Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/OE-vaTYmCvvkebOY3MrRx4ljmi8.roa
File: OE-vaTYmCvvkebOY3MrRx4ljmi8.roa (raw, json)
Hash identifier: 0FkLAj5wepnlrTHbT8freYwSEALt3SIuuxDXD7TpUMk=
Subject key identifier: 38:4F:AF:69:36:26:0A:FB:E4:79:B3:98:DC:CA:D1:C7:89:63:9A:2F
Certificate issuer: /CN=16b43fb87e804922d1c6d07e2597b61e04ee17f0
Certificate serial: 019E985B22D873C67728246C2F96ACF399AD
Authority key identifier: 16:B4:3F:B8:7E:80:49:22:D1:C6:D0:7E:25:97:B6:1E:04:EE:17:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/OE-vaTYmCvvkebOY3MrRx4ljmi8.roa
Signing time: Fri 05 Jun 2026 15:16:09 +0000
ROA not before: Fri 05 Jun 2026 15:16:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209622
IP address blocks: 5.154.240.0/24 maxlen: 24
88.218.116.0/24 maxlen: 24
88.218.117.0/24 maxlen: 24
88.218.118.0/24 maxlen: 24
88.218.119.0/24 maxlen: 24
185.201.151.0/24 maxlen: 24
2a07:4300:31::/48 maxlen: 48
2a07:4300:61::/48 maxlen: 48
2a07:4300:972::/48 maxlen: 48
2a07:4300:1609::/48 maxlen: 48
2a07:4300:1610::/48 maxlen: 48
2a07:4300:1611::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:98:5b:22:d8:73:c6:77:28:24:6c:2f:96:ac:f3:99:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16b43fb87e804922d1c6d07e2597b61e04ee17f0
Validity
Not Before: Jun 5 15:16:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=384faf6936260afbe479b398dccad1c789639a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:02:b6:32:62:88:09:8e:c6:a0:e2:ff:67:60:
aa:96:e6:61:d0:2e:66:9c:82:a1:46:4f:99:21:5e:
2e:b0:0b:eb:73:8f:1f:5b:af:bd:21:2c:94:9a:04:
bc:bb:57:07:16:d8:94:0b:b0:28:ce:6f:5e:f2:7e:
47:fc:a4:40:96:c5:bd:42:e2:9e:6b:c3:8f:44:26:
97:a4:4f:23:89:dc:04:c7:59:8e:71:70:8b:7a:2f:
99:60:5a:7b:b5:8b:fd:28:13:68:9c:94:ef:74:ea:
8b:d7:df:9c:f5:f3:65:ac:d2:93:e3:c3:03:49:b3:
43:cb:95:4e:60:30:2f:9f:38:ca:a1:d4:64:cb:78:
42:cd:b3:ea:a8:2e:48:de:13:86:fa:da:8b:08:0a:
c6:f2:c1:aa:39:fc:9d:02:53:2e:f3:e2:60:08:eb:
96:b4:8c:64:a7:14:94:4c:64:51:72:8e:6e:60:ed:
fd:e6:63:80:8b:f1:27:00:b0:42:b1:f7:ae:f3:94:
77:75:ec:7b:56:67:38:8e:cb:65:ef:fe:79:f4:39:
de:6e:59:d2:7b:70:61:48:0c:0a:64:c2:ce:8c:44:
e8:a1:c6:90:52:14:b4:cb:03:37:42:27:8b:35:d1:
a9:9f:67:c3:e5:aa:99:86:b5:92:7a:a5:7e:68:97:
dc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4F:AF:69:36:26:0A:FB:E4:79:B3:98:DC:CA:D1:C7:89:63:9A:2F
X509v3 Authority Key Identifier:
keyid:16:B4:3F:B8:7E:80:49:22:D1:C6:D0:7E:25:97:B6:1E:04:EE:17:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/OE-vaTYmCvvkebOY3MrRx4ljmi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.240.0/24
88.218.116.0/22
185.201.151.0/24
IPv6:
2a07:4300:31::/48
2a07:4300:61::/48
2a07:4300:972::/48
2a07:4300:1609::/48
2a07:4300:1610::/47
Signature Algorithm: sha256WithRSAEncryption
66:d8:66:a3:7e:9a:03:f0:86:3a:b5:14:5b:b8:58:c3:b1:62:
a9:d8:19:d6:78:76:43:82:7f:7f:bd:29:5b:4e:97:67:22:69:
97:e0:e4:91:ea:72:8f:fa:f0:a4:33:70:a9:78:1a:42:55:d2:
54:b9:84:b3:8e:1a:3e:29:cf:8d:3f:a6:65:09:4a:72:e8:47:
e6:cd:63:07:db:0c:02:ce:c4:b1:98:be:ee:ce:c6:e3:53:78:
14:da:26:fb:1d:d2:bb:6a:c4:53:3c:d3:7a:02:5b:30:29:2e:
68:b7:5c:b5:e3:76:7c:b4:2d:cc:db:be:29:1e:16:30:de:5f:
bb:ae:e1:df:1f:34:fd:f4:ef:92:e5:da:51:33:ba:82:e2:6d:
a8:bc:08:f0:52:f9:50:be:d1:9c:94:13:b2:78:4f:bc:0d:fb:
a2:65:fa:6a:a5:84:28:98:6f:4d:65:ec:c5:46:3e:e1:8c:97:
28:08:7c:49:bc:6c:f8:1b:50:6d:b1:d0:0f:27:75:52:00:91:
c8:f4:00:ed:fd:a9:4d:c5:4a:da:11:fd:54:60:16:87:18:d2:
11:19:8c:a0:28:65:8b:8e:05:f5:99:68:6d:6f:0a:ca:86:84:
cf:30:65:ec:a3:ba:36:44:a4:d8:73:b3:5f:c4:4b:53:e5:89:
14:44:1f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 16:44:52 2026 by rpki-client