Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/ouKkXbc-4N5_RkDcLQD9WLGpJRE.roa
File: ouKkXbc-4N5_RkDcLQD9WLGpJRE.roa (raw, json)
Hash identifier: irIyP/d9TsSsAqWZsC45Q/R/9QKQmfFDu4KVADN5NXo=
Subject key identifier: A2:E2:A4:5D:B7:3E:E0:DE:7F:46:40:DC:2D:00:FD:58:B1:A9:25:11
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 01A18D10DD57B4D2E9C8624ED743EDDD0323
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/ouKkXbc-4N5_RkDcLQD9WLGpJRE.roa
Signing time: Fri 30 Oct 2026 13:47:35 +0000
ROA not before: Fri 30 Oct 2026 13:47:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 18779
IP address blocks: 81.188.4.0/22 maxlen: 22
81.188.60.0/22 maxlen: 22
81.188.96.0/22 maxlen: 24
81.188.100.0/22 maxlen: 24
81.188.108.0/22 maxlen: 22
81.188.168.0/22 maxlen: 24
81.188.172.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:10:dd:57:b4:d2:e9:c8:62:4e:d7:43:ed:dd:03:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Oct 30 13:47:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2e2a45db73ee0de7f4640dc2d00fd58b1a92511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:db:a8:c9:4f:3c:35:24:75:eb:f3:16:0a:9f:
52:ea:37:cb:9a:ad:e6:7b:a3:6f:9a:e9:c4:b1:af:
a7:7f:d1:46:6d:63:37:31:31:6c:0b:03:15:81:91:
db:0d:67:c6:50:bc:2f:df:99:71:cb:91:cd:8b:ca:
f3:27:65:59:55:f6:ed:14:e8:dc:28:02:8b:dd:2b:
d2:8e:ba:6f:91:51:1c:10:a2:76:df:3a:08:77:fc:
b9:5f:0d:58:6a:ce:14:be:9e:f2:3c:a1:c8:07:80:
04:f1:7a:cc:71:df:19:0c:64:b4:3f:4b:ed:13:96:
e2:e7:e9:5e:fd:d1:63:3a:88:5a:fa:34:89:75:6b:
1d:75:63:74:e1:b2:6c:c4:86:fb:df:4c:c4:fc:ad:
51:d0:5d:95:42:11:97:85:7a:ec:9c:3f:ea:16:e4:
0e:b5:09:12:dd:6d:c6:0f:76:97:a9:cf:b8:1d:f8:
7c:bc:64:17:6f:60:e5:18:0c:91:33:42:28:33:60:
15:1c:4c:86:5e:39:e7:98:12:19:0a:fb:cc:6a:29:
78:68:56:13:af:fe:da:6c:dd:bc:77:ef:f3:b8:6a:
c7:4f:ec:60:a4:f3:e8:27:d8:36:61:45:0a:74:71:
a9:77:c7:ed:c8:39:da:8e:2e:55:69:d9:bf:d7:3e:
3c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E2:A4:5D:B7:3E:E0:DE:7F:46:40:DC:2D:00:FD:58:B1:A9:25:11
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/ouKkXbc-4N5_RkDcLQD9WLGpJRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.188.4.0/22
81.188.60.0/22
81.188.96.0/21
81.188.108.0/22
81.188.168.0-81.188.173.255
Signature Algorithm: sha256WithRSAEncryption
2f:c6:66:ff:7e:14:6d:e0:1e:cc:1e:d8:9f:a2:9f:5f:4d:32:
eb:2d:ca:0e:ec:ac:05:e2:34:93:cb:6d:e6:61:19:45:0a:2b:
23:f9:49:2c:eb:bb:a5:4a:df:ed:cc:e1:24:b3:0c:6c:ef:c8:
63:1f:88:66:2f:c1:df:2c:87:d8:c6:76:51:4d:60:1a:ac:0b:
1d:ce:8d:5a:0c:67:e9:20:ef:c2:3f:2a:0c:b6:e3:12:16:2c:
0b:30:59:88:d6:97:0d:39:f1:6d:60:6f:0f:97:50:6d:01:ba:
4b:18:ae:44:dc:7d:3e:00:cb:8e:2b:a7:fe:39:da:8c:da:f7:
82:e5:b1:0d:17:4a:82:7e:7e:3c:ff:5c:c8:57:0d:03:27:a6:
de:e1:84:7d:dd:d1:56:29:ff:ae:46:34:e2:a3:cb:2a:f4:bd:
3c:e6:7e:df:ed:a0:42:6b:a6:d0:0f:65:cb:01:19:a1:06:7f:
e6:ab:d2:c9:81:d1:25:81:fa:b4:00:1e:65:b3:5a:00:ce:36:
6a:7e:c8:0d:ea:16:cb:63:98:2d:7b:d0:b1:9b:99:6e:4a:96:
f3:a2:7b:74:2b:54:76:e4:47:6d:4e:52:5b:81:c1:b1:a7:be:
6f:ac:d9:85:75:e5:4d:19:df:46:0e:99:22:1f:1d:0b:22:0c:
d9:eb:c9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 04:14:44 2026 by rpki-client