Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/olhzCAndKPiPfbW4RZEVYV2F6V0.roa
File: olhzCAndKPiPfbW4RZEVYV2F6V0.roa (raw, json)
Hash identifier: Vxa6axkSiPjppQ8KoRKRKchFcAZfskPxDDZW/0S0jII=
Subject key identifier: A2:58:73:08:09:DD:28:F8:8F:7D:B5:B8:45:91:15:61:5D:85:E9:5D
Certificate issuer: /CN=0d0874b333e35df14fd970e189581da093bc8093
Certificate serial: 01A158BB06B76745188BE14160A640B153D4
Authority key identifier: 0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/olhzCAndKPiPfbW4RZEVYV2F6V0.roa
Signing time: Tue 20 Oct 2026 09:53:34 +0000
ROA not before: Tue 20 Oct 2026 09:53:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199496
IP address blocks: 95.129.248.0/21 maxlen: 32
185.13.76.0/22 maxlen: 32
185.65.156.0/22 maxlen: 32
185.165.252.0/22 maxlen: 32
185.165.254.0/24 maxlen: 24
185.165.255.0/24 maxlen: 24
185.235.220.0/22 maxlen: 32
185.249.76.0/22 maxlen: 32
185.249.78.0/24 maxlen: 24
2a00:83e0::/32 maxlen: 64
2a02:f4c0::/29 maxlen: 64
2a09:d00::/29 maxlen: 64
2a0a:5600::/29 maxlen: 29
2a0c:c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 18:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:bb:06:b7:67:45:18:8b:e1:41:60:a6:40:b1:53:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0874b333e35df14fd970e189581da093bc8093
Validity
Not Before: Oct 20 09:53:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a258730809dd28f88f7db5b8459115615d85e95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:45:f7:aa:1a:7b:9e:e4:07:3b:c9:e6:c1:b2:
bc:81:dd:52:91:32:a7:70:92:69:99:5f:fc:86:31:
42:ef:29:a0:94:cb:21:5a:31:2f:14:f6:ce:63:95:
6b:7f:97:d4:01:fe:11:ee:e2:35:34:00:c2:9f:f9:
ec:1a:ad:ee:60:22:e4:ff:6a:37:00:d5:6d:e8:b0:
a3:5b:db:8b:b5:e1:a8:06:0f:33:eb:c0:38:07:18:
19:63:4b:00:01:4f:3a:e9:2a:43:f5:55:ac:bd:d0:
69:4a:8f:bb:35:d9:08:9e:cb:6b:86:93:cb:06:1a:
f9:12:e4:b1:92:b8:c1:9f:b8:62:01:fb:3e:40:85:
5b:19:e4:4a:36:22:58:28:f2:2a:6d:4a:6e:1c:a0:
73:69:51:df:3a:8c:1e:46:db:ef:a4:87:2f:a6:31:
81:61:9b:bc:f4:fa:52:ad:5f:53:27:ce:27:9e:ff:
22:e6:5b:9b:d8:f8:44:c1:bf:3d:6e:0a:89:89:d4:
0c:8d:cd:a1:89:57:b3:2d:2b:23:41:93:41:a7:27:
04:ce:bd:29:46:e1:fc:0d:0b:a1:58:6a:63:9c:aa:
1b:d9:b6:33:9e:b9:ff:82:6e:2c:e3:49:48:60:38:
7b:fe:16:5c:43:9e:01:c6:98:b7:58:9b:8a:b4:61:
ca:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:58:73:08:09:DD:28:F8:8F:7D:B5:B8:45:91:15:61:5D:85:E9:5D
X509v3 Authority Key Identifier:
keyid:0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/olhzCAndKPiPfbW4RZEVYV2F6V0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.129.248.0/21
185.13.76.0/22
185.65.156.0/22
185.165.252.0/22
185.235.220.0/22
185.249.76.0/22
IPv6:
2a00:83e0::/32
2a02:f4c0::/29
2a09:d00::/29
