Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/OwOGkj3g_m-8rP4VEqsr21ez3t0.roa
File: OwOGkj3g_m-8rP4VEqsr21ez3t0.roa (raw, json)
Hash identifier: kWNy3fxPtEntltlLWADiH7P4BLQywgI40xILmr+8iRA=
Subject key identifier: 3B:03:86:92:3D:E0:FE:6F:BC:AC:FE:15:12:AB:2B:DB:57:B3:DE:DD
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 019E5EC03C837F74C3866D574881772805C5
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/OwOGkj3g_m-8rP4VEqsr21ez3t0.roa
Signing time: Mon 25 May 2026 10:48:37 +0000
ROA not before: Mon 25 May 2026 10:48:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135402
IP address blocks: 95.173.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5e:c0:3c:83:7f:74:c3:86:6d:57:48:81:77:28:05:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: May 25 10:48:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b0386923de0fe6fbcacfe1512ab2bdb57b3dedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6f:01:a1:bc:4b:30:5f:04:33:69:d4:0a:0c:
ff:ed:96:de:3b:08:bb:92:95:75:ce:2c:82:c4:53:
ef:22:05:34:2b:5a:db:07:5c:24:d5:b2:ff:df:5d:
57:b4:92:33:f3:d4:1d:c1:a6:e7:69:49:b1:bb:ad:
5d:c4:b7:b7:e9:fa:54:69:d7:5a:5d:3b:1d:41:19:
28:aa:17:8a:7e:0e:b1:a8:57:6a:bd:92:e5:ea:7d:
59:e3:60:d5:54:92:bf:58:5b:d4:a4:83:1a:36:32:
e7:a9:0d:85:86:7b:c3:37:e9:3c:f0:3a:65:5c:ea:
d3:68:0f:1f:06:15:0a:cf:01:7a:b5:a7:79:0c:1d:
bd:b8:bb:98:e2:4a:9b:69:a9:4c:eb:0c:ac:a0:ee:
f0:1d:61:21:da:8c:76:9c:b3:c5:33:40:c8:bf:db:
f5:c1:d8:ad:55:78:80:b1:d4:7a:56:32:b0:ed:ec:
ff:99:00:ce:2a:9a:f7:87:13:12:d3:f4:2f:8e:64:
29:91:fa:68:8e:f8:18:fb:8e:68:ee:12:64:f2:62:
84:ef:92:11:fc:12:dd:22:d5:91:28:a2:9b:33:e9:
ab:64:be:74:8c:6e:77:48:f7:78:81:74:c1:6d:8c:
e4:e3:d6:e8:cb:aa:1b:2c:a9:9e:c3:33:d1:2c:c7:
ce:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:03:86:92:3D:E0:FE:6F:BC:AC:FE:15:12:AB:2B:DB:57:B3:DE:DD
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/OwOGkj3g_m-8rP4VEqsr21ez3t0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.173.50.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:c6:50:03:f8:6b:25:d0:26:1b:09:43:ec:73:19:d5:92:4b:
11:79:25:c6:aa:1c:92:da:a7:b9:b8:8d:2b:f0:03:23:a6:73:
b3:86:09:e5:3e:10:b1:14:55:25:d6:09:23:db:64:07:cf:9e:
33:5c:43:4b:8a:ad:05:79:c8:e7:0d:cd:f4:23:35:7b:4e:d4:
cb:7a:2a:6f:98:06:cc:98:33:c1:2d:bc:57:2f:da:ec:4f:4f:
ac:7d:a3:fb:35:bf:72:fd:b2:0b:d8:1c:51:08:c4:fd:3c:23:
ab:3e:3a:fe:6b:84:1a:a0:0b:5e:fe:7c:f5:c7:30:f5:2d:b2:
8d:b0:6c:0e:e6:f9:cd:15:3f:e5:9d:db:db:e9:e2:24:cf:56:
0f:4a:ae:9a:50:14:72:a9:5c:e7:9f:17:4d:e8:ae:c4:8a:82:
72:06:7e:df:a5:4c:39:fd:d5:8f:06:15:af:ba:f6:db:b9:4f:
e3:12:2d:31:36:69:b6:fb:38:dc:d7:10:e6:11:e7:c1:b0:b9:
91:c6:7f:56:8a:32:b3:15:41:a9:53:38:6f:30:33:12:21:ab:
3d:44:b8:32:79:cf:24:2a:08:47:a2:76:c7:20:13:ed:3c:d5:
97:1c:89:b4:f7:f1:92:24:4d:ef:ef:1f:de:0b:78:b2:9b:78:
79:d0:e5:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ5ewDyDf3TDhm1XSIF3KAXFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0
ZjgzYzQwHhcNMjYwNTI1MTA0ODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjAzODY5MjNkZTBmZTZmYmNhY2ZlMTUxMmFiMmJkYjU3YjNkZWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG8BobxLMF8EM2nUCgz/7ZbeOwi7
kpV1ziyCxFPvIgU0K1rbB1wk1bL/311XtJIz89QdwabnaUmxu61dxLe36fpUadda
XTsdQRkoqheKfg6xqFdqvZLl6n1Z42DVVJK/WFvUpIMaNjLnqQ2FhnvDN+k88Dpl
XOrTaA8fBhUKzwF6tad5DB29uLuY4kqbaalM6wysoO7wHWEh2ox2nLPFM0DIv9v1
wditVXiAsdR6VjKw7ez/mQDOKpr3hxMS0/QvjmQpkfpojvgY+45o7hJk8mKE75IR
/BLdItWRKKKbM+mrZL50jG53SPd4gXTBbYzk49boy6obLKmewzPRLMfObwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDsDhpI94P5vvKz+FRKrK9tXs97dMB8GA1UdIwQY
MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut
MWY4NzQ2OTQ1NDgzLzEvT3dPR2tqM2dfbS04clA0VkVxc3IyMWV6M3QwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz
LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX60yMA0G
CSqGSIb3DQEBCwUAA4IBAQAaxlAD+Gsl0CYbCUPscxnVkksReSXGqhyS2qe5uI0r
8AMjpnOzhgnlPhCxFFUl1gkj22QHz54zXENLiq0FecjnDc30IzV7TtTLeipvmAbM
mDPBLbxXL9rsT0+sfaP7Nb9y/bIL2BxRCMT9PCOrPjr+a4QaoAte/nz1xzD1LbKN
sGwO5vnNFT/lndvb6eIkz1YPSq6aUBRyqVznnxdN6K7EioJyBn7fpUw5/dWPBhWv
uvbbuU/jEi0xNmm2+zjc1xDmEefBsLmRxn9WijKzFUGpUzhvMDMSIas9RLgyec8k
KghHonbHIBPtPNWXHIm09/GSJE3v7x/eC3iym3h50OV6
-----END CERTIFICATE-----
Generated at Thu Jun 4 07:07:59 2026 by rpki-client