Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/ol_JEp9GJvGNVjYx1Pw8RWe4xLQ.roa
File: ol_JEp9GJvGNVjYx1Pw8RWe4xLQ.roa (raw, json)
Hash identifier: tRtrIVFRMFtnff6mODXc8+s312Nmn2BxI0riNWUQx48=
Subject key identifier: A2:5F:C9:12:9F:46:26:F1:8D:56:36:31:D4:FC:3C:45:67:B8:C4:B4
Certificate issuer: /CN=f63fe9c134041cebda568b9f908e2aef38ab7f75
Certificate serial: 019E39F71DB22DDDDAB8729A1CD032FA0F41
Authority key identifier: F6:3F:E9:C1:34:04:1C:EB:DA:56:8B:9F:90:8E:2A:EF:38:AB:7F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9j_pwTQEHOvaVoufkI4q7zirf3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/ol_JEp9GJvGNVjYx1Pw8RWe4xLQ.roa
Signing time: Mon 18 May 2026 07:22:36 +0000
ROA not before: Mon 18 May 2026 07:22:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213028
IP address blocks: 193.93.180.0/24 maxlen: 24
2a0c:a180::/29 maxlen: 48
2a0c:a180:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/9j_pwTQEHOvaVoufkI4q7zirf3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:39:f7:1d:b2:2d:dd:da:b8:72:9a:1c:d0:32:fa:0f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f63fe9c134041cebda568b9f908e2aef38ab7f75
Validity
Not Before: May 18 07:22:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a25fc9129f4626f18d563631d4fc3c4567b8c4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bf:d2:dd:d3:05:a1:b8:8c:e9:22:02:3a:ad:
36:7b:c1:33:0b:64:08:65:bf:fe:cb:18:8f:aa:cc:
8c:37:56:b1:4c:cf:56:17:99:23:cf:bb:64:14:51:
a7:da:1c:af:13:24:e4:b8:80:48:7e:f3:bc:81:5d:
ee:7e:0f:ca:11:9e:bd:16:b6:46:74:ec:cb:3e:f1:
fc:4e:ee:18:c3:9c:dd:b3:b0:30:c3:60:c0:95:f7:
69:26:ea:9a:93:0a:9c:c7:66:6b:c9:c0:3a:7b:6e:
6e:da:e5:2b:97:d1:2e:5e:ba:54:78:90:72:41:46:
f1:2b:e3:47:c5:b1:73:cb:af:8c:85:d4:13:de:29:
38:6c:e1:71:f8:c2:b7:a8:15:a2:84:77:31:ad:31:
9b:02:18:3e:03:e9:e6:7d:1a:ac:99:4d:62:06:38:
0e:dd:e4:fd:5e:a1:f4:72:fe:ad:d4:c9:c0:17:50:
1c:5f:ef:40:a9:c2:ca:0c:a2:b2:9f:1c:29:12:13:
da:cd:26:65:93:66:eb:25:cf:a8:84:b7:85:d8:ef:
c6:c3:95:dd:81:15:ac:7d:1b:c8:b6:fc:a0:fc:cc:
80:95:fc:0d:74:d0:60:70:05:2d:d0:d0:14:98:d2:
35:9f:38:c7:20:5a:99:6f:a0:84:2a:3d:94:55:70:
da:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5F:C9:12:9F:46:26:F1:8D:56:36:31:D4:FC:3C:45:67:B8:C4:B4
X509v3 Authority Key Identifier:
keyid:F6:3F:E9:C1:34:04:1C:EB:DA:56:8B:9F:90:8E:2A:EF:38:AB:7F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9j_pwTQEHOvaVoufkI4q7zirf3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/ol_JEp9GJvGNVjYx1Pw8RWe4xLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b39d3a-2784-4255-9066-5aec766a49b4/1/9j_pwTQEHOvaVoufkI4q7zirf3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.180.0/24
IPv6:
2a0c:a180::/29
Signature Algorithm: sha256WithRSAEncryption
8b:24:b3:60:43:b6:a3:65:28:24:c3:09:a3:1a:50:d1:40:84:
8d:72:a5:8d:b8:f6:31:b6:31:f6:bc:ba:22:cc:28:5a:e3:8f:
6c:10:48:c6:78:05:41:1e:bb:c4:12:24:9c:02:7f:a2:64:cd:
aa:e8:f4:40:55:09:5e:f1:64:17:93:a3:b7:0d:2a:61:55:90:
52:94:58:66:08:50:4c:5b:e2:49:b6:9d:cf:2e:e8:9d:d0:51:
f8:b8:c0:26:6c:d2:3f:26:99:c0:03:9e:ae:95:86:d0:25:14:
1e:99:9e:64:09:dd:70:84:0d:b8:8e:85:83:ba:65:2a:92:47:
9d:bc:27:24:ae:1b:d3:fd:ab:23:ba:46:f7:c2:69:4a:61:32:
6e:4b:05:83:01:77:ea:e0:5f:b3:88:38:64:c8:46:4b:a8:7e:
85:21:29:67:af:d0:7b:5e:fb:20:45:2f:3b:86:3f:d1:91:0d:
c1:ab:22:c5:9b:09:f2:7d:98:2f:55:c3:f9:5c:f6:ac:0f:e2:
3a:3b:1d:48:06:70:e1:5d:f4:2c:61:11:5c:e6:c6:11:b8:ef:
41:dd:bd:cd:09:47:d4:9a:90:7c:48:88:d7:ce:a8:a1:5e:47:
9b:ab:9e:97:77:e5:50:16:cf:df:9d:f0:51:f7:36:b1:c0:8a:
5e:fc:36:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:54:03 2026 by rpki-client