Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/oIlmIdhnbzjLtp43rh2MsVavMNM.roa
File: oIlmIdhnbzjLtp43rh2MsVavMNM.roa (raw, json)
Hash identifier: 7e7qFe3v2vD4PgMioz1gtUGPm4Gu4u7HGY/wOowK1Y0=
Subject key identifier: A0:89:66:21:D8:67:6F:38:CB:B6:9E:37:AE:1D:8C:B1:56:AF:30:D3
Certificate issuer: /CN=e733b2eab7e234687be97f8c35d6e6cc3e2dfcba
Certificate serial: 019E6398C4898D67D4FAB50D070BC7A688E2
Authority key identifier: E7:33:B2:EA:B7:E2:34:68:7B:E9:7F:8C:35:D6:E6:CC:3E:2D:FC:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/oIlmIdhnbzjLtp43rh2MsVavMNM.roa
Signing time: Tue 26 May 2026 09:23:36 +0000
ROA not before: Tue 26 May 2026 09:23:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28914
IP address blocks: 194.54.172.0/24 maxlen: 24
194.54.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:63:98:c4:89:8d:67:d4:fa:b5:0d:07:0b:c7:a6:88:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e733b2eab7e234687be97f8c35d6e6cc3e2dfcba
Validity
Not Before: May 26 09:23:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0896621d8676f38cbb69e37ae1d8cb156af30d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:75:8c:85:dd:e4:ae:f1:f8:fe:7d:8f:f4:d3:
45:ee:f6:8e:68:dd:8a:aa:d5:03:44:57:c6:c5:34:
15:1c:43:60:91:03:c7:35:c0:b1:1f:2e:64:60:79:
b4:85:45:e6:80:11:f8:ac:c2:6e:2e:0a:d7:ef:33:
54:ee:2e:3c:fc:fe:71:83:51:fe:a8:c5:e3:f0:46:
a6:67:27:48:25:d1:ff:41:16:87:63:a1:5c:ca:9e:
05:c3:d4:74:63:8e:6d:27:7e:25:c7:64:35:dc:7e:
1f:99:bd:6a:52:79:8f:d2:aa:df:86:1d:30:1e:b0:
2c:5f:77:b8:8d:57:20:8e:ad:5c:6f:61:f0:ce:7b:
41:9e:e6:b1:12:89:a1:b5:9b:52:0b:70:39:2a:97:
4c:d7:42:ec:33:30:21:0e:a3:39:df:7e:13:ac:d2:
e0:c0:20:5c:5d:9e:e9:2d:fb:12:af:5c:ef:d7:01:
f0:33:64:36:51:35:8d:25:e6:08:c2:4b:b7:e7:85:
d8:1c:9f:ba:41:16:10:6c:23:eb:ae:64:72:83:e4:
8e:f3:da:fc:67:23:72:94:c2:e7:e8:01:b7:7e:1e:
31:e4:d0:68:fa:cc:fb:32:20:15:ea:96:ac:6f:61:
a3:c1:72:a7:55:f3:fb:2c:ea:c8:39:3e:80:ee:3e:
a1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:89:66:21:D8:67:6F:38:CB:B6:9E:37:AE:1D:8C:B1:56:AF:30:D3
X509v3 Authority Key Identifier:
keyid:E7:33:B2:EA:B7:E2:34:68:7B:E9:7F:8C:35:D6:E6:CC:3E:2D:FC:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/oIlmIdhnbzjLtp43rh2MsVavMNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.54.172.0/24
194.54.175.0/24
Signature Algorithm: sha256WithRSAEncryption
63:92:6a:19:b7:b8:29:12:fb:38:bc:c3:78:40:ca:a3:f9:02:
