Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/OuOWwWJQka3OidmzTsZ2WEViaC8.roa
File: OuOWwWJQka3OidmzTsZ2WEViaC8.roa (raw, json)
Hash identifier: bWWJtVeUfjaGHDqLK+RYfHKOfYGUjZcMVA7WDR7akBo=
Subject key identifier: 3A:E3:96:C1:62:50:91:AD:CE:89:D9:B3:4E:C6:76:58:45:62:68:2F
Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial: 019EAB60DAE1854E4D48D3D9889A1538CF72
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/OuOWwWJQka3OidmzTsZ2WEViaC8.roa
Signing time: Tue 09 Jun 2026 07:55:11 +0000
ROA not before: Tue 09 Jun 2026 07:55:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42109
IP address blocks: 31.7.160.0/21 maxlen: 21
31.7.160.0/24 maxlen: 24
31.7.161.0/24 maxlen: 24
31.7.163.0/24 maxlen: 24
31.7.164.0/24 maxlen: 24
31.7.165.0/24 maxlen: 24
77.95.188.0/22 maxlen: 22
77.95.189.0/24 maxlen: 24
91.103.24.0/21 maxlen: 21
91.103.24.0/24 maxlen: 24
91.103.25.0/24 maxlen: 24
91.103.26.0/24 maxlen: 24
91.103.27.0/24 maxlen: 24
91.103.28.0/24 maxlen: 24
91.103.29.0/24 maxlen: 24
91.103.30.0/24 maxlen: 24
91.103.56.0/24 maxlen: 24
91.103.57.0/24 maxlen: 24
91.103.59.0/24 maxlen: 24
91.103.60.0/24 maxlen: 24
91.103.61.0/24 maxlen: 24
91.103.62.0/24 maxlen: 24
91.103.63.0/24 maxlen: 24
93.94.216.0/21 maxlen: 21
93.94.217.0/24 maxlen: 24
93.94.219.0/24 maxlen: 24
93.94.221.0/24 maxlen: 24
95.140.192.0/20 maxlen: 20
95.140.192.0/24 maxlen: 24
95.140.194.0/24 maxlen: 24
95.140.195.0/24 maxlen: 24
95.140.196.0/24 maxlen: 24
95.140.197.0/24 maxlen: 24
95.140.198.0/23 maxlen: 23
95.140.200.0/24 maxlen: 24
95.140.201.0/24 maxlen: 24
95.140.202.0/24 maxlen: 24
95.140.203.0/24 maxlen: 24
95.140.204.0/22 maxlen: 22
185.78.144.0/24 maxlen: 24
185.79.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ab:60:da:e1:85:4e:4d:48:d3:d9:88:9a:15:38:cf:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Validity
Not Before: Jun 9 07:55:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ae396c1625091adce89d9b34ec676584562682f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:af:3e:5c:b7:a5:65:7c:88:11:4b:26:8c:53:
ca:ba:b6:bd:61:d2:4e:4d:80:ab:f1:67:f3:df:3e:
94:67:4e:d2:1d:20:a3:5b:01:93:58:7f:94:f7:59:
7e:1d:25:41:99:94:23:80:9d:ba:d0:2e:f3:fb:f4:
40:10:65:28:91:36:fb:6c:8f:b0:1a:e0:4c:85:01:
a3:96:8e:cf:07:b5:f3:e6:3c:dc:a5:4e:17:59:85:
70:28:47:59:a8:61:03:ba:4a:5a:7b:d9:a3:f5:55:
aa:e5:96:a6:53:00:bc:fc:51:ce:6c:d7:c1:7b:31:
f5:31:e7:49:43:a0:cd:e5:17:77:da:5e:8f:f8:e9:
2c:98:59:71:18:97:d9:e7:32:91:d2:e0:e9:0c:38:
e0:50:ef:fd:fa:a2:5f:cb:4d:31:6a:79:c5:86:7d:
4c:9f:41:c0:73:e8:53:ce:2e:47:62:53:23:9f:3a:
d4:6d:ef:ff:b4:a1:9e:d4:82:a7:c8:da:f8:8c:99:
7a:94:7e:ca:02:81:f5:68:ac:61:38:ea:5b:26:dc:
9e:c5:ad:86:c3:4c:cf:25:12:f9:77:38:e2:bb:c9:
f3:e2:2a:a5:a3:f6:3c:f1:2e:e0:9e:b4:58:fd:65:
38:6c:af:50:1f:86:82:a7:ec:a9:7a:4f:b9:c3:34:
