Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/2-ObHOSAvUZejEI4LOSazZywuO0.roa
File: 2-ObHOSAvUZejEI4LOSazZywuO0.roa (raw, json)
Hash identifier: y04O8UiwwV/C1kllIfIubo9ZZMlwVCF4kFfmhnKuMM4=
Subject key identifier: DB:E3:9B:1C:E4:80:BD:46:5E:8C:42:38:2C:E4:9A:CD:9C:B0:B8:ED
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 01A17822BF39ED4B4BEC4C4DC15457397104
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/2-ObHOSAvUZejEI4LOSazZywuO0.roa
Signing time: Mon 26 Oct 2026 12:15:05 +0000
ROA not before: Mon 26 Oct 2026 12:15:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43278
IP address blocks: 37.44.199.0/24 maxlen: 24
91.241.180.0/24 maxlen: 24
91.241.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:22:bf:39:ed:4b:4b:ec:4c:4d:c1:54:57:39:71:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: Oct 26 12:15:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dbe39b1ce480bd465e8c42382ce49acd9cb0b8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:29:21:c1:79:c3:c5:f4:4c:ef:52:08:e1:ef:
24:16:bd:9c:e0:e0:44:3c:99:e3:5f:a5:d1:08:9a:
fb:53:7c:e6:60:95:0a:a4:a3:94:1a:6d:11:e1:12:
92:33:b6:f1:8b:db:94:79:d9:c5:9d:df:ac:e2:ea:
00:90:7c:8d:52:5a:4a:01:b1:99:60:5d:c9:b1:00:
70:d3:9c:64:58:50:6c:a9:31:64:05:a5:50:cc:6f:
11:e6:2e:e7:76:cb:53:a7:04:5e:43:c8:14:0e:ff:
c2:09:d3:8e:e6:fa:39:28:03:66:0a:a1:e9:17:b9:
4d:15:93:60:25:53:09:65:20:03:d9:b2:c6:66:b9:
98:28:e7:d6:73:8a:45:c4:cd:43:1d:96:bd:58:79:
b8:b7:bf:8b:c8:cf:9e:39:44:01:e7:50:61:41:0e:
22:eb:45:1f:81:04:bb:8d:98:bb:20:12:cb:63:ac:
b3:a2:6b:53:1a:af:39:6e:f7:82:4a:2d:79:1c:11:
3e:5d:41:18:5b:50:55:5e:fd:f9:ad:43:76:b4:af:
60:ba:8e:8e:10:11:8a:74:92:8f:28:a2:4a:b4:42:
7a:0d:64:4a:e2:71:b1:99:b8:0b:b4:d6:f6:06:b3:
c5:8a:e9:3a:13:64:2e:56:4a:1c:50:13:5f:8d:ff:
10:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E3:9B:1C:E4:80:BD:46:5E:8C:42:38:2C:E4:9A:CD:9C:B0:B8:ED
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/2-ObHOSAvUZejEI4LOSazZywuO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.199.0/24
91.241.180.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:78:74:ee:ea:aa:0a:c2:2a:11:4c:34:d7:d3:b2:a5:9c:ad:
23:a4:ab:52:bb:9a:74:30:95:ba:ed:57:30:9a:94:af:42:9a:
7f:3c:fc:39:ab:72:93:ee:20:8e:bd:18:2e:4e:3a:72:35:f1:
db:30:e1:86:d2:25:d5:6a:90:88:25:95:9b:97:89:c4:c5:5f:
24:12:a2:89:c7:d8:2f:de:69:56:60:92:a5:f5:91:30:bb:20:
16:13:ba:a8:fb:89:51:0c:8b:d5:0f:bf:16:4c:b6:8f:9d:f1:
8f:76:e2:e7:b8:d9:4e:db:e6:1c:a6:3a:f0:a6:c3:81:9f:4a:
6f:fd:30:d8:ec:ca:0f:24:28:b3:f9:7c:cd:ec:8b:e1:23:dc:
1e:4c:01:69:0d:ae:b8:c9:8c:66:4b:7c:c2:29:70:f3:3c:f8:
dc:0d:cc:05:c9:7c:b3:88:db:d6:ba:7c:7f:92:c1:0e:e9:a8:
1a:e2:37:eb:1c:09:e3:94:93:cd:35:9b:94:90:f9:8d:a1:fc:
99:61:8e:44:b9:87:37:8c:d9:d2:32:8f:04:f8:e5:b4:55:1a:
e1:69:98:c4:c2:1e:a6:b2:ea:6b:d1:e4:8b:84:9c:98:4f:37:
5c:3d:36:5d:79:3a:c3:1e:d4:95:39:1e:a9:09:ff:6b:56:5c:
6f:a7:70:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:50:55 2026 by rpki-client