2a0a:5600::/29
2a0c:c0::/29
Signature Algorithm: sha256WithRSAEncryption
62:f6:a8:fa:cc:7b:01:14:3d:c3:f6:bd:43:b3:c4:e9:f9:af:
2a:ee:4f:5f:8b:32:bb:39:8f:01:9a:d4:29:7a:63:50:fa:e9:
28:8e:f7:21:0d:75:ce:1f:5b:8a:04:8e:af:79:54:cb:f5:08:
53:10:e6:6d:61:6e:f9:68:25:0b:be:87:89:36:75:c4:79:16:
4c:9d:da:37:18:a9:dc:d9:3e:e4:1e:78:a4:b8:c7:d6:cc:3b:
81:31:44:7b:68:95:c0:5d:db:d0:c0:ea:30:a4:2e:ad:42:5f:
2e:6d:6f:ae:f3:28:ef:8a:91:64:fe:37:e8:97:c1:2c:74:2d:
b3:08:dd:bb:51:ad:2d:c1:fb:29:11:5c:c4:bb:86:5f:ee:0f:
88:8a:2f:d2:64:70:55:fd:c0:73:d1:1b:6c:72:66:e5:81:2d:
d0:27:1e:8a:33:0b:8c:0c:b9:21:6e:ab:68:e3:a2:e9:c4:bb:
96:0e:96:b0:ed:ea:6d:72:84:d5:80:60:71:ad:de:75:98:38:
44:91:df:b2:4b:ac:2b:8e:31:26:ca:0a:c9:89:e4:38:ff:bd:
04:b5:1a:b6:4c:e4:d5:84:8e:1d:e9:20:76:72:bd:74:88:8d:
44:85:74:01:d3:9e:09:93:2c:e8:ec:d5:f9:95:ef:1d:ce:37:
00:a4:d1:6f
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgISAaFYuwa3Z0UYi+FBYKZAsVPUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMDg3NGIzMzNlMzVkZjE0ZmQ5NzBlMTg5NTgxZGEwOTNi
YzgwOTMwHhcNMjYxMDIwMDk1MzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjU4NzMwODA5ZGQyOGY4OGY3ZGI1Yjg0NTkxMTU2MTVkODVlOTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUX3qhp7nuQHO8nmwbK8gd1SkTKn
cJJpmV/8hjFC7ymglMshWjEvFPbOY5Vrf5fUAf4R7uI1NADCn/nsGq3uYCLk/2o3
ANVt6LCjW9uLteGoBg8z68A4BxgZY0sAAU866SpD9VWsvdBpSo+7NdkInstrhpPL
Bhr5EuSxkrjBn7hiAfs+QIVbGeRKNiJYKPIqbUpuHKBzaVHfOoweRtvvpIcvpjGB
YZu89PpSrV9TJ84nnv8i5lub2PhEwb89bgqJidQMjc2hiVezLSsjQZNBpycEzr0p
RuH8DQuhWGpjnKob2bYznrn/gm4s40lIYDh7/hZcQ54Bxpi3WJuKtGHKNwIDAQAB
o4ICUjCCAk4wHQYDVR0OBBYEFKJYcwgJ3Sj4j321uEWRFWFdheldMB8GA1UdIwQY
MBaAFA0IdLMz413xT9lw4YlYHaCTvICTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFFoMHN6UGpYZkZQMlhEaGlWZ2RvSk84Z0pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9iMDM5YmMtMjEzYi00NTdjLTk2YWUt
MzE4MWRiOTExYTEzLzEvb2xoekNBbmRLUGlQZmJXNFJaRVZZVjJGNlYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9iMDM5YmMtMjEzYi00NTdjLTk2YWUtMzE4MWRiOTExYTEz
LzEvRFFoMHN6UGpYZkZQMlhEaGlWZ2RvSk84Z0pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGgGCCsGAQUFBwEHAQH/BFkwVzAqBAIAATAkAwQDX4H4AwQC
uQ1MAwQCuUGcAwQCuaX8AwQCuevcAwQCuflMMCkEAgACMCMDBQAqAIPgAwUDKgL0
wAMFAyoJDQADBQMqClYAAwUDKgwAwDANBgkqhkiG9w0BAQsFAAOCAQEAYvao+sx7
ARQ9w/a9Q7PE6fmvKu5PX4syuzmPAZrUKXpjUPrpKI73IQ11zh9bigSOr3lUy/UI
UxDmbWFu+WglC76HiTZ1xHkWTJ3aNxip3Nk+5B54pLjH1sw7gTFEe2iVwF3b0MDq
MKQurUJfLm1vrvMo74qRZP436JfBLHQtswjdu1GtLcH7KRFcxLuGX+4PiIov0mRw
Vf3Ac9EbbHJm5YEt0CceijMLjAy5IW6raOOi6cS7lg6WsO3qbXKE1YBgca3edZg4
RJHfskusK44xJsoKyYnkOP+9BLUatkzk1YSOHekgdnK9dIiNRIV0AdOeCZMs6OzV
+ZXvHc43AKTRbw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 05:10:56 2026 by rpki-client