Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/OzEEl94UHcGQ3bSNujIDhsavZ8I.roa
File: OzEEl94UHcGQ3bSNujIDhsavZ8I.roa (raw, json)
Hash identifier: Fv7Q0PUkuK2UNR1AqJX37IDONsOjIFKcwIavlgnZTes=
Subject key identifier: 3B:31:04:97:DE:14:1D:C1:90:DD:B4:8D:BA:32:03:86:C6:AF:67:C2
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019F560D0E34165C41580EBB7F4E38938901
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/OzEEl94UHcGQ3bSNujIDhsavZ8I.roa
Signing time: Sun 12 Jul 2026 11:18:43 +0000
ROA not before: Sun 12 Jul 2026 11:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5650
IP address blocks: 147.90.1.0/24 maxlen: 24
158.173.180.0/22 maxlen: 22
158.173.224.0/24 maxlen: 24
158.173.225.0/24 maxlen: 24
158.173.228.0/24 maxlen: 24
158.173.234.0/24 maxlen: 24
158.173.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:56:0d:0e:34:16:5c:41:58:0e:bb:7f:4e:38:93:89:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jul 12 11:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b310497de141dc190ddb48dba320386c6af67c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:74:a3:e7:1a:6b:f3:33:ef:04:de:bd:3a:63:
c4:0e:50:28:4e:25:6d:b2:90:b7:b7:0b:06:32:77:
49:c7:7b:85:b4:e0:b1:f4:55:5a:41:34:e9:f2:fd:
7a:ad:e7:51:4a:8b:0d:da:c2:58:06:cb:b6:7f:8e:
ba:ce:42:01:cf:df:59:f0:c5:b8:fb:97:11:4f:6f:
2e:0d:6a:5c:21:26:c7:2b:af:c6:82:17:cc:8c:03:
ba:f1:13:63:85:e0:89:94:a9:e8:70:fa:44:7f:76:
cc:13:47:6c:c3:8d:3c:16:00:8c:c2:c8:43:1f:eb:
56:76:39:b1:97:9f:93:2d:54:c7:97:f2:c0:66:da:
75:d8:ad:d4:54:87:10:b6:c6:9f:c1:1a:91:59:0f:
7c:3e:86:ae:fa:f7:3b:b4:70:ac:92:b5:05:84:a1:
a7:c6:90:79:f4:b7:79:85:39:ab:b8:3f:ec:fb:58:
d4:8f:47:c0:80:41:3a:55:0f:50:c6:7b:16:2d:ad:
df:57:a4:d8:94:1f:6d:43:7c:c3:10:9c:8b:9c:f4:
34:94:06:7c:3e:23:b4:ad:6b:b6:94:f6:77:cc:ba:
7e:f5:40:36:7d:2f:4c:40:79:22:1e:2a:6d:83:77:
1b:67:bc:e2:a4:d4:02:cc:55:cd:80:11:04:fc:43:
5b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:31:04:97:DE:14:1D:C1:90:DD:B4:8D:BA:32:03:86:C6:AF:67:C2
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/OzEEl94UHcGQ3bSNujIDhsavZ8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.1.0/24
158.173.180.0/22
158.173.224.0/23
158.173.228.0/24
158.173.234.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:ea:e8:03:c0:cc:3d:12:83:f1:08:79:ac:aa:4d:b4:ee:8c:
fa:bd:9c:c7:32:ca:91:18:91:c2:97:f2:20:06:22:9f:b9:58:
f2:05:36:c5:48:4a:8b:0e:d2:b7:00:43:d4:98:dc:ae:81:d4:
c2:13:76:20:6a:67:5a:79:8c:1f:9d:e8:83:15:aa:a1:05:b6:
f1:20:32:d1:18:f6:94:fb:e8:ac:16:d1:d3:7d:9d:ca:a8:99:
e2:68:10:a4:c8:68:76:57:37:61:a6:17:34:07:81:9b:1b:85:
1d:52:e1:29:aa:e0:fe:d5:24:c3:7c:8e:b4:a1:aa:22:75:81:
26:37:35:d6:62:75:56:37:dd:ed:24:2b:85:3f:30:30:1d:8b:
24:77:69:97:7b:ed:49:3f:d4:f5:62:95:bc:0d:ed:1d:a4:6b:
33:0c:9e:84:d3:82:86:35:2a:ab:78:a7:e4:0d:3e:12:cb:8a:
67:48:b6:d8:c8:42:32:31:97:33:5c:76:e5:75:8c:78:63:c9:
4a:6b:41:ba:f3:29:ec:18:18:7c:3b:23:f1:48:b6:e2:d5:7b:
31:1c:ce:f3:55:94:0f:00:62:dc:97:08:01:0a:bd:a7:e0:03:
0f:0e:8d:70:11:2a:22:dd:4a:87:53:ef:02:6d:ce:06:0e:df:
4d:e8:07:42
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZ9WDQ40FlxBWA67f044k4kBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5
NTkyZGEwHhcNMjYwNzEyMTExODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjMxMDQ5N2RlMTQxZGMxOTBkZGI0OGRiYTMyMDM4NmM2YWY2N2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XSj5xpr8zPvBN69OmPEDlAoTiVt
spC3twsGMndJx3uFtOCx9FVaQTTp8v16redRSosN2sJYBsu2f466zkIBz99Z8MW4
+5cRT28uDWpcISbHK6/GghfMjAO68RNjheCJlKnocPpEf3bME0dsw408FgCMwshD
H+tWdjmxl5+TLVTHl/LAZtp12K3UVIcQtsafwRqRWQ98Poau+vc7tHCskrUFhKGn
xpB59Ld5hTmruD/s+1jUj0fAgEE6VQ9QxnsWLa3fV6TYlB9tQ3zDEJyLnPQ0lAZ8
PiO0rWu2lPZ3zLp+9UA2fS9MQHkiHiptg3cbZ7zipNQCzFXNgBEE/ENb5QIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFDsxBJfeFB3BkN20jboyA4bGr2fCMB8GA1UdIwQY
MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt
ZjVmYjcxYjlhNTFmLzEvT3pFRWw5NFVIY0dRM2JTTnVqSURoc2F2WjhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm
LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAk1oBAwQC
nq20AwQBnq3gAwQAnq3kAwQBnq3qMA0GCSqGSIb3DQEBCwUAA4IBAQCc6ugDwMw9
EoPxCHmsqk207oz6vZzHMsqRGJHCl/IgBiKfuVjyBTbFSEqLDtK3AEPUmNyugdTC
E3YgamdaeYwfneiDFaqhBbbxIDLRGPaU++isFtHTfZ3KqJniaBCkyGh2Vzdhphc0
B4GbG4UdUuEpquD+1STDfI60oaoidYEmNzXWYnVWN93tJCuFPzAwHYskd2mXe+1J
P9T1YpW8De0dpGszDJ6E04KGNSqreKfkDT4Sy4pnSLbYyEIyMZczXHbldYx4Y8lK
a0G68ynsGBh8OyPxSLbi1XsxHM7zVZQPAGLclwgBCr2n4AMPDo1wESoi3UqHU+8C
bc4GDt9N6AdC
-----END CERTIFICATE-----
Generated at Mon Jul 20 13:46:48 2026 by rpki-client