.142.0/24
37.61.225.0/24
37.61.230.0/24
46.243.160.0/24
87.120.58.0/24
87.120.62.0/24
87.120.247.0/24
87.121.102.0/24
93.123.25.0/24
93.123.111.0/24
94.156.40.0/23
94.156.43.0/24
94.156.62.0/23
94.156.132.0/23
94.156.145.0/24
94.156.224.0/23
158.120.252.0/23
188.212.110.0/24
192.175.2.0/24
198.160.152.0/24
203.17.237.0/24
203.25.139.0/24
203.78.161.0/24
203.78.164.0/24
Signature Algorithm: sha256WithRSAEncryption
41:df:07:a0:ed:7b:84:ff:7b:0f:3a:8f:de:85:dc:57:da:b0:
51:1a:f8:14:fc:6a:03:33:13:3c:b9:33:33:d2:4a:7f:4e:a3:
f4:c7:86:48:08:7b:eb:a3:c5:13:1b:44:98:c6:8f:b8:bc:a8:
c7:f4:6d:bc:f4:cc:2d:86:e5:31:6d:ce:52:a4:52:90:c1:c9:
1c:e2:8b:97:5a:1d:3e:7c:79:28:a1:eb:16:c0:93:0e:bf:97:
1d:a1:c1:b6:f7:f9:73:0d:4f:97:cd:97:39:da:47:70:75:25:
46:97:03:b7:dc:ed:90:31:7e:ec:ad:d8:25:ea:97:3a:61:90:
c3:a8:bb:8c:34:3b:00:fb:af:42:8c:ee:96:3d:18:db:dc:f2:
8b:46:aa:de:79:e9:c2:eb:c2:c6:df:e8:7f:9a:df:d1:d8:c4:
4f:9c:8d:1d:02:62:46:ed:10:57:27:df:1d:40:87:b2:2b:fc:
b5:b0:70:ab:0f:7f:b5:f9:e0:60:8e:9f:a5:4e:ce:df:31:2d:
54:f3:c8:85:54:cf:62:f4:d8:99:fe:79:00:26:85:9d:7e:11:
8c:7f:15:53:83:87:3c:d5:0b:5f:a7:ce:af:0c:e1:1d:c6:f3:
87:95:77:b4:f6:5d:48:7a:43:62:36:25:8b:d2:4d:d1:5f:76:
39:60:bb:95
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgISAZ+UTTC1ol3jCQ7EqSSiEyTUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw
Njc5NTQwHhcNMjYwNzI0MTMyNTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMGE4NjkyMDdmYzE1OWRlNGRhMmFjN2E3OTVkODNjOTIxMWMxOWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOTdOTI2yNO6RKedgjW0ZW8rsvBX
Ixpu52fCrlwFp8qWkRPiFYjjvjUD+Nq0eO/H70ruvsZyBVkFKWph3++6CK7CZlwI
uCbmJHuqHTp0JqLjGUPEr/rv8RZNQ+lRjaSXJh/rzvjVhQ7gJtF+PziXWEbksPnT
uVweOht14X3LebcXqRDcNhj7c/XrFyk3lGYcNHQcprlXiVr50bi6h7slvMvem4TO
dFmfnrLw2LXhruRmJ506ivr8M/HenoidPEI+cQXW3M4e7xPaES55b2HqmWP1GQw/
5ESCl2GyxhhorvZW3LxEu7CVcKkyO0B46Ul9cShqzX12fZe6ZjI0SULx0QIDAQAB
o4ICnjCCApowHQYDVR0OBBYEFKCoaSB/wVneTaKsenldg8khHBm9MB8GA1UdIwQY
MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt
NmVhYzYyZTYwZGY3LzEvb0tocElIX0JXZDVOb3F4NmVWMkR5U0VjR2IwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3
LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGzBggrBgEFBQcBBwEB/wSBozCBoDCBnQQCAAEwgZYDBAAf
DdYDBAAlPI4DBAAlPeEDBAAlPeYDBAAu86ADBABXeDoDBABXeD4DBABXePcDBABX
eWYDBABdexkDBABde28DBAFenCgDBABenCsDBAFenD4DBAFenIQDBABenJEDBAFe
nOADBAGeePwDBAC81G4DBADArwIDBADGoJgDBADLEe0DBADLGYsDBADLTqEDBADL
TqQwDQYJKoZIhvcNAQELBQADggEBAEHfB6Dte4T/ew86j96F3FfasFEa+BT8agMz
Ezy5MzPSSn9Oo/THhkgIe+ujxRMbRJjGj7i8qMf0bbz0zC2G5TFtzlKkUpDByRzi
i5daHT58eSih6xbAkw6/lx2hwbb3+XMNT5fNlznaR3B1JUaXA7fc7ZAxfuyt2CXq
lzphkMOou4w0OwD7r0KM7pY9GNvc8otGqt556cLrwsbf6H+a39HYxE+cjR0CYkbt
EFcn3x1Ah7Ir/LWwcKsPf7X54GCOn6VOzt8xLVTzyIVUz2L02Jn+eQAmhZ1+EYx/
FVODhzzVC1+nzq8M4R3G84eVd7T2XUh6Q2I2JYvSTdFfdjlgu5U=
-----END CERTIFICATE-----
Generated at Sun Jul 26 21:33:03 2026 by rpki-client