Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/0SxELV1KhrYGOHwr-3zAzwZie-I.roa
File: 0SxELV1KhrYGOHwr-3zAzwZie-I.roa (raw, json)
Hash identifier: +V4FUlI/lOlTfzWpgQ2Op/79+58W2UXvVW2loBhFY6A=
Subject key identifier: D1:2C:44:2D:5D:4A:86:B6:06:38:7C:2B:FB:7C:C0:CF:06:62:7B:E2
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 01A13F44A9533CF352AA00576BD8C44B44F5
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/0SxELV1KhrYGOHwr-3zAzwZie-I.roa
Signing time: Thu 15 Oct 2026 11:13:46 +0000
ROA not before: Thu 15 Oct 2026 11:13:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 141.98.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:44:a9:53:3c:f3:52:aa:00:57:6b:d8:c4:4b:44:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: Oct 15 11:13:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d12c442d5d4a86b606387c2bfb7cc0cf06627be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:9e:d6:f5:a0:36:ca:fc:a1:ca:aa:6e:bc:
27:5c:04:5d:f3:73:b6:97:ea:ac:06:f7:fd:6c:90:
43:49:7d:80:09:ab:33:55:c5:9c:1e:d3:be:84:75:
f2:45:ef:1e:c5:a7:81:d9:1d:13:50:3c:e2:e0:39:
38:cc:da:dc:fd:ca:90:15:0b:a3:bf:89:5b:80:d9:
5d:a8:81:94:b9:8a:2e:fa:ad:be:49:3b:fd:f6:51:
82:7b:32:93:45:d9:20:d9:07:37:c7:cb:12:a9:42:
72:12:4c:77:ae:ce:0a:92:e8:e8:07:c3:4e:50:1c:
3b:38:f1:93:2e:4f:50:e9:af:59:f6:20:28:69:89:
44:7d:db:89:5a:0d:d2:38:fe:9a:bc:19:89:23:10:
fb:03:4f:a9:1a:92:98:dc:df:c8:6e:6e:ef:38:26:
35:46:36:88:ee:25:33:8c:51:a0:ed:de:32:19:9f:
e3:bc:f3:f0:b7:45:a3:f0:1c:2e:6c:4e:d1:96:8c:
16:75:86:96:66:8a:e2:af:cb:45:67:b8:9a:e0:fd:
b7:d9:b5:b2:6a:93:4f:ba:d9:cd:e9:55:0a:ee:e8:
69:d3:8f:84:2a:f5:86:20:fd:7e:c7:e4:5d:3f:76:
4c:50:b7:48:19:b9:7b:5b:64:72:06:b9:01:e6:cc:
6d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2C:44:2D:5D:4A:86:B6:06:38:7C:2B:FB:7C:C0:CF:06:62:7B:E2
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/0SxELV1KhrYGOHwr-3zAzwZie-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.151.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:d9:0b:74:d7:2f:e6:86:96:55:90:eb:60:ee:5d:1e:4b:be:
7b:2d:6b:34:85:18:bd:a3:79:b9:5a:f9:6f:64:32:8b:0c:4c:
74:a0:fb:62:0f:e4:9e:ae:46:e7:bf:51:a8:2a:9e:bc:0c:8b:
90:77:83:80:50:9c:55:0d:c8:cb:40:8a:e8:d4:70:53:ab:31:
6d:13:70:32:6c:48:29:cf:45:e3:63:93:c1:ee:07:18:25:71:
a1:ab:7b:6a:f8:0a:f7:84:c6:9c:2a:34:63:a6:27:9d:33:37:
ea:94:29:de:e1:3d:72:17:27:8e:41:e7:48:14:a4:51:d8:f2:
58:32:62:c1:d0:3e:ab:32:bc:fa:9f:ff:2d:33:6a:ef:27:e1:
69:53:55:23:c3:ad:3a:58:74:f3:31:2a:68:38:b1:6b:50:1b:
0f:6c:d8:2e:71:d9:90:84:5f:2e:f5:d9:ed:ca:ef:d6:72:e3:
6e:51:ee:86:99:4d:20:2d:2c:b8:06:1e:4e:4f:8a:4e:40:ba:
03:f5:e4:f6:ea:cd:89:6e:b6:06:12:c5:e9:2e:c2:64:db:9f:
7c:fa:8c:0c:70:09:4f:e6:ab:cb:f3:fa:52:91:db:e3:30:d8:
28:cd:52:75:05:4a:41:8b:b8:42:eb:8a:e2:1c:5f:ce:56:ed:
3c:e4:9c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:33:45 2026 by rpki-client