Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/ojj7MWuR-byapBcCWPFFbQ9xUDE.roa
File: ojj7MWuR-byapBcCWPFFbQ9xUDE.roa (raw, json)
Hash identifier: B/r+JitPLdjn+OZZ1E6DqL9+MTPDYrTKHbUo7Y9Tfvc=
Subject key identifier: A2:38:FB:31:6B:91:F9:BC:9A:A4:17:02:58:F1:45:6D:0F:71:50:31
Certificate issuer: /CN=30db35b43eebec9dbaa83ef18eb1eff023f181ed
Certificate serial: 01A18CB63AAC12E0F074A9F9D063211F691D
Authority key identifier: 30:DB:35:B4:3E:EB:EC:9D:BA:A8:3E:F1:8E:B1:EF:F0:23:F1:81:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNs1tD7r7J26qD7xjrHv8CPxge0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/ojj7MWuR-byapBcCWPFFbQ9xUDE.roa
Signing time: Fri 30 Oct 2026 12:08:35 +0000
ROA not before: Fri 30 Oct 2026 12:08:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199204
IP address blocks: 5.254.160.0/24 maxlen: 24
5.254.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/MNs1tD7r7J26qD7xjrHv8CPxge0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/MNs1tD7r7J26qD7xjrHv8CPxge0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MNs1tD7r7J26qD7xjrHv8CPxge0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:b6:3a:ac:12:e0:f0:74:a9:f9:d0:63:21:1f:69:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30db35b43eebec9dbaa83ef18eb1eff023f181ed
Validity
Not Before: Oct 30 12:08:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a238fb316b91f9bc9aa4170258f1456d0f715031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:41:99:3e:0d:da:4f:2c:a1:a8:6d:d9:03:3c:
2c:33:7d:09:54:c5:a2:38:49:1e:42:d5:f3:a3:ab:
67:30:a2:de:1a:52:f3:ea:b1:34:8c:6c:8b:06:f6:
6e:09:ef:3b:e3:03:59:6e:93:98:b3:10:82:0c:76:
cb:0a:20:ce:0a:53:93:0a:97:53:67:4c:0b:4c:fe:
6e:ae:32:34:23:d2:0f:49:ce:9d:ad:03:65:21:47:
49:00:62:58:b2:f6:55:b9:99:d6:9d:e0:30:67:8f:
d9:b3:61:47:e0:90:40:2b:7c:51:d1:16:7b:ca:e7:
81:86:96:e2:cc:f8:e8:9d:08:65:cd:7b:82:69:dc:
81:7b:1e:79:91:9e:ca:47:3f:63:3b:b5:8a:d9:81:
dd:d6:99:a2:3b:56:21:91:58:e2:1e:71:49:04:cb:
bd:9c:41:e5:59:12:5d:2d:a8:b4:f4:49:44:c6:ce:
d2:f1:48:52:cf:d0:98:a6:a4:c0:7c:50:55:a2:fe:
91:6d:72:12:71:60:e2:c1:bc:53:2c:4a:0e:fd:25:
d1:a9:28:c1:49:89:c6:0c:00:99:2c:88:1b:49:e7:
de:75:f2:f6:b9:34:81:b4:17:32:30:89:51:01:70:
4a:09:8b:e6:89:f4:16:77:71:fb:62:08:08:48:51:
7d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:38:FB:31:6B:91:F9:BC:9A:A4:17:02:58:F1:45:6D:0F:71:50:31
X509v3 Authority Key Identifier:
keyid:30:DB:35:B4:3E:EB:EC:9D:BA:A8:3E:F1:8E:B1:EF:F0:23:F1:81:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNs1tD7r7J26qD7xjrHv8CPxge0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/ojj7MWuR-byapBcCWPFFbQ9xUDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/28316d-d824-4e8e-9f6d-644fbc4bcf9d/1/MNs1tD7r7J26qD7xjrHv8CPxge0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.254.160.0/23
Signature Algorithm: sha256WithRSAEncryption
57:92:02:d9:54:5a:ef:66:01:9c:f9:6a:e8:d4:ce:83:0b:16:
4f:36:08:93:92:dd:42:5c:4f:22:d0:f2:32:84:6a:11:32:42:
12:f1:56:a2:c7:5e:1a:f5:3c:e5:64:56:a1:f7:86:bd:19:ae:
6b:21:7f:43:df:cc:16:be:03:75:b5:86:a4:f0:07:b8:8d:b2:
f1:75:03:13:40:bd:b1:7f:14:14:1a:5c:95:81:a6:3b:b9:c6:
b4:64:14:be:bb:ea:79:cd:10:4a:5f:03:b9:66:73:9c:14:21:
47:97:e9:99:09:ec:a2:63:ff:25:c4:bd:b5:04:b9:e0:0b:18:
4d:7c:30:49:de:8a:f5:28:d8:cd:8b:d0:f7:90:8d:d8:af:5d:
c1:70:6d:b4:e3:1d:cf:6c:05:c3:b5:25:a2:d9:4c:5a:54:e1:
82:14:83:85:6a:62:99:bd:d4:53:59:eb:bc:ae:4c:a2:ba:19:
f3:a6:db:79:0e:54:ba:e0:53:99:c9:5a:bd:1f:74:4a:46:6c:
b1:52:f5:05:a1:6f:c6:dd:3d:35:52:4c:55:07:ed:bc:9e:f0:
50:c2:87:22:20:00:f0:37:0b:4c:9f:35:21:8d:0c:fe:ca:60:
0b:e6:97:99:f1:1e:5e:bb:cc:06:8a:11:1c:20:0e:ea:c0:7c:
23:5c:0c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:07:39 2026 by rpki-client