Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/oKDtlzjVSMrYC1fsr1GwJB6_-28.roa
File: oKDtlzjVSMrYC1fsr1GwJB6_-28.roa (raw, json)
Hash identifier: 2pmBa0awHySgw3Fcx37h1imASCkGUb29C5T3ANSaQCA=
Subject key identifier: A0:A0:ED:97:38:D5:48:CA:D8:0B:57:EC:AF:51:B0:24:1E:BF:FB:6F
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019FB3B167B64B9D2B3D80C4FB6E854ECB7E
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/oKDtlzjVSMrYC1fsr1GwJB6_-28.roa
Signing time: Thu 30 Jul 2026 15:42:55 +0000
ROA not before: Thu 30 Jul 2026 15:42:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399359
IP address blocks: 189.12.55.0/24 maxlen: 24
189.31.210.0/24 maxlen: 24
189.31.211.0/24 maxlen: 24
189.73.26.0/24 maxlen: 24
189.75.177.0/24 maxlen: 24
191.44.20.0/24 maxlen: 24
191.44.22.0/24 maxlen: 24
191.222.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Aug 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b3:b1:67:b6:4b:9d:2b:3d:80:c4:fb:6e:85:4e:cb:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 30 15:42:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0a0ed9738d548cad80b57ecaf51b0241ebffb6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:53:87:83:50:ef:1d:9d:d0:5a:ad:84:80:2e:
75:a5:76:37:a0:42:65:76:70:c5:88:6b:f2:2a:3e:
0d:6d:46:71:1a:5e:cf:f4:c8:91:62:fc:94:12:40:
a0:82:34:5b:70:a4:ad:da:5d:aa:4d:57:f2:61:e6:
1c:99:5b:81:af:12:aa:92:73:cb:e1:c3:18:fc:20:
f8:e1:79:ae:08:8d:ee:f0:40:1f:5b:be:32:ad:37:
bc:72:48:91:88:90:6e:00:23:0d:95:b1:4d:e1:4b:
18:1e:41:42:3b:de:6f:ed:f5:56:7f:3b:ab:3d:98:
e2:4e:ef:04:e9:54:72:00:33:63:90:3e:ab:0f:6e:
7e:ab:60:e6:67:cf:ff:fd:de:11:a3:09:a8:40:47:
bb:0d:a5:b5:7e:c6:ba:46:6a:c7:22:70:c9:55:53:
50:b3:6e:3b:05:5e:12:d1:4d:49:a8:16:c9:5c:1c:
3d:f5:25:52:db:e3:ee:84:6d:f9:c0:50:89:78:f6:
6b:36:ca:b4:2f:be:3b:d5:ec:3d:85:91:6c:63:db:
af:bc:bf:06:09:ca:1f:26:f4:bd:57:a6:49:82:9d:
5b:c5:31:a5:80:fd:7c:1d:a3:fb:10:99:44:2d:7a:
12:4a:6d:fe:5f:61:a9:d8:40:86:d3:58:be:a0:a7:
96:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A0:ED:97:38:D5:48:CA:D8:0B:57:EC:AF:51:B0:24:1E:BF:FB:6F
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/oKDtlzjVSMrYC1fsr1GwJB6_-28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.12.55.0/24
189.31.210.0/23
189.73.26.0/24
189.75.177.0/24
191.44.20.0/24
191.44.22.0/24
191.222.36.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:05:0e:fc:10:11:b1:20:e6:30:9f:c9:d0:35:e2:c6:bf:9c:
3f:96:0b:e6:58:bb:f3:b1:c0:76:82:8f:f2:d7:b4:ab:e5:27:
37:f9:41:cf:a1:e8:a4:52:b9:2b:f9:30:63:8b:d9:78:0b:45:
dc:4a:6a:01:21:46:e0:44:0c:e6:2a:72:25:5b:b6:ec:1b:53:
72:15:0f:81:69:99:c5:b0:28:1c:28:17:3f:85:0b:50:32:48:
2e:b7:c4:f5:07:21:1d:00:ab:51:bc:9f:15:a2:08:ce:51:b3:
2f:e1:27:5b:a5:a1:7c:bc:ad:14:bb:68:75:f5:00:31:35:ff:
dc:2d:45:c3:24:6d:2b:70:80:cc:5d:31:12:4b:c3:c3:3c:7e:
1e:f2:79:8a:66:40:f1:28:12:55:68:61:6f:be:51:53:39:f0:
e4:ad:bf:55:87:13:12:ee:f5:4a:d8:cf:4e:ad:b9:71:73:b1:
23:80:36:38:e7:63:85:dc:77:71:a0:d7:ae:b9:80:d3:ff:6c:
ff:6f:15:c4:26:5e:3e:0f:96:53:e4:97:a4:80:07:77:7b:82:
2f:36:8b:7c:f4:ff:3e:e6:c8:40:0b:41:d4:50:09:b4:44:9b:
53:9c:b1:63:8f:3a:70:1f:c9:f2:f8:18:1e:37:b7:57:55:27:
a1:25:cb:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 21:49:20 2026 by rpki-client