Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/oQLrsym4iOz188XGqSxvS36V8uo.roa
File: oQLrsym4iOz188XGqSxvS36V8uo.roa (raw, json)
Hash identifier: u+mDhRKGL7GwqgXaq7o6vxiOjSNYOhzMnEaoKa4qr0I=
Subject key identifier: A1:02:EB:B3:29:B8:88:EC:F5:F3:C5:C6:A9:2C:6F:4B:7E:95:F2:EA
Certificate issuer: /CN=c5662f98020da4e37d50ed3bb30202774f292d7a
Certificate serial: 01A0AFB96BD91C6C000D08215499740580E6
Authority key identifier: C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/oQLrsym4iOz188XGqSxvS36V8uo.roa
Signing time: Thu 17 Sep 2026 14:15:59 +0000
ROA not before: Thu 17 Sep 2026 14:15:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43937
IP address blocks: 87.251.0.0/20 maxlen: 24
87.251.0.0/24 maxlen: 24
87.251.1.0/24 maxlen: 24
87.251.2.0/24 maxlen: 24
87.251.3.0/24 maxlen: 24
87.251.4.0/24 maxlen: 24
87.251.5.0/24 maxlen: 24
87.251.6.0/24 maxlen: 24
87.251.7.0/24 maxlen: 24
87.251.8.0/24 maxlen: 24
87.251.9.0/24 maxlen: 24
87.251.10.0/24 maxlen: 24
87.251.11.0/24 maxlen: 24
87.251.12.0/24 maxlen: 24
87.251.13.0/24 maxlen: 24
87.251.14.0/24 maxlen: 24
87.251.15.0/24 maxlen: 24
93.89.16.0/20 maxlen: 24
93.89.16.0/24 maxlen: 24
93.89.17.0/24 maxlen: 24
93.89.19.0/24 maxlen: 24
93.89.20.0/24 maxlen: 24
93.89.21.0/24 maxlen: 24
93.89.22.0/24 maxlen: 24
93.89.23.0/24 maxlen: 24
93.89.25.0/24 maxlen: 24
93.89.26.0/24 maxlen: 24
93.89.27.0/24 maxlen: 24
93.89.28.0/24 maxlen: 24
93.89.29.0/24 maxlen: 24
93.89.30.0/24 maxlen: 24
93.89.31.0/24 maxlen: 24
103.220.220.0/24 maxlen: 24
103.220.221.0/24 maxlen: 24
103.220.222.0/24 maxlen: 24
103.220.223.0/24 maxlen: 24
103.245.116.0/24 maxlen: 24
103.245.117.0/24 maxlen: 24
103.245.118.0/24 maxlen: 24
103.245.119.0/24 maxlen: 24
185.6.176.0/24 maxlen: 24
185.6.177.0/24 maxlen: 24
185.6.178.0/24 maxlen: 24
185.6.179.0/24 maxlen: 24
185.249.222.0/24 maxlen: 24
185.249.223.0/24 maxlen: 24
201.7.32.0/19 maxlen: 24
201.7.32.0/24 maxlen: 24
201.7.33.0/24 maxlen: 24
2a02:7980::/32 maxlen: 32
2a02:7980:105::/48 maxlen: 48
2a02:7980:200::/48 maxlen: 48
2a02:7980:201::/48 maxlen: 48
2a02:7980:202::/48 maxlen: 48
2a02:7980:203::/48 maxlen: 48
2a02:7980:204::/48 maxlen: 48
2a02:7980:205::/48 maxlen: 48
2a02:7980:206::/48 maxlen: 48
2a02:7980:207::/48 maxlen: 48
2a02:7980:208::/48 maxlen: 48
2a02:7980:209::/48 maxlen: 48
2a02:7980:210::/48 maxlen: 48
2a02:7980:300::/48 maxlen: 48
2a02:7980:301::/48 maxlen: 48
2a02:7980:302::/48 maxlen: 48
2a02:7980:303::/48 maxlen: 48
2a02:7980:306::/48 maxlen: 48
2a02:7980:308::/48 maxlen: 48
2a02:7980:309::/48 maxlen: 48
