Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/OPjyMx8xKL5yf4RsSVANbdPc_Ys.roa
File: OPjyMx8xKL5yf4RsSVANbdPc_Ys.roa (raw, json)
Hash identifier: QpXN7MYWDyrIFi5Q477WSj/mfvseLrZe8a2xDC0OcvQ=
Subject key identifier: 38:F8:F2:33:1F:31:28:BE:72:7F:84:6C:49:50:0D:6D:D3:DC:FD:8B
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 019D9762FF7CD1689B2534DF0D6F6E98CFF1
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/OPjyMx8xKL5yf4RsSVANbdPc_Ys.roa
Signing time: Thu 16 Apr 2026 17:42:20 +0000
ROA not before: Thu 16 Apr 2026 17:42:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34450
IP address blocks: 86.106.80.0/24 maxlen: 24
86.106.104.0/24 maxlen: 24
89.34.8.0/21 maxlen: 21
89.37.136.0/24 maxlen: 24
89.43.46.0/24 maxlen: 24
89.45.34.0/24 maxlen: 24
93.113.158.0/24 maxlen: 24
93.114.55.0/24 maxlen: 24
93.114.99.0/24 maxlen: 24
93.114.171.0/24 maxlen: 24
188.213.18.0/24 maxlen: 24
188.215.73.0/24 maxlen: 24
188.215.95.0/24 maxlen: 24
188.240.14.0/24 maxlen: 24
2a05:b680:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:62:ff:7c:d1:68:9b:25:34:df:0d:6f:6e:98:cf:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Apr 16 17:42:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38f8f2331f3128be727f846c49500d6dd3dcfd8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ef:2b:67:60:77:ba:bc:cc:73:31:bc:2b:5f:
92:63:03:d4:ba:95:8a:1e:26:23:9c:6d:fd:28:85:
d4:5f:c5:0c:02:b2:e3:c8:fb:be:fb:b1:a3:8b:01:
5f:da:30:a8:ba:0f:d4:86:28:0a:39:63:9a:27:8b:
55:72:f5:40:8e:2e:a0:79:a8:dd:d4:84:fd:97:85:
fa:5b:0f:d6:41:f7:62:ed:8c:70:a3:2d:95:57:76:
58:1d:69:ec:f5:94:92:2d:3a:c1:a8:38:03:4e:86:
4e:37:63:3b:00:a0:50:70:f7:1f:5c:dd:57:55:75:
20:b1:46:8f:0e:9f:05:de:be:37:0c:b2:5e:bf:fe:
7e:0d:9d:c4:16:41:df:bf:5a:44:36:d5:51:2c:98:
bc:62:76:9a:3f:4c:6f:e9:e3:a2:6b:12:a0:a1:c5:
57:a9:01:b0:19:41:2b:8f:77:fb:b6:17:0a:36:9a:
90:db:95:3c:cf:10:d4:64:0b:6f:d5:ad:a9:ea:64:
d1:4c:45:6b:46:c8:69:8c:32:7b:81:5e:71:68:04:
8c:53:c6:48:97:33:9d:f2:e2:12:7d:44:4f:47:17:
95:b4:21:2a:67:8e:5e:ef:e6:ce:b4:de:2d:d3:9c:
bd:65:09:3a:c0:e6:a1:70:cc:53:f0:f4:9d:bc:87:
0a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F8:F2:33:1F:31:28:BE:72:7F:84:6C:49:50:0D:6D:D3:DC:FD:8B
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/OPjyMx8xKL5yf4RsSVANbdPc_Ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.80.0/24
86.106.104.0/24
89.34.8.0/21
89.37.136.0/24
89.43.46.0/24
89.45.34.0/24
93.113.158.0/24
93.114.55.0/24
93.114.99.0/24
93.114.171.0/24
188.213.18.0/24
188.215.73.0/24
188.215.95.0/24
188.240.14.0/24
IPv6:
2a05:b680:1::/48
Signature Algorithm: sha256WithRSAEncryption
91:a9:7c:a8:a0:32:02:e0:8a:ff:ba:49:3d:c2:15:64:7a:75:
78:a0:b9:60:f1:f2:fe:f6:31:ab:8f:5d:7f:83:b2:fc:bd:cf:
83:6e:5d:c2:d7:25:05:64:00:55:a6:fc:d2:eb:a3:46:fd:fc:
84:e2:3e:42:5f:5d:8d:93:1c:ae:6b:82:78:cc:67:2f:9d:be:
f9:2c:8c:7d:c6:75:d5:16:1c:8c:b0:83:c4:28:22:fe:b5:bc:
a4:46:eb:a4:50:c3:52:9f:f9:9e:a2:a9:96:f6:8a:d5:fb:57:
ff:41:71:1a:9b:a1:fb:a9:13:05:88:90:79:80:be:2e:91:44:
d0:a8:4e:be:79:d4:45:6d:78:16:bc:14:4b:8a:cb:ff:67:81:
bf:1b:25:58:2c:72:67:63:38:23:19:f5:78:77:4d:35:3a:72:
53:97:8b:8c:97:75:7d:bc:d1:9a:9e:d3:9f:39:da:c1:30:36:
a7:11:34:ce:2e:d6:34:78:9c:e0:6b:f4:ff:0e:1f:9b:08:9d:
68:9e:f0:4c:cf:35:2c:7b:55:4b:1f:d8:60:6d:f6:92:6e:b1:
66:a0:ce:05:d3:73:b7:cb:3c:d1:fd:91:bf:6b:4c:65:d7:09:
37:56:39:44:84:25:b8:23:2a:bb:ec:71:f2:83:5a:fd:ae:68:
85:e2:11:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:02 2026 by rpki-client