Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/ODMmdO7VHrUNJnL-krn6dPKUZfE.roa
File: ODMmdO7VHrUNJnL-krn6dPKUZfE.roa (raw, json)
Hash identifier: J27GVy15VCkrkQF7yJl60/0RKVCaoGRbqz5vXXNOcBI=
Subject key identifier: 38:33:26:74:EE:D5:1E:B5:0D:26:72:FE:92:B9:FA:74:F2:94:65:F1
Certificate issuer: /CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
Certificate serial: 019D715EEF0810E5157AF3C3BAEBC3E45491
Authority key identifier: 55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/ODMmdO7VHrUNJnL-krn6dPKUZfE.roa
Signing time: Thu 09 Apr 2026 08:32:20 +0000
ROA not before: Thu 09 Apr 2026 08:32:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 167.150.18.0/24 maxlen: 24
167.150.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:71:5e:ef:08:10:e5:15:7a:f3:c3:ba:eb:c3:e4:54:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
Validity
Not Before: Apr 9 08:32:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38332674eed51eb50d2672fe92b9fa74f29465f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b1:18:80:5a:5a:42:f8:b9:12:c8:1c:7f:59:
89:3f:e7:6f:f3:c6:9e:09:c2:72:1d:28:4f:fb:4b:
a3:6f:18:17:49:a9:aa:07:a1:14:dd:72:a0:7d:a0:
99:d1:1f:39:12:d0:98:97:79:3f:36:ad:30:a8:5c:
7f:8b:5d:b6:9e:93:43:19:aa:a6:ac:1b:3d:4f:7d:
19:f9:2c:5c:14:cf:7b:d0:79:c6:62:35:9b:9b:1a:
ed:1f:fb:dd:2f:ba:58:dc:71:f2:92:51:4a:e2:04:
d4:30:dd:ab:04:8e:db:eb:dc:7a:13:51:dc:5e:a4:
b1:37:79:59:64:1e:06:16:ba:13:9d:27:37:61:2b:
0b:73:ec:b0:2f:56:27:00:2e:e3:a5:2c:66:48:08:
35:93:1e:d9:9f:22:3e:a9:8d:17:15:30:45:bf:7c:
39:cc:51:2d:f5:51:7b:6a:02:08:de:d6:23:53:ae:
e5:6e:7b:b9:51:29:29:9f:1e:b3:0a:3c:f2:bf:23:
a7:48:7d:21:ea:cc:6a:35:15:40:84:85:23:e2:f9:
40:3d:01:90:92:64:f8:49:1d:bd:b9:21:cf:bc:2c:
93:8f:5b:95:08:99:4e:23:85:40:32:49:bd:66:ac:
3c:e6:f5:06:87:5e:b6:aa:29:7c:28:e1:14:fc:14:
c5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:33:26:74:EE:D5:1E:B5:0D:26:72:FE:92:B9:FA:74:F2:94:65:F1
X509v3 Authority Key Identifier:
keyid:55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/ODMmdO7VHrUNJnL-krn6dPKUZfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.150.18.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:4f:ca:03:2f:37:51:8c:ad:e7:a0:b3:36:87:71:23:cd:5f:
3e:4b:de:3d:bc:f2:8c:c3:46:98:7a:f8:51:a6:49:d4:08:6a:
c3:63:ae:66:a4:98:84:c7:fe:5f:94:21:95:b2:c5:8e:f5:3b:
8f:fe:88:ca:7a:f0:f7:b1:f2:1b:97:d7:de:72:ed:ab:aa:ff:
e4:84:6c:d8:0f:c8:7b:89:13:87:34:7a:31:f3:75:ab:13:49:
fd:47:56:46:96:11:3b:88:d8:aa:1b:21:70:83:2f:e9:ab:69:
d7:e0:80:43:8e:14:55:76:57:b2:1d:29:70:18:23:48:06:2c:
c1:38:cb:fa:79:c9:cf:95:f9:c7:30:b8:c9:f6:ad:21:c6:70:
34:4c:c5:2f:17:9a:01:fd:94:e2:a4:f4:d9:09:ca:f8:b0:e2:
18:bf:fb:dc:c1:2c:a0:93:43:17:59:43:c9:05:f1:f0:d7:c4:
3c:6e:7e:22:7d:10:40:9e:7a:d1:83:97:5a:e1:2e:d3:38:fa:
b6:dd:c6:f4:14:00:4a:1a:62:bd:6e:95:9b:2a:20:17:6b:64:
64:e7:a1:a5:73:79:f6:41:af:e4:37:6a:19:86:a4:93:1c:3f:
74:eb:e8:83:a4:be:06:35:74:18:6a:e9:62:cf:b1:ad:ff:ca:
8d:6c:f6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:11:24 2026 by rpki-client