Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/oCB8bg-ahiROqt30O-8ui4omPDI.roa
File: oCB8bg-ahiROqt30O-8ui4omPDI.roa (raw, json)
Hash identifier: L1pyZgnQc90aoQj6naZdLf3aFtzYDd7Saqxd1ewIqy4=
Subject key identifier: A0:20:7C:6E:0F:9A:86:24:4E:AA:DD:F4:3B:EF:2E:8B:8A:26:3C:32
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019DB6CB41E0F089CF3654FA489EB0C97AF9
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/oCB8bg-ahiROqt30O-8ui4omPDI.roa
Signing time: Wed 22 Apr 2026 20:04:27 +0000
ROA not before: Wed 22 Apr 2026 20:04:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 5.180.50.0/24 maxlen: 24
5.180.51.0/24 maxlen: 24
5.180.80.0/24 maxlen: 24
45.8.188.0/22 maxlen: 24
45.8.192.0/22 maxlen: 24
45.8.199.0/24 maxlen: 24
45.8.255.0/24 maxlen: 24
45.9.0.0/24 maxlen: 24
45.9.1.0/24 maxlen: 24
85.208.115.0/24 maxlen: 24
85.209.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b6:cb:41:e0:f0:89:cf:36:54:fa:48:9e:b0:c9:7a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Apr 22 20:04:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0207c6e0f9a86244eaaddf43bef2e8b8a263c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:03:b8:88:87:6b:0a:68:f8:4b:4c:47:98:47:
53:e9:91:67:d6:21:9d:58:6a:48:bd:c3:15:84:3f:
07:34:0f:92:fa:62:4f:9d:7b:f7:f0:5e:f2:80:1f:
ce:df:5f:05:f7:f9:fd:3a:2c:ea:60:a6:f5:25:20:
5e:cc:d4:4b:71:de:e0:e2:0a:50:db:62:fc:8c:04:
41:47:d9:38:26:9a:d0:d0:0d:c1:6f:a5:b2:28:ce:
d0:37:b5:7e:99:98:62:81:08:40:7a:35:b7:71:03:
8a:ca:09:dd:bc:07:8a:9b:e5:3c:71:82:32:eb:c5:
14:27:8b:71:36:86:78:ee:d9:ec:6b:6d:c5:93:6e:
8c:28:a8:71:45:0f:2c:9c:4a:26:24:10:2b:d4:45:
6c:87:04:f1:5e:e5:c7:0d:ca:3c:c0:28:36:f3:c3:
42:d4:1d:4d:1e:ab:d0:a4:0b:f3:66:28:e7:f0:c6:
e4:b7:f2:b1:03:dd:cc:e5:8c:7e:55:a2:b8:d0:ae:
c9:17:d7:8c:34:23:bc:e6:75:cb:ab:98:f3:dd:c6:
79:8c:b4:53:53:d0:31:7e:15:d3:ce:7b:c4:f5:e7:
3a:12:73:3e:50:e6:4f:bc:6b:16:d3:c7:62:d7:c3:
39:d6:2a:83:60:af:fb:a4:44:9f:be:52:df:d6:95:
60:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:20:7C:6E:0F:9A:86:24:4E:AA:DD:F4:3B:EF:2E:8B:8A:26:3C:32
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/oCB8bg-ahiROqt30O-8ui4omPDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.50.0/23
5.180.80.0/24
45.8.188.0-45.8.195.255
45.8.199.0/24
45.8.255.0-45.9.1.255
85.208.115.0/24
85.209.160.0/24
Signature Algorithm: sha256WithRSAEncryption
29:54:99:14:3f:1d:94:bb:57:9a:ef:36:95:b1:4c:d8:b1:59:
0d:9c:2c:9b:f1:d8:86:57:a0:ba:d0:c1:b2:f8:d3:c9:29:bf:
2b:31:d5:02:3a:39:97:b3:83:3c:e0:54:ff:3a:66:2f:96:db:
ba:0f:ee:22:f0:45:6e:00:6c:a0:92:90:9c:58:3e:ad:e8:73:
62:51:32:bd:5a:99:4a:f9:36:df:da:02:68:6d:59:ef:aa:16:
2c:c3:5a:a4:35:8d:71:b9:76:b2:97:6d:b5:49:e2:9d:06:8b:
17:61:96:75:04:d6:3a:d5:53:34:68:50:80:09:30:3b:81:e7:
96:21:69:26:c3:55:cf:a8:79:30:41:1b:3e:87:f5:19:9d:5a:
e0:29:05:81:dd:7a:15:57:ec:31:1d:8e:21:de:f3:1a:9c:35:
33:01:0f:38:6f:ea:9a:95:ae:48:53:91:16:4f:16:19:0d:8e:
fd:99:e9:b8:fa:6a:ae:e9:4c:1e:26:28:96:91:44:06:bb:b3:
36:be:fa:ea:1f:e6:11:4f:ff:fe:c3:8f:c3:57:83:67:7b:f1:
41:c0:9d:12:df:81:05:d7:81:96:66:06:8d:de:90:8c:2e:d9:
eb:57:2f:b4:5d:2b:94:0b:51:f9:32:72:0b:bb:72:48:19:46:
51:04:c7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:06:23 2026 by rpki-client