f7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E3:96:C1:62:50:91:AD:CE:89:D9:B3:4E:C6:76:58:45:62:68:2F
X509v3 Authority Key Identifier:
keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/OuOWwWJQka3OidmzTsZ2WEViaC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.160.0/21
77.95.188.0/22
91.103.24.0/21
91.103.56.0/23
91.103.59.0-91.103.63.255
93.94.216.0/21
95.140.192.0/20
185.78.144.0/24
185.79.0.0/24
Signature Algorithm: sha256WithRSAEncryption
98:a1:13:f8:41:ec:7a:fa:36:1d:58:09:19:06:78:62:8a:ff:
94:d7:df:c8:8f:83:58:bc:39:9a:a7:fb:58:bb:23:b9:36:ec:
3e:29:e5:57:5e:7e:57:08:20:c4:8b:6b:ee:b1:14:83:e6:2e:
d7:8d:f5:7b:9d:52:e0:1d:01:03:56:51:01:bf:03:7c:00:ec:
ec:2b:9f:d0:52:6a:89:78:80:9e:03:4d:49:55:b6:e1:72:4a:
1c:1c:e0:e1:41:55:94:0f:8f:5a:0d:c8:42:3e:70:fd:20:25:
99:80:0c:b5:bd:cc:5a:dc:d5:99:17:66:1e:ee:9c:68:7b:96:
d0:c4:8c:23:8d:31:d2:e0:11:23:cf:43:dc:c4:b2:0e:3c:68:
bd:b7:86:1a:23:a0:c1:55:37:31:0f:29:c1:c6:61:94:ea:04:
b0:e9:16:dd:92:59:d9:db:e1:f7:39:5f:62:03:d3:3e:69:29:
b3:61:a7:f7:d9:75:64:e9:1f:4b:b4:1d:f2:8a:5a:d0:cf:84:
61:77:36:4b:df:b5:e4:db:a1:23:96:cb:24:f5:b1:2b:39:76:
c9:15:c3:cf:6e:70:90:8d:5e:39:96:1e:57:c9:36:6f:51:84:
1c:23:96:1d:ce:46:93:e7:61:51:24:55:f6:2f:d8:d0:39:a9:
62:57:2d:2f
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAZ6rYNrhhU5NSNPZiJoVOM9yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNzVmYjRmNTJhODI5ZDEzNmUyOWE5YTAyNWM2MzZkMTlh
ZTMyOGUwHhcNMjYwNjA5MDc1NTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYWUzOTZjMTYyNTA5MWFkY2U4OWQ5YjM0ZWM2NzY1ODQ1NjI2ODJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr68+XLelZXyIEUsmjFPKura9YdJO
TYCr8Wfz3z6UZ07SHSCjWwGTWH+U91l+HSVBmZQjgJ260C7z+/RAEGUokTb7bI+w
GuBMhQGjlo7PB7Xz5jzcpU4XWYVwKEdZqGEDukpae9mj9VWq5ZamUwC8/FHObNfB
ezH1MedJQ6DN5Rd32l6P+OksmFlxGJfZ5zKR0uDpDDjgUO/9+qJfy00xannFhn1M
n0HAc+hTzi5HYlMjnzrUbe//tKGe1IKnyNr4jJl6lH7KAoH1aKxhOOpbJtyexa2G
w0zPJRL5dzjiu8nz4iqlo/Y88S7gnrRY/WU4bK9QH4aCp+ypek+5wzT3nQIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFDrjlsFiUJGtzonZs07GdlhFYmgvMB8GA1UdIwQY
MBaAFA51+09SqCnRNuKamgJcY20ZrjKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYt
MzViYTI2N2RlZDNiLzEvT3VPV3dXSlFrYTNPaWRtelRzWjJXRVZpYUM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYtMzViYTI2N2RlZDNi
LzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQDHwegAwQC
TV+8AwQDW2cYAwQBW2c4MAwDBABbZzsDBAZbZwADBANdXtgDBARfjMADBAC5TpAD
BAC5TwAwDQYJKoZIhvcNAQELBQADggEBAJihE/hB7Hr6Nh1YCRkGeGKK/5TX38iP
g1i8OZqn+1i7I7k27D4p5VdeflcIIMSLa+6xFIPmLteN9XudUuAdAQNWUQG/A3wA
7Owrn9BSaol4gJ4DTUlVtuFyShwc4OFBVZQPj1oNyEI+cP0gJZmADLW9zFrc1ZkX
Zh7unGh7ltDEjCONMdLgESPPQ9zEsg48aL23hhojoMFVNzEPKcHGYZTqBLDpFt2S
Wdnb4fc5X2ID0z5pKbNhp/fZdWTpH0u0HfKKWtDPhGF3NkvfteTboSOWyyT1sSs5
dskVw89ucJCNXjmWHlfJNm9RhBwjlh3ORpPnYVEkVfYv2NA5qWJXLS8=
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:06:03 2026 by rpki-client