Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/0OdaZXNoE1-op9piAGrhNJpVhjA.roa
File: 0OdaZXNoE1-op9piAGrhNJpVhjA.roa (raw, json)
Hash identifier: 1wK7l7RdXn5NGTm8md+eAP5dQfBdYSrbgrLY3KEr9yU=
Subject key identifier: D0:E7:5A:65:73:68:13:5F:A8:A7:DA:62:00:6A:E1:34:9A:55:86:30
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 019D2F75BA72E49A49C983C173FF01C7A596
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/0OdaZXNoE1-op9piAGrhNJpVhjA.roa
Signing time: Fri 27 Mar 2026 13:22:17 +0000
ROA not before: Fri 27 Mar 2026 13:22:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49988
IP address blocks: 85.142.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2f:75:ba:72:e4:9a:49:c9:83:c1:73:ff:01:c7:a5:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Mar 27 13:22:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0e75a657368135fa8a7da62006ae1349a558630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:eb:04:7c:0d:df:37:02:79:99:1f:19:2e:2b:
79:bb:16:8f:23:fb:4a:d3:6b:d8:08:59:52:74:bf:
f4:cf:65:91:0a:70:a5:2a:8b:2d:2f:e9:c4:ca:9e:
e5:d1:c6:3f:5b:e4:49:22:05:2f:c5:23:8e:04:6e:
c0:79:fd:0a:77:c2:69:e8:13:d0:bb:f2:3b:fd:05:
d6:13:48:26:e3:c8:59:65:14:25:6f:da:e8:df:f4:
55:b2:14:be:d8:07:ee:31:17:4a:f1:e1:be:2c:5b:
61:20:b6:a5:55:27:7c:c0:ee:ad:7c:81:77:06:71:
7b:1c:e2:f7:d6:17:10:a0:5f:86:f9:39:f7:c3:1e:
3d:76:2a:79:e7:fe:f6:95:8b:0a:ad:a4:35:74:08:
35:03:9c:53:76:40:0e:53:6f:83:82:86:9d:44:13:
d7:81:f3:67:d4:b9:fc:82:17:8d:86:1e:6c:8d:10:
ef:4f:fc:b3:1d:1e:7b:f1:54:04:e6:90:98:93:8f:
86:86:b5:a2:99:4a:54:c4:7e:b3:8a:5a:28:41:48:
35:93:d0:9a:dc:c4:e3:66:50:0d:9a:81:72:b9:00:
43:2c:e2:54:8e:0c:c8:b0:32:11:96:da:20:15:1a:
e0:cd:bb:64:35:50:9b:58:92:bd:21:85:ea:23:a0:
fd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E7:5A:65:73:68:13:5F:A8:A7:DA:62:00:6A:E1:34:9A:55:86:30
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/0OdaZXNoE1-op9piAGrhNJpVhjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.142.251.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:63:f5:38:29:20:2b:0b:48:e2:20:34:07:26:91:17:6d:56:
f8:13:c0:41:95:45:a4:46:d9:b9:44:69:0e:eb:5e:93:d1:bb:
94:16:84:27:74:c2:4a:64:31:0b:dd:7b:ca:f5:6c:11:69:26:
84:69:8c:a7:89:56:06:27:c6:1d:66:7f:ad:a4:6d:14:56:07:
2a:c6:f5:be:c0:46:34:6e:e0:94:13:74:af:9f:c2:75:77:3a:
6b:10:79:a0:7c:1a:5b:87:4c:0c:11:7c:b0:e6:b9:b8:74:6e:
0c:5d:11:8f:8a:a1:e3:18:d5:1d:7d:84:18:f1:14:f1:bf:02:
e5:df:3c:05:c6:73:01:38:2c:31:1e:56:7f:01:40:93:43:43:
29:d2:14:9a:3e:df:f5:9e:20:7f:b2:eb:7e:af:d2:ea:05:9e:
e3:22:b3:73:3b:c4:5a:a0:16:5b:54:0b:1e:58:59:7b:30:62:
3d:5b:c5:4f:ab:fc:ae:4f:09:8f:4b:75:3b:72:70:08:b5:56:
9f:7b:1b:49:a3:76:8d:8b:9b:63:14:0c:4e:de:55:fa:6f:6d:
5a:6e:e8:f7:cc:85:89:ed:08:d5:52:f4:30:07:47:0e:6f:c4:
54:7d:d3:1f:ef:c7:05:39:f9:87:6d:f4:45:ed:48:8a:b5:1c:
bd:57:52:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:01 2026 by rpki-client