e0:ec:ae:1a:0e:a5:83:d8:33:06:9a:72:aa:c5:01:c8:41:b8:
98:76:79:ae:89:78:27:44:08:47:fd:d3:f4:1c:ee:13:ec:a4:
45:84:49:44:87:af:51:47:39:bf:43:dd:3e:ee:fb:9c:86:36:
48:2c:2f:16:b7:c7:28:69:e3:d1:bc:15:4a:ce:9b:9a:ac:ee:
d8:2f:1b:1a:b4:34:83:37:64:9c:ca:39:1d:51:29:e2:9f:10:
7f:de:74:88:84:33:48:44:d8:61:44:30:18:f8:07:cf:c4:76:
ab:f2:dc:f7:8a:6a:b8:49:54:14:8e:e2:51:b2:38:7f:dd:a1:
b2:eb:51:7d:45:b9:9e:5a:bc:cd:c6:85:85:b8:d8:86:73:e3:
00:0d:a2:51:9a:93:19:4c:7f:a8:6f:4c:a0:9d:97:34:28:03:
8e:6f:87:8f:be:ff:44:be:f3:a1:04:4f:19:94:98:23:95:8c:
d8:75:ad:b2:22:5f:5f:c1:71:2e:ca:e3:2b:83:3b:a2:04:9c:
65:d7:4e:fb:df:01:12:8e:92:d0:eb:fe:39:be:a8:45:26:d6:
9f:df:77:fb:95:1f:db:34:13:a8:da:31:3e:ab:94:36:23:d9:
76:72:77:db
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ5jmMSJjWfU+rUNBwvHpojiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MzNiMmVhYjdlMjM0Njg3YmU5N2Y4YzM1ZDZlNmNjM2Uy
ZGZjYmEwHhcNMjYwNTI2MDkyMzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDg5NjYyMWQ4Njc2ZjM4Y2JiNjllMzdhZTFkOGNiMTU2YWYzMGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHWMhd3krvH4/n2P9NNF7vaOaN2K
qtUDRFfGxTQVHENgkQPHNcCxHy5kYHm0hUXmgBH4rMJuLgrX7zNU7i48/P5xg1H+
qMXj8EamZydIJdH/QRaHY6Fcyp4Fw9R0Y45tJ34lx2Q13H4fmb1qUnmP0qrfhh0w
HrAsX3e4jVcgjq1cb2HwzntBnuaxEomhtZtSC3A5KpdM10LsMzAhDqM5334TrNLg
wCBcXZ7pLfsSr1zv1wHwM2Q2UTWNJeYIwku354XYHJ+6QRYQbCPrrmRyg+SO89r8
ZyNylMLn6AG3fh4x5NBo+sz7MiAV6pasb2GjwXKnVfP7LOrIOT6A7j6hvQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKCJZiHYZ284y7aeN64djLFWrzDTMB8GA1UdIwQY
MBaAFOczsuq34jRoe+l/jDXW5sw+Lfy6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXpPeTZyZmlOR2g3NlgtTU5kYm16RDR0X0xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85MzYwZjUtMWRlYi00YjQzLWEzMmYt
YWM0NGJjNTY5YTc4LzEvb0lsbUlkaG5iempMdHA0M3JoMk1zVmF2TU5NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS85MzYwZjUtMWRlYi00YjQzLWEzMmYtYWM0NGJjNTY5YTc4
LzEvNXpPeTZyZmlOR2g3NlgtTU5kYm16RDR0X0xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwjasAwQA
wjavMA0GCSqGSIb3DQEBCwUAA4IBAQBjkmoZt7gpEvs4vMN4QMqj+QLg7K4aDqWD
2DMGmnKqxQHIQbiYdnmuiXgnRAhH/dP0HO4T7KRFhElEh69RRzm/Q90+7vuchjZI
LC8Wt8coaePRvBVKzpuarO7YLxsatDSDN2ScyjkdUSninxB/3nSIhDNIRNhhRDAY
+AfPxHar8tz3imq4SVQUjuJRsjh/3aGy61F9RbmeWrzNxoWFuNiGc+MADaJRmpMZ
TH+ob0ygnZc0KAOOb4ePvv9EvvOhBE8ZlJgjlYzYda2yIl9fwXEuyuMrgzuiBJxl
10773wESjpLQ6/45vqhFJtaf33f7lR/bNBOo2jE+q5Q2I9l2cnfb
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:56:42 2026 by rpki-client