Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/oOykB5r4f6NAje9Uo8HNbzIw5bE.roa
File: oOykB5r4f6NAje9Uo8HNbzIw5bE.roa (raw, json)
Hash identifier: JU1z1u7DNp6L1bR98BiR+6BqFRyJ/qGD5xmZROmr8PI=
Subject key identifier: A0:EC:A4:07:9A:F8:7F:A3:40:8D:EF:54:A3:C1:CD:6F:32:30:E5:B1
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019E27BBC5053CDE900B6ADA986C4C119F8B
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/oOykB5r4f6NAje9Uo8HNbzIw5bE.roa
Signing time: Thu 14 May 2026 18:24:37 +0000
ROA not before: Thu 14 May 2026 18:24:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 45.88.14.0/24 maxlen: 24
62.192.152.0/24 maxlen: 24
77.81.182.0/24 maxlen: 24
78.17.19.0/24 maxlen: 24
78.17.22.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.37.192.0/24 maxlen: 24
89.40.36.0/24 maxlen: 24
89.40.215.0/24 maxlen: 24
89.47.36.0/24 maxlen: 24
89.125.99.0/24 maxlen: 24
89.125.100.0/24 maxlen: 24
89.125.101.0/24 maxlen: 24
89.125.193.0/24 maxlen: 24
93.115.107.0/24 maxlen: 24
128.0.41.0/24 maxlen: 24
185.198.233.0/24 maxlen: 24
188.241.221.0/24 maxlen: 24
193.178.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:27:bb:c5:05:3c:de:90:0b:6a:da:98:6c:4c:11:9f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 14 18:24:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0eca4079af87fa3408def54a3c1cd6f3230e5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c2:f4:fa:3c:aa:3b:85:5c:43:7b:c5:dc:b1:
ba:ec:79:e4:16:1f:b3:ad:39:02:21:1a:2a:7c:28:
e7:bc:26:82:3e:6f:ef:b8:6b:2d:f0:2b:c9:be:db:
48:f0:a0:b1:4c:2d:37:b4:4d:d0:4c:a1:d0:ab:81:
b0:d6:2c:51:ad:bf:e6:18:dd:8f:e8:08:3a:d4:72:
92:66:4c:03:6a:f7:56:47:19:d9:a0:52:64:50:c6:
80:f0:3c:f2:4f:cc:21:90:9b:13:c2:51:49:14:1d:
99:a4:e8:34:5e:12:b8:8a:f2:c8:37:26:ea:0b:34:
b8:ea:48:a5:d8:12:fb:c0:7a:a7:32:8f:a1:0c:3b:
f0:42:e6:4b:01:de:31:59:bc:18:81:31:8a:db:c9:
be:27:20:5b:f6:00:8b:3d:61:e4:51:e6:24:69:b4:
df:92:8e:da:76:94:32:85:13:71:a0:73:dc:d5:91:
e6:05:e7:73:83:dc:74:29:fc:b7:c0:fb:32:96:4e:
84:f2:5f:6d:db:df:2e:f0:f9:a2:8a:93:a3:3d:5b:
c4:84:87:9d:11:e5:c4:23:f1:06:db:4d:13:0f:40:
d2:78:8c:1b:89:72:ff:cb:7a:e2:ab:9b:76:59:07:
ce:c7:ef:cd:7e:f1:f0:9e:08:80:0c:f8:e0:50:08:
6c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EC:A4:07:9A:F8:7F:A3:40:8D:EF:54:A3:C1:CD:6F:32:30:E5:B1
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/oOykB5r4f6NAje9Uo8HNbzIw5bE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.14.0/24
62.192.152.0/24
77.81.182.0/24
78.17.19.0/24
78.17.22.0/24
89.34.106.0/24
89.37.192.0/24
89.40.36.0/24
89.40.215.0/24
89.47.36.0/24
89.125.99.0-89.125.101.255
89.125.193.0/24
93.115.107.0/24
128.0.41.0/24
185.198.233.0/24
188.241.221.0/24
193.178.134.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:e9:f5:ed:84:d0:0d:66:bc:4f:1d:c6:42:7c:8d:dd:72:40:
93:51:ad:70:e5:85:c8:4e:c9:b5:e0:e9:11:d5:59:24:c0:ea:
95:74:54:20:2b:1b:43:63:8f:07:96:02:13:43:fe:70:f8:82:
4f:cf:6e:c8:8d:dc:b8:95:70:30:52:fa:8b:f5:bf:22:7a:ff:
6c:37:fa:20:23:cc:61:e5:44:ba:70:84:dd:91:db:29:2a:b6:
41:b4:a5:a4:1d:2a:e3:b9:a6:ad:b6:97:b7:f5:1e:e0:57:47:
3f:a8:3b:f2:98:58:90:d6:b8:ea:88:7c:c8:00:5d:8b:73:f9:
9d:97:43:cf:07:2b:12:39:d4:d3:0c:31:a1:b9:d1:18:c4:45:
eb:97:c7:90:33:b5:29:ce:3a:0f:be:c8:63:34:99:24:16:4e:
34:00:c6:b9:d3:26:15:54:82:93:44:d1:ef:f9:5d:15:bf:47:
cf:10:da:6f:1b:eb:31:67:74:6d:3f:18:78:29:5d:7f:09:77:
be:08:02:59:4c:07:44:d8:51:05:53:ed:b5:ab:7c:b6:a8:84:
7d:02:35:85:ff:fb:3c:fd:8a:5b:81:5e:a7:c6:4e:27:79:6e:
7b:c0:1b:73:25:f6:7f:a9:29:46:d0:48:9c:a4:bf:c8:8a:25:
04:45:35:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 06:21:14 2026 by rpki-client