Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/0OHDAitfdSNHJvmQzR5gc5zey0w.roa
File: 0OHDAitfdSNHJvmQzR5gc5zey0w.roa (raw, json)
Hash identifier: SN7xMuB5DueBZzdKeSDCQ9FgYptmVvl/NYsBMdeDoVw=
Subject key identifier: D0:E1:C3:02:2B:5F:75:23:47:26:F9:90:CD:1E:60:73:9C:DE:CB:4C
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 01A0C577F18DA749212CF938E598559C8BB6
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/0OHDAitfdSNHJvmQzR5gc5zey0w.roa
Signing time: Mon 21 Sep 2026 19:36:07 +0000
ROA not before: Mon 21 Sep 2026 19:36:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 45.152.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:77:f1:8d:a7:49:21:2c:f9:38:e5:98:55:9c:8b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Sep 21 19:36:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0e1c3022b5f75234726f990cd1e60739cdecb4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:49:49:94:22:1d:42:92:cd:5b:f4:c4:33:61:
f3:95:48:36:ad:17:59:95:79:a6:58:26:3b:40:0f:
e8:28:56:b0:e9:10:c3:05:55:ad:db:d8:f1:22:4f:
2e:47:87:fa:fb:89:05:57:da:52:ca:2a:83:8f:b2:
9b:3f:b1:04:e9:40:82:be:3f:15:58:02:3d:22:99:
f6:46:f7:cf:ef:39:2f:84:ed:db:d7:16:0f:1a:4c:
df:e1:43:76:61:bf:f0:c9:2e:23:a7:00:65:b0:54:
6a:ea:62:e6:f3:d5:00:a8:9f:58:62:fb:a4:14:92:
7d:9a:6f:99:dc:66:ae:18:a6:52:f2:b2:68:df:0f:
c5:2a:24:32:bb:b7:2b:f1:5b:0e:43:f1:60:f2:66:
57:0f:13:16:9b:6e:07:6e:e3:2f:40:d1:be:06:27:
4f:c5:28:13:cc:66:18:83:ca:2c:6f:44:bc:45:42:
73:8e:8e:41:f0:f4:96:e8:e4:fb:57:ca:04:cc:fe:
e9:da:7c:fa:c1:fe:d8:7c:0c:dd:63:05:af:31:c0:
57:b7:97:d1:d9:8c:6a:f3:bb:c7:36:cb:80:b8:15:
9f:c1:bf:9a:96:3b:40:15:70:c3:29:f3:d3:dd:89:
56:b8:eb:c8:a3:88:91:23:50:f6:dd:cc:09:50:f3:
ba:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E1:C3:02:2B:5F:75:23:47:26:F9:90:CD:1E:60:73:9C:DE:CB:4C
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/0OHDAitfdSNHJvmQzR5gc5zey0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.167.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:2d:58:96:e2:50:a3:0c:77:50:54:74:0e:1d:39:f0:2c:45:
ba:1c:69:ee:33:92:6a:8e:32:0d:e2:dc:78:27:8e:c8:ff:13:
a8:f3:a8:3b:aa:da:39:81:a5:13:a6:7b:a1:20:5c:ef:c6:88:
b0:9d:29:49:e3:dc:52:ab:2d:65:d9:ff:92:dd:57:09:b3:df:
f5:e9:93:18:52:92:3c:4b:5e:03:b2:23:06:46:fa:34:9d:7f:
dc:f5:a3:72:66:ed:70:4f:c1:2f:65:d8:91:84:58:93:85:e7:
ec:d4:3c:3e:6c:44:06:ac:61:bd:de:6b:fc:b6:b5:f5:d4:94:
b3:41:d8:47:36:42:44:2d:14:01:86:fe:47:ee:e9:f8:b8:45:
a9:7e:a7:6a:34:b9:df:b1:74:6d:31:e0:69:d8:24:56:c3:3b:
02:b3:fe:c2:95:f5:f1:f9:fe:df:ef:3e:aa:6f:5f:8b:91:f6:
72:92:90:ec:1e:52:bd:7b:da:f6:1b:4d:e3:7a:55:6a:ea:8b:
92:39:fb:82:20:45:b0:42:54:73:1f:33:be:7d:eb:9a:d0:bc:
d8:d2:70:82:93:24:d8:6a:d8:72:d3:a5:40:2c:71:a0:6b:0c:
61:00:54:bd:05:c4:cb:eb:c8:7c:53:bd:ac:87:1e:46:a2:62:
ba:6b:43:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDFd/GNp0khLPk45ZhVnIu2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy
NTdkYzQwHhcNMjYwOTIxMTkzNjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGUxYzMwMjJiNWY3NTIzNDcyNmY5OTBjZDFlNjA3MzljZGVjYjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0lJlCIdQpLNW/TEM2HzlUg2rRdZ
lXmmWCY7QA/oKFaw6RDDBVWt29jxIk8uR4f6+4kFV9pSyiqDj7KbP7EE6UCCvj8V
WAI9Ipn2RvfP7zkvhO3b1xYPGkzf4UN2Yb/wyS4jpwBlsFRq6mLm89UAqJ9YYvuk
FJJ9mm+Z3GauGKZS8rJo3w/FKiQyu7cr8VsOQ/Fg8mZXDxMWm24HbuMvQNG+BidP
xSgTzGYYg8osb0S8RUJzjo5B8PSW6OT7V8oEzP7p2nz6wf7YfAzdYwWvMcBXt5fR
2Yxq87vHNsuAuBWfwb+aljtAFXDDKfPT3YlWuOvIo4iRI1D23cwJUPO6gQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNDhwwIrX3UjRyb5kM0eYHOc3stMMB8GA1UdIwQY
MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt
OTk5MGUyZDllYWZlLzEvME9IREFpdGZkU05ISnZtUXpSNWdjNXpleTB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl
LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZinMA0G
CSqGSIb3DQEBCwUAA4IBAQA8LViW4lCjDHdQVHQOHTnwLEW6HGnuM5JqjjIN4tx4
J47I/xOo86g7qto5gaUTpnuhIFzvxoiwnSlJ49xSqy1l2f+S3VcJs9/16ZMYUpI8
S14DsiMGRvo0nX/c9aNyZu1wT8EvZdiRhFiThefs1Dw+bEQGrGG93mv8trX11JSz
QdhHNkJELRQBhv5H7un4uEWpfqdqNLnfsXRtMeBp2CRWwzsCs/7ClfXx+f7f7z6q
b1+LkfZykpDsHlK9e9r2G03jelVq6ouSOfuCIEWwQlRzHzO+feua0LzY0nCCkyTY
athy06VALHGgawxhAFS9BcTL68h8U72shx5GomK6a0Pu
-----END CERTIFICATE-----
Generated at Wed Sep 23 04:35:18 2026 by rpki-client