2a02:7980:310::/48 maxlen: 48
2a02:7980:311::/48 maxlen: 48
2a02:7980:313::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:b9:6b:d9:1c:6c:00:0d:08:21:54:99:74:05:80:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5662f98020da4e37d50ed3bb30202774f292d7a
Validity
Not Before: Sep 17 14:15:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a102ebb329b888ecf5f3c5c6a92c6f4b7e95f2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a6:6a:39:27:55:92:0b:01:6e:7d:4a:6b:10:
30:36:e7:e6:55:5a:5a:b8:a2:12:91:11:b2:80:9d:
08:21:d4:d1:d4:b8:db:34:8b:83:cb:bb:c0:50:df:
8c:de:34:9f:4d:c4:2f:2e:d9:03:72:d6:b0:21:37:
01:3e:8f:f8:4e:da:ad:f6:13:23:b0:61:4f:5a:8b:
5b:80:7d:8a:8e:c3:87:28:2b:14:38:1d:f2:be:24:
3d:f1:98:f8:cb:18:67:71:71:e6:21:05:28:33:72:
4b:0a:39:a2:a6:37:77:01:f4:8a:c8:fc:b3:eb:8e:
57:94:60:44:40:6a:77:f1:c6:6d:3f:21:7f:ab:c0:
01:e5:55:d5:81:b1:4d:c6:b4:d0:29:c9:5d:0e:e3:
79:ce:3a:3b:25:38:d4:94:6c:d0:32:1a:3c:87:a4:
ae:06:32:f5:0d:f0:7f:de:82:b8:2c:76:23:c3:69:
73:2d:18:4d:42:ec:ac:df:59:21:c4:fb:ef:4a:e3:
3d:b3:22:af:3f:e7:80:62:c0:a0:fe:70:2c:ba:02:
b4:cd:e8:9f:6f:0b:16:fc:21:7f:c8:63:0b:52:9f:
87:63:70:72:f6:a6:b5:52:55:4a:5e:63:4d:af:8b:
b2:ff:0d:62:50:07:3f:97:d8:1c:c8:d5:40:b4:1a:
4c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:02:EB:B3:29:B8:88:EC:F5:F3:C5:C6:A9:2C:6F:4B:7E:95:F2:EA
X509v3 Authority Key Identifier:
keyid:C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/oQLrsym4iOz188XGqSxvS36V8uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.0.0/20
93.89.16.0/20
103.220.220.0/22
103.245.116.0/22
185.6.176.0/22
185.249.222.0/23
201.7.32.0/19
IPv6:
2a02:7980::/32
Signature Algorithm: sha256WithRSAEncryption
85:34:14:38:4d:bd:19:0a:99:1a:1d:16:89:8e:94:0f:47:4f:
d3:85:ee:90:d7:dd:b9:bf:fa:fd:b9:a1:a4:57:c0:14:29:fb:
08:7c:c0:18:7b:d5:71:69:5a:9f:cc:89:b1:e5:62:57:a6:0b:
bb:73:d1:15:49:9c:2c:0d:99:04:42:eb:29:32:42:de:d9:0d:
06:24:d8:97:02:a0:4a:e3:5d:c6:bd:14:60:4c:41:d4:8d:f8:
b7:26:a9:22:8e:0c:b3:48:97:10:b4:e9:28:95:8b:39:60:ee:
5f:d9:bd:a3:7c:fa:d5:e0:1f:65:3e:e8:b5:48:a3:9d:8b:76:
92:83:4b:50:70:15:42:7e:0a:91:d7:a3:82:c7:1f:87:a6:14:
83:a3:4d:33:c4:c5:ec:68:f9:ff:ec:8f:25:0d:b7:2c:96:2a:
a3:2e:47:62:22:91:01:c6:ea:8c:22:32:65:bb:0d:a5:8b:04:
bb:2a:db:7a:a0:61:a8:f4:ba:82:ce:76:23:0d:b5:e1:17:57:
78:d9:bd:e6:ab:92:09:30:9a:30:b7:7b:51:c7:b6:ae:8d:b7:
84:41:0b:63:ac:a1:27:a8:19:d5:ba:25:b0:2c:ae:31:ff:f3:
d4:05:f8:41:a4:85:19:5e:f7:e3:ea:fb:dc:e6:22:5b:41:b7:
73:85:a2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:08:11 2026 by rpki-client