Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/hoOfOhiumO3n9i2s1cUb5J4km8g.roa
File: hoOfOhiumO3n9i2s1cUb5J4km8g.roa (raw, json)
Hash identifier: YrVRnFZutLIKvy2phaLxcfsoR1iHJTC0tqESl03Xznw=
Subject key identifier: 86:83:9F:3A:18:AE:98:ED:E7:F6:2D:AC:D5:C5:1B:E4:9E:24:9B:C8
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 019C93E1B121873D3F1F17F8B0926ED18674
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/hoOfOhiumO3n9i2s1cUb5J4km8g.roa
Signing time: Wed 25 Feb 2026 08:19:27 +0000
ROA not before: Wed 25 Feb 2026 08:19:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41717
IP address blocks: 2.58.244.0/24 maxlen: 24
2.58.245.0/24 maxlen: 24
2.58.246.0/24 maxlen: 24
2.58.247.0/24 maxlen: 24
2.58.248.0/24 maxlen: 24
2.58.249.0/24 maxlen: 24
2.58.250.0/24 maxlen: 24
2.58.251.0/24 maxlen: 24
5.183.116.0/23 maxlen: 23
5.183.116.0/24 maxlen: 24
5.183.117.0/24 maxlen: 24
5.183.118.0/24 maxlen: 24
5.183.119.0/24 maxlen: 24
5.183.120.0/22 maxlen: 24
5.183.120.0/23 maxlen: 23
5.183.120.0/24 maxlen: 24
5.183.121.0/24 maxlen: 24
5.183.122.0/24 maxlen: 24
5.183.123.0/24 maxlen: 24
45.8.32.0/24 maxlen: 24
45.8.33.0/24 maxlen: 24
45.8.34.0/24 maxlen: 24
45.8.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:93:e1:b1:21:87:3d:3f:1f:17:f8:b0:92:6e:d1:86:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Feb 25 08:19:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86839f3a18ae98ede7f62dacd5c51be49e249bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8b:29:35:cb:0b:2d:92:3d:f0:58:b2:42:7f:
9f:e6:b7:07:9a:21:c0:69:3f:02:3a:97:a4:97:3b:
de:d3:0a:75:8f:e1:58:42:b6:74:0d:83:81:27:ff:
22:a6:e9:91:88:dd:e2:6f:66:0a:9e:f8:93:0b:eb:
b4:e5:c1:a6:77:c5:ed:87:e7:0f:62:b4:36:59:1b:
a1:4a:5c:3e:46:43:fa:00:d4:76:58:55:a7:3b:c2:
71:4f:07:35:e7:30:c5:ae:29:c5:50:ce:78:f1:57:
83:08:47:9e:44:38:5a:a1:4f:61:57:18:e9:65:63:
24:6e:30:55:ed:f1:de:fd:60:e4:f6:74:c6:04:12:
a2:cb:54:a2:36:8f:53:d7:a8:d3:03:57:0d:d9:c9:
24:68:0c:b7:49:11:26:a2:89:6e:af:4b:f7:5b:c8:
f2:8d:76:6b:85:dc:23:55:37:c9:65:e9:8a:17:09:
26:2a:ce:c3:b1:52:3f:bf:dd:94:76:9a:d5:a4:26:
65:12:fe:94:c4:3c:06:21:91:f3:cb:30:09:cc:94:
95:62:eb:e1:28:23:71:ab:00:ce:6f:08:27:e3:c9:
b5:38:63:58:08:ed:f9:c0:f2:a7:f0:a8:bc:0b:a9:
4f:41:e7:35:7e:29:93:03:30:7b:71:10:07:b0:9f:
29:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:83:9F:3A:18:AE:98:ED:E7:F6:2D:AC:D5:C5:1B:E4:9E:24:9B:C8
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/hoOfOhiumO3n9i2s1cUb5J4km8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.244.0-2.58.251.255
5.183.116.0-5.183.123.255
45.8.32.0/22
Signature Algorithm: sha256WithRSAEncryption
44:9d:62:93:65:e7:32:e6:66:1d:fb:67:95:96:7f:86:b5:59:
c9:37:48:97:3e:3c:9b:5f:8c:82:92:bc:4e:2c:c0:80:8f:7a:
1f:97:56:6a:42:54:ec:65:97:3b:38:f6:21:91:93:2e:9a:3d:
91:f1:a2:75:c2:05:a6:3d:30:02:91:be:ac:d4:e4:c8:da:cf:
c3:08:44:bf:11:0b:0e:60:8a:ee:a9:3f:47:20:17:c4:16:28:
96:fc:e7:8c:47:1c:d4:05:70:ec:75:9e:ca:32:43:49:14:f9:
1a:a6:ee:e3:53:97:7c:18:2a:86:e4:73:18:60:42:3f:04:61:
9c:6c:fe:84:e1:03:73:6a:ee:c5:12:52:87:e7:fe:c6:8f:b4:
33:89:f8:58:c6:0e:53:4d:ca:65:70:f6:18:42:e5:d7:3a:d7:
37:30:40:04:c8:7b:1e:26:d8:7e:71:6d:85:9d:08:84:05:47:
3f:72:26:44:6d:8c:bc:6c:5c:2e:2e:6b:8c:72:ca:bc:6d:27:
e3:5c:e7:48:0c:02:d3:13:25:19:90:2d:71:9f:9d:46:8f:44:
c9:84:52:61:9a:7f:99:a6:f7:4f:65:c5:b1:75:40:b6:41:7f:
9e:aa:23:85:d9:18:5e:fb:22:77:61:69:40:93:1e:44:e2:bd:
fd:57:f8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:53:41 2026 by rpki-client