Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/OkuL0WaA0E28trlXMgSJYVFrrdI.roa
File: OkuL0WaA0E28trlXMgSJYVFrrdI.roa (raw, json)
Hash identifier: cWxVXMyPOMfu3DVCBtbjKgpYDztdBH5potM0XSUkt4I=
Subject key identifier: 3A:4B:8B:D1:66:80:D0:4D:BC:B6:B9:57:32:04:89:61:51:6B:AD:D2
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 019E4159AEB858AE20EDECFFE7464A2F83DB
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/OkuL0WaA0E28trlXMgSJYVFrrdI.roa
Signing time: Tue 19 May 2026 17:47:36 +0000
ROA not before: Tue 19 May 2026 17:47:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135392
IP address blocks: 87.58.193.0/24 maxlen: 24
87.58.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:41:59:ae:b8:58:ae:20:ed:ec:ff:e7:46:4a:2f:83:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: May 19 17:47:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a4b8bd16680d04dbcb6b95732048961516badd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6b:fb:f3:35:6a:33:b5:ad:6d:07:ac:72:e3:
f0:f0:7a:ec:ec:c6:e8:84:62:36:57:5a:9b:1f:ea:
8c:1f:09:e4:e0:b1:08:dd:e1:a1:fe:6f:1d:cf:5d:
91:95:f9:61:86:b7:e9:98:5d:ca:c3:22:2e:33:cd:
10:49:55:a8:2c:e3:25:b7:f3:e6:ac:7e:2c:3f:6c:
35:7f:e0:f6:8c:98:79:21:6c:c2:b2:c8:e3:e2:6c:
00:42:00:2a:f9:a0:3e:af:7b:b3:9b:1f:72:62:cd:
60:d8:5a:37:19:89:33:04:34:c5:5b:74:4f:53:4f:
0e:ae:d6:b8:9e:71:3f:63:35:ce:a4:fd:6e:e5:1d:
01:05:18:aa:4f:f1:03:a7:11:0b:86:2a:a8:be:49:
24:5f:53:93:3a:3f:95:3b:d7:b0:0b:21:0a:cc:6e:
cc:c0:2b:b3:2a:dc:f6:22:49:6a:d8:14:a9:a3:7e:
ca:51:5e:a9:ed:51:71:c9:a4:ed:08:c9:47:f8:7e:
48:d0:21:51:bd:3e:3e:6a:ab:ad:9f:24:2c:ba:0a:
79:d8:55:7f:a6:41:43:a9:0f:0c:a4:38:4b:5a:59:
a9:40:62:56:2e:a6:eb:c5:34:f2:f3:0b:0b:1e:b3:
65:98:36:79:67:b7:8e:1c:ea:73:b4:7e:38:8b:3f:
29:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4B:8B:D1:66:80:D0:4D:BC:B6:B9:57:32:04:89:61:51:6B:AD:D2
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/OkuL0WaA0E28trlXMgSJYVFrrdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.193.0-87.58.194.255
Signature Algorithm: sha256WithRSAEncryption
1a:4b:a3:b0:3b:16:c6:8f:e5:79:e5:49:fe:52:f2:d5:e0:e3:
7a:9c:ee:d8:76:85:41:00:04:20:b7:98:f5:3d:c1:ed:17:a7:
93:c7:91:df:37:7d:b6:32:bf:4f:11:d6:f7:12:60:b1:8f:a2:
8a:15:47:43:91:95:86:36:a8:6e:4a:86:f0:f1:10:33:90:d5:
f2:fb:f2:74:92:6e:78:bf:8b:cd:08:0f:52:23:8a:60:f4:a3:
ac:68:5b:26:25:12:6a:de:ab:0a:8b:66:75:fd:c7:4a:f6:63:
6b:6d:ad:13:06:46:b1:db:93:52:aa:e7:c2:d1:e3:e6:53:ae:
7f:c6:c4:c0:65:d2:3f:d7:63:ae:fb:2a:f4:85:df:e7:72:6e:
21:4f:47:dd:06:51:87:60:b3:da:47:88:0e:89:8e:18:18:bc:
73:b4:20:f8:82:7a:d4:f8:c7:e7:dd:32:67:95:3d:7e:98:6b:
ca:4a:01:96:d9:ae:2f:13:e1:cb:53:91:84:d0:bd:9a:05:49:
2f:ac:f9:b2:af:17:8a:78:56:b5:bc:a7:2c:ff:00:f1:46:9c:
46:57:c7:b3:06:54:5c:f4:c6:d4:25:b4:5a:9c:9f:3c:0c:c7:
37:6b:aa:79:7a:29:ad:6b:81:90:60:3c:18:08:f5:6c:ba:7f:
7c:b3:17:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:23:35 2026 by rpki-client