Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OBKxbaElu5V-eZCN6lkjccCRzag.roa
File: OBKxbaElu5V-eZCN6lkjccCRzag.roa (raw, json)
Hash identifier: N2JLVuPkloDRkDc8g7tmDowQb2FpsfNRN+mrW5PRMiE=
Subject key identifier: 38:12:B1:6D:A1:25:BB:95:7E:79:90:8D:EA:59:23:71:C0:91:CD:A8
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A18E177CCD07A1D69B444535EBF3BAA3AA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OBKxbaElu5V-eZCN6lkjccCRzag.roa
Signing time: Fri 30 Oct 2026 18:34:26 +0000
ROA not before: Fri 30 Oct 2026 18:34:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215607
IP address blocks: 37.202.201.0/24 maxlen: 24
151.243.32.0/24 maxlen: 24
151.245.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 04:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8e:17:7c:cd:07:a1:d6:9b:44:45:35:eb:f3:ba:a3:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 30 18:34:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3812b16da125bb957e79908dea592371c091cda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fd:99:73:e3:19:8c:8f:97:a9:6d:c8:93:1d:
0d:6f:65:36:50:8b:39:6e:09:74:05:cd:74:ae:bd:
6e:f1:0d:e7:19:b7:86:52:a9:ea:bb:1d:a2:7f:4f:
f2:a9:28:d3:50:13:62:e0:df:cf:8e:45:67:ba:1d:
02:22:37:36:32:98:bf:bf:8f:be:d2:26:0f:4f:24:
2f:3a:6f:c9:99:94:28:d6:56:ab:bd:79:cf:11:a1:
c4:ef:b7:64:f3:56:a9:f8:8e:6d:bb:ee:73:16:6e:
07:af:bc:be:ee:bb:71:a0:60:99:3c:2f:b6:1a:87:
00:c7:9c:b3:4a:ab:bd:6e:ee:62:8b:7e:fb:ec:66:
c0:51:ae:e6:b8:60:5f:81:fe:3b:f5:f2:54:0e:3f:
c5:60:a6:8d:d0:16:ae:1f:63:1a:d5:57:14:b2:76:
e6:4e:7a:dc:be:17:2d:03:df:23:38:87:54:3e:5d:
4b:ad:6e:72:6f:d6:f3:af:86:a5:5e:eb:25:fe:8c:
cf:f6:b7:49:5d:74:14:19:6c:3e:1a:26:c4:37:b4:
a5:85:7d:a1:56:3e:96:98:f0:cc:c8:0e:dd:6e:da:
47:71:1d:2c:f0:59:e4:e9:51:64:26:7a:91:e9:ec:
82:2b:b5:ed:50:ed:6d:ac:57:ca:43:e0:89:7d:2c:
47:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:12:B1:6D:A1:25:BB:95:7E:79:90:8D:EA:59:23:71:C0:91:CD:A8
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OBKxbaElu5V-eZCN6lkjccCRzag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.201.0/24
151.243.32.0/24
151.245.165.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:02:01:08:cb:57:1e:67:cf:ca:2b:7c:0a:cb:f2:c2:56:19:
89:40:aa:a5:98:7c:fb:4e:4a:5c:2e:c8:cf:04:27:e3:16:2a:
89:43:94:44:03:dc:61:f1:7a:20:84:fe:ca:87:04:98:0a:95:
52:f5:fd:8d:ad:89:66:97:65:a9:50:37:41:3b:a6:e2:fc:05:
35:d3:96:dd:9d:27:40:4c:83:0c:aa:86:a0:de:b5:6f:26:d2:
a4:8d:05:8c:6e:98:ea:f5:95:df:e7:bd:de:af:f2:67:df:fb:
2b:16:28:c0:44:73:01:f5:7c:71:00:08:42:0c:5f:08:57:f9:
bc:9d:a3:12:a9:b9:57:bc:2f:bc:35:43:55:9f:0c:49:2f:56:
8f:d8:87:d6:74:b4:8a:91:13:cd:53:b0:b0:63:15:a8:a7:ec:
62:b7:2d:ff:b0:21:e8:ba:62:71:6d:ac:2e:f4:1d:3e:d6:a0:
89:83:85:44:de:69:54:a2:d3:65:40:9c:e1:e5:21:99:7e:ac:
00:82:b5:6c:bb:4a:6c:72:c3:1e:93:17:d5:db:18:ed:a3:4a:
da:dd:34:d9:ab:df:94:4c:b6:f3:73:9c:77:db:26:29:ae:cb:
bd:02:f5:37:8c:74:4d:af:9d:4f:37:df:74:31:ac:84:a5:75:
33:a6:67:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:15:33 2026 by rpki-client