Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/O18vIz4ADrWfyTjWv9lwIBf2Q6w.roa
File: O18vIz4ADrWfyTjWv9lwIBf2Q6w.roa (raw, json)
Hash identifier: 6t2fxSf+Lmbr9jOdSKExEayPddEKt375FWmUM1ayblc=
Subject key identifier: 3B:5F:2F:23:3E:00:0E:B5:9F:C9:38:D6:BF:D9:70:20:17:F6:43:AC
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 019D2AFE3CF90D38FE480C5F52B6BE341A2A
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/O18vIz4ADrWfyTjWv9lwIBf2Q6w.roa
Signing time: Thu 26 Mar 2026 16:33:17 +0000
ROA not before: Thu 26 Mar 2026 16:33:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29119
IP address blocks: 5.182.72.0/22 maxlen: 24
45.146.224.0/22 maxlen: 24
77.81.167.0/24 maxlen: 24
92.114.36.0/24 maxlen: 24
92.114.53.0/24 maxlen: 24
92.114.83.0/24 maxlen: 24
185.126.232.0/22 maxlen: 24
185.128.192.0/22 maxlen: 24
185.150.80.0/22 maxlen: 24
185.248.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:fe:3c:f9:0d:38:fe:48:0c:5f:52:b6:be:34:1a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Mar 26 16:33:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b5f2f233e000eb59fc938d6bfd9702017f643ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3e:7e:2b:d2:17:fb:37:f1:d5:95:01:02:e7:
25:e4:3e:9e:1e:42:fd:41:d7:a6:12:ac:e8:3c:f4:
8d:2b:10:0a:3c:77:bd:54:72:dd:fc:3c:28:57:b3:
38:1a:86:a7:88:ad:5d:80:df:67:34:6f:e4:00:bc:
92:27:e1:7b:20:a3:fd:5b:d1:24:b9:4f:8d:6b:de:
e2:8f:4b:37:df:38:41:9c:c1:68:23:cd:16:d3:83:
27:a6:0e:8e:3d:bc:ee:25:4b:53:b6:a4:d3:bc:70:
94:2d:a2:14:27:12:30:6b:4d:f5:bd:8d:29:f5:be:
ab:36:f2:ac:27:56:58:6d:e9:91:f4:bb:4f:74:03:
5b:b3:34:7c:5f:dc:fc:e2:44:64:9b:40:ff:80:24:
30:4c:5d:5c:8e:89:d7:b6:20:d6:41:78:c4:19:9c:
84:64:fd:d4:d8:f4:5a:a8:18:5f:77:c6:5f:26:6c:
62:7d:3a:17:16:38:3c:63:5e:0f:b1:26:cc:fe:15:
6f:0f:09:3c:b4:df:d7:1f:ed:07:8c:5f:2d:14:2d:
72:8e:6b:15:e9:1b:2c:87:59:2b:50:8e:d3:49:f1:
c5:8e:8f:31:5e:f1:f7:f5:e7:90:a2:44:14:8c:f4:
bd:d5:a6:d5:c2:9e:4d:13:37:99:e6:c4:4b:6f:3e:
e0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5F:2F:23:3E:00:0E:B5:9F:C9:38:D6:BF:D9:70:20:17:F6:43:AC
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/O18vIz4ADrWfyTjWv9lwIBf2Q6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.72.0/22
45.146.224.0/22
77.81.167.0/24
92.114.36.0/24
92.114.53.0/24
92.114.83.0/24
185.126.232.0/22
185.128.192.0/22
185.150.80.0/22
185.248.208.0/22
Signature Algorithm: sha256WithRSAEncryption
98:b8:96:2a:39:0b:52:6a:28:9e:68:de:0d:63:12:73:04:eb:
6c:53:f5:d3:02:9c:7c:79:d6:91:0f:7b:02:e3:e3:0b:37:d4:
83:d9:02:3c:e5:09:3c:95:71:d3:32:34:f6:70:c9:c7:aa:af:
f2:2a:3c:a0:e1:80:30:07:dc:07:79:96:f4:3e:37:3f:a5:fa:
fc:c0:68:77:bc:e6:8e:74:92:c9:e7:e7:fe:1d:f9:9d:bf:2c:
1e:87:2d:a1:26:e9:8a:e4:da:c5:f1:4c:f9:eb:31:df:8c:87:
87:57:28:15:9a:59:0c:f1:03:5f:cc:61:02:6c:b7:23:45:82:
4a:a2:32:7b:03:6b:65:6f:12:f5:33:17:24:3e:be:00:7c:ca:
27:47:04:e0:62:40:a9:6e:59:1c:d3:ce:b7:a2:e3:24:c1:a9:
3a:25:30:0b:ff:04:ac:9b:82:f1:af:db:8a:6f:41:91:06:cb:
de:fd:0f:9e:34:b1:7f:69:ea:01:bf:c7:45:4d:38:3a:4b:c6:
5c:aa:d4:87:44:ea:14:42:03:a5:74:a8:b9:c7:46:56:e4:80:
fc:ef:1d:1a:49:9d:00:ad:fa:0a:e3:09:6a:c9:11:87:41:9a:
26:79:b3:1a:75:a3:95:4a:82:58:83:8a:a3:da:df:f8:64:15:
8b:04:f8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:28:27 2026 by rpki-client