Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/OV9vPfE36UjjpXtSJJCl2RjhjUM.roa
File: OV9vPfE36UjjpXtSJJCl2RjhjUM.roa (raw, json)
Hash identifier: gXj2cTdcFl6LrDFYhNWdcbH43v09GJnfLgLg86L7EK8=
Subject key identifier: 39:5F:6F:3D:F1:37:E9:48:E3:A5:7B:52:24:90:A5:D9:18:E1:8D:43
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019E2B93F44EF9B2CD32420E5FB01F62755A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/OV9vPfE36UjjpXtSJJCl2RjhjUM.roa
Signing time: Fri 15 May 2026 12:19:37 +0000
ROA not before: Fri 15 May 2026 12:19:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 2.57.240.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
78.17.69.0/24 maxlen: 24
89.125.14.0/24 maxlen: 24
103.245.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:93:f4:4e:f9:b2:cd:32:42:0e:5f:b0:1f:62:75:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 15 12:19:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=395f6f3df137e948e3a57b522490a5d918e18d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c4:21:6d:ed:f8:83:7e:cc:43:ac:c1:26:e3:
1b:1f:71:0f:6c:1f:9f:10:6c:b7:3d:e0:f6:bb:87:
c2:81:d1:82:d0:a8:c6:f0:df:7c:83:de:23:2f:f5:
7d:b1:ae:ac:e7:51:9b:69:e7:16:d0:36:02:fd:8e:
64:b7:2b:84:9d:72:af:88:fc:29:c9:57:72:1f:3c:
09:50:38:c7:ea:e1:07:c3:4a:95:85:92:8a:cc:ad:
83:1e:f3:d6:62:e3:81:ec:33:2d:ea:10:29:06:e4:
e5:8b:12:33:9d:cc:80:d4:ae:d9:73:31:96:3c:e3:
2e:88:9d:fc:96:8a:4a:04:1f:93:95:06:77:5d:c9:
56:51:15:25:1a:0b:61:0e:0b:c1:89:90:ca:74:49:
45:47:86:c1:30:26:7d:8a:b9:c4:ee:ea:3d:98:6d:
d4:b6:75:bd:a9:b7:82:f4:7f:d6:9c:6c:01:39:84:
45:4e:f8:ac:2d:7d:70:bf:a2:4c:b3:17:bd:ab:72:
dc:43:7b:8d:a6:77:ff:4b:d0:50:fa:fe:11:24:2d:
ea:c9:74:f5:d8:71:a1:1c:67:76:18:89:1d:53:fd:
68:fd:94:c2:68:08:ee:08:8c:11:cd:7a:a3:85:bb:
29:e5:51:4c:8f:97:5d:ab:ae:cb:3b:d2:1c:65:73:
50:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5F:6F:3D:F1:37:E9:48:E3:A5:7B:52:24:90:A5:D9:18:E1:8D:43
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/OV9vPfE36UjjpXtSJJCl2RjhjUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.240.0/24
45.135.183.0/24
78.17.69.0/24
89.125.14.0/24
103.245.230.0/24
Signature Algorithm: sha256WithRSAEncryption
74:29:28:76:3d:25:5b:94:d3:ba:8d:33:c3:bf:e5:63:95:f0:
9f:ed:80:55:36:28:61:29:94:43:f5:23:e3:00:8f:3a:c9:af:
05:56:b3:66:b5:6f:68:db:1d:57:dc:49:da:4c:23:33:ec:b3:
cb:e5:6e:a9:f8:f6:f1:ed:f4:bb:31:c3:fe:31:a0:63:61:63:
79:61:c7:72:3a:98:92:a1:6f:35:4a:6b:73:27:86:5c:b1:84:
92:98:b2:d7:ba:5b:e7:33:2e:ec:24:ae:59:96:76:81:8a:1b:
a6:75:8e:05:14:b4:bd:43:6a:2b:3e:83:de:6e:b1:6a:f3:f3:
27:8f:ec:25:b5:a0:6d:60:aa:ce:08:81:75:b1:52:45:57:81:
0f:81:11:c5:72:d3:f9:bb:3a:7d:fc:79:39:b5:80:a4:6e:14:
78:fd:94:94:74:57:2b:97:d2:be:2e:78:e1:4f:b2:d6:52:7f:
d6:d5:72:58:5d:d8:70:01:fc:d5:9c:52:7e:48:6a:52:c9:82:
b0:a3:42:3f:79:5c:14:f4:7f:24:5f:49:d5:64:96:9b:67:f0:
08:b7:a3:8b:42:e0:fa:61:a4:a7:4b:e0:f2:38:87:ae:9b:72:
a1:37:4b:96:b4:45:44:70:4c:9e:b7:06:23:86:6d:54:48:a3:
a6:0b:50:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:36:10 2026 by rpki-client