Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/OqoOr8ct2Aqhpi5nUWxcCLRWpwI.roa
File: OqoOr8ct2Aqhpi5nUWxcCLRWpwI.roa (raw, json)
Hash identifier: 0ex9vZZb6HV541FpLrDVktVw5nq+Vr/z7d15msOkWk8=
Subject key identifier: 3A:AA:0E:AF:C7:2D:D8:0A:A1:A6:2E:67:51:6C:5C:08:B4:56:A7:02
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019D7FDE7DB13612438EF63756CD31E2B174
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/OqoOr8ct2Aqhpi5nUWxcCLRWpwI.roa
Signing time: Sun 12 Apr 2026 04:06:20 +0000
ROA not before: Sun 12 Apr 2026 04:06:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19318
IP address blocks: 5.231.240.0/24 maxlen: 24
95.215.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:7f:de:7d:b1:36:12:43:8e:f6:37:56:cd:31:e2:b1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 12 04:06:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3aaa0eafc72dd80aa1a62e67516c5c08b456a702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:dc:ad:44:e5:29:49:f6:3d:9b:4f:39:2b:d1:
3d:e4:69:df:aa:af:d5:c2:88:84:85:58:c6:b8:38:
d2:f1:fe:30:a2:6d:eb:66:70:b3:a4:f8:5f:42:ec:
ab:9a:a1:11:ed:6a:24:0d:52:99:18:cc:bc:be:69:
d5:04:b3:fc:1f:83:1c:e6:9a:ef:b1:3c:7b:a1:0f:
47:a5:4c:30:a6:5e:69:a7:cf:37:72:c8:5a:fb:dd:
dc:ad:f5:6f:33:50:5e:c0:aa:09:a0:e4:d7:31:e7:
aa:34:c8:be:63:95:bc:d0:ea:39:59:42:50:61:ad:
fc:d2:90:77:7f:fa:4d:9a:80:b1:e4:a5:b1:73:71:
89:dc:0a:19:60:ff:d9:7f:61:72:65:91:4d:76:69:
6b:44:ab:ad:58:9d:bd:42:1e:5d:83:f9:6c:d9:6b:
01:9f:57:54:f6:4d:de:b0:ee:5d:9d:62:1d:f0:52:
23:f5:1a:43:d9:4f:3b:16:30:90:18:cb:91:4b:61:
d3:89:c9:89:d1:3e:a2:d5:77:f3:01:5e:9e:24:db:
55:5f:6e:20:0e:2c:cd:0d:f6:e4:7f:e7:18:05:f8:
84:e4:71:04:b4:d4:8b:16:18:80:74:cd:e0:e5:4a:
93:b9:0f:dd:a1:86:2f:d7:72:1a:d4:13:3d:f4:70:
1e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AA:0E:AF:C7:2D:D8:0A:A1:A6:2E:67:51:6C:5C:08:B4:56:A7:02
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/OqoOr8ct2Aqhpi5nUWxcCLRWpwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.240.0/24
95.215.32.0/24
Signature Algorithm: sha256WithRSAEncryption
79:14:cb:b4:53:2f:51:a3:73:60:c4:c3:68:3b:f6:43:22:53:
52:5f:72:87:6d:86:33:db:7b:71:b7:43:a4:96:7a:58:d5:ce:
ad:85:f9:aa:24:7e:56:ce:b0:6b:8f:3b:5c:09:96:1b:0d:51:
27:65:b7:c7:7a:4e:d9:f8:a7:4b:46:83:db:69:57:72:40:11:
a6:f8:bd:c4:50:79:9a:f2:fd:88:03:4d:82:cf:e7:4c:1f:40:
75:e4:3d:cc:f8:90:b8:4e:a0:51:1e:22:5e:a8:86:49:2e:72:
12:ff:16:51:4f:67:f6:94:9d:37:a7:f7:67:b4:a0:db:0d:83:
d2:44:96:61:71:00:7c:1b:5d:98:cd:06:a4:bc:c6:c9:74:31:
99:0c:15:44:a2:c4:4d:cc:d3:dd:a0:c9:94:a8:1e:ad:b0:24:
a4:b7:72:dc:28:d9:ab:8e:89:27:e9:50:97:f7:a3:ad:96:d4:
f1:3d:47:18:ab:ab:f2:c0:53:d6:8e:80:f7:46:7e:73:38:2d:
66:a8:0c:06:4d:4c:09:cb:21:ca:cb:b4:5c:e1:4d:ab:5b:ab:
34:c8:83:c2:8e:ce:d0:10:1a:ec:f9:74:cc:a3:97:43:c4:a1:
a4:c8:f4:5e:39:f7:cc:3a:39:79:c5:92:2c:3b:f6:c2:a9:a0:
f6:7d:63:77
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ1/3n2xNhJDjvY3Vs0x4rF0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwNDEyMDQwNjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYWFhMGVhZmM3MmRkODBhYTFhNjJlNjc1MTZjNWMwOGI0NTZhNzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9ytROUpSfY9m085K9E95Gnfqq/V
woiEhVjGuDjS8f4wom3rZnCzpPhfQuyrmqER7WokDVKZGMy8vmnVBLP8H4Mc5prv
sTx7oQ9HpUwwpl5pp883csha+93crfVvM1BewKoJoOTXMeeqNMi+Y5W80Oo5WUJQ
Ya380pB3f/pNmoCx5KWxc3GJ3AoZYP/Zf2FyZZFNdmlrRKutWJ29Qh5dg/ls2WsB
n1dU9k3esO5dnWId8FIj9RpD2U87FjCQGMuRS2HTicmJ0T6i1XfzAV6eJNtVX24g
DizNDfbkf+cYBfiE5HEEtNSLFhiAdM3g5UqTuQ/doYYv13Ia1BM99HAebQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDqqDq/HLdgKoaYuZ1FsXAi0VqcCMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvT3FvT3I4Y3QyQXFocGk1blVXeGNDTFJXcHdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABefwAwQA
X9cgMA0GCSqGSIb3DQEBCwUAA4IBAQB5FMu0Uy9Ro3NgxMNoO/ZDIlNSX3KHbYYz
23txt0OklnpY1c6thfmqJH5WzrBrjztcCZYbDVEnZbfHek7Z+KdLRoPbaVdyQBGm
+L3EUHma8v2IA02Cz+dMH0B15D3M+JC4TqBRHiJeqIZJLnIS/xZRT2f2lJ03p/dn
tKDbDYPSRJZhcQB8G12YzQakvMbJdDGZDBVEosRNzNPdoMmUqB6tsCSkt3LcKNmr
jokn6VCX96OtltTxPUcYq6vywFPWjoD3Rn5zOC1mqAwGTUwJyyHKy7Rc4U2rW6s0
yIPCjs7QEBrs+XTMo5dDxKGkyPReOffMOjl5xZIsO/bCqaD2fWN3
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:00:38 2026 by rpki-client