Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/d2038a-643b-4aa0-8ece-f12b04e2a85b/1/ojp5-HwQMF1HXCk7sSxScc3H8b4.roa
File: ojp5-HwQMF1HXCk7sSxScc3H8b4.roa (raw, json)
Hash identifier: 8kwA2+tIyr7WfG/j5TTud5fWfFsITm50RXSoMpWLbas=
Subject key identifier: A2:3A:79:F8:7C:10:30:5D:47:5C:29:3B:B1:2C:52:71:CD:C7:F1:BE
Certificate issuer: /CN=cf86c5f55de8b06263c73159734a90f409dafea3
Certificate serial: 01A08AD54383AFE5B35D8AD4ED7D3FA4C4E6
Authority key identifier: CF:86:C5:F5:5D:E8:B0:62:63:C7:31:59:73:4A:90:F4:09:DA:FE:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4bF9V3osGJjxzFZc0qQ9Ana_qM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d2038a-643b-4aa0-8ece-f12b04e2a85b/1/ojp5-HwQMF1HXCk7sSxScc3H8b4.roa
Signing time: Thu 10 Sep 2026 10:20:27 +0000
ROA not before: Thu 10 Sep 2026 10:20:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15830
IP address blocks: 37.72.103.0/24 maxlen: 24
2a06:d782::/32 maxlen: 32
2a06:d783::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d2038a-643b-4aa0-8ece-f12b04e2a85b/1/z4bF9V3osGJjxzFZc0qQ9Ana_qM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d2038a-643b-4aa0-8ece-f12b04e2a85b/1/z4bF9V3osGJjxzFZc0qQ9Ana_qM.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4bF9V3osGJjxzFZc0qQ9Ana_qM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:d5:43:83:af:e5:b3:5d:8a:d4:ed:7d:3f:a4:c4:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf86c5f55de8b06263c73159734a90f409dafea3
Validity
Not Before: Sep 10 10:20:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a23a79f87c10305d475c293bb12c5271cdc7f1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bf:e7:c5:fd:a9:eb:82:9c:d9:a2:5d:9c:21:
7b:cb:9e:0c:15:8e:fa:03:73:21:f6:bf:09:03:7e:
67:07:06:71:21:7a:5b:db:30:a1:0a:71:8c:9b:c5:
a5:fc:16:70:5d:79:2f:08:3a:5d:ea:3a:77:50:d9:
ca:12:5f:78:af:20:23:d8:8b:10:be:c7:19:e3:28:
f4:dc:87:51:bc:ee:50:e9:2c:09:e0:47:4b:3a:19:
bc:53:2f:16:e9:64:d8:15:57:4c:a2:50:cf:fd:fb:
35:d5:ff:05:2c:89:00:03:69:3b:f2:2c:00:53:05:
f6:e3:d1:f4:df:61:a3:7c:b5:e9:08:e6:51:5f:0d:
43:1b:22:28:28:3b:ba:73:3d:6e:da:21:7c:cf:66:
90:f4:74:2e:fc:87:d8:33:3a:44:b9:dd:fe:43:2c:
d3:65:f0:ca:fc:d7:51:b0:ba:3f:a0:dc:6d:3b:08:
07:47:75:3e:29:0d:1b:2a:59:85:1b:6a:6b:26:77:
8c:a9:78:be:0d:15:81:76:11:9b:0f:a5:ab:86:b2:
9f:cc:df:c5:a2:c7:12:b7:2f:51:04:da:74:73:16:
14:b0:28:27:1f:fb:b4:b1:a3:18:44:21:ca:0e:ad:
09:d8:4d:e8:63:e8:5e:21:85:a4:69:21:d7:85:28:
8a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3A:79:F8:7C:10:30:5D:47:5C:29:3B:B1:2C:52:71:CD:C7:F1:BE
X509v3 Authority Key Identifier:
keyid:CF:86:C5:F5:5D:E8:B0:62:63:C7:31:59:73:4A:90:F4:09:DA:FE:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4bF9V3osGJjxzFZc0qQ9Ana_qM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d2038a-643b-4aa0-8ece-f12b04e2a85b/1/ojp5-HwQMF1HXCk7sSxScc3H8b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d2038a-643b-4aa0-8ece-f12b04e2a85b/1/z4bF9V3osGJjxzFZc0qQ9Ana_qM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.103.0/24
IPv6:
2a06:d782::/31
Signature Algorithm: sha256WithRSAEncryption
6c:45:32:fd:80:00:08:c4:5c:e7:79:9f:d6:e0:ed:bb:e4:7c:
40:8d:6e:f7:19:e4:37:be:0e:5a:09:9a:41:09:9e:46:21:c6:
5b:21:14:2d:99:03:6d:63:e1:02:a4:43:be:c1:2d:f8:94:57:
5e:b7:4e:19:fd:15:c7:e6:63:4a:4f:fc:d8:8d:e1:15:c3:3c:
3b:68:38:7a:94:b0:c6:91:e9:05:0e:6b:d8:f6:3c:ed:cc:81:
f0:ad:88:07:bc:70:65:24:75:cf:37:9a:05:8a:2b:94:fb:45:
6e:7b:d5:83:d3:67:fc:09:e6:a8:5d:cd:94:6e:cc:97:e0:a5:
31:80:16:07:2d:68:0c:55:2e:e9:d0:27:74:62:69:da:2e:8c:
14:de:9a:76:19:ec:a6:25:94:e5:2b:7a:a1:88:2b:49:49:5b:
ae:7f:73:d9:f2:82:1b:58:c8:32:20:06:fc:7b:19:69:1c:71:
40:36:40:16:dc:36:19:10:ad:1d:7c:11:e0:e5:cc:a4:10:67:
44:bf:43:ca:b2:26:56:0d:b8:c2:c4:fc:a9:e8:ae:68:72:92:
70:e8:ad:a0:9d:6c:fa:0e:8f:a3:ba:1a:35:fa:50:b6:cd:3e:
87:1d:ac:de:61:66:c8:84:c0:a8:5e:47:1d:d3:32:11:4e:04:
8f:6b:2e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:53:59 2026 by rpki-client