Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/Ofgeobg55e8lqnNuTZu03yb12Ag.roa
File: Ofgeobg55e8lqnNuTZu03yb12Ag.roa (raw, json)
Hash identifier: FN7C8Po9NJD9RTZuVfv4iTIQrGdvz+gzOEAhvCfOHtg=
Subject key identifier: 39:F8:1E:A1:B8:39:E5:EF:25:AA:73:6E:4D:9B:B4:DF:26:F5:D8:08
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 01A0BE013CEBDDAF1FB537EEF5BB51BD199D
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/Ofgeobg55e8lqnNuTZu03yb12Ag.roa
Signing time: Sun 20 Sep 2026 08:49:07 +0000
ROA not before: Sun 20 Sep 2026 08:49:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401936
IP address blocks: 45.149.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:01:3c:eb:dd:af:1f:b5:37:ee:f5:bb:51:bd:19:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Sep 20 08:49:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39f81ea1b839e5ef25aa736e4d9bb4df26f5d808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4d:88:24:78:75:a0:2b:fa:8a:47:25:4a:bb:
b8:78:48:f3:79:44:38:2b:01:2a:d4:6a:13:fe:40:
cf:69:27:b5:9e:a8:62:61:31:3e:a6:a2:6b:19:05:
be:9a:14:c9:cc:c8:67:62:0a:6c:98:e7:2d:3d:69:
38:9f:6f:7b:41:4b:f4:43:12:3f:5f:05:f9:90:f1:
ba:12:2f:9c:13:21:a0:d7:0e:cc:20:a9:03:50:e2:
f5:01:98:b8:0b:85:85:b2:f9:da:d2:80:b4:55:ac:
3c:1a:38:54:e4:0c:45:e2:45:3c:18:37:0d:14:e0:
02:37:0d:32:a0:d0:36:79:ae:7c:27:f5:cc:41:ee:
f7:e0:9e:f4:75:e9:ee:ad:2d:d3:78:c5:2f:0c:df:
73:db:2b:8f:1a:a4:63:9a:ea:7a:0c:b2:14:7f:36:
4a:fe:b2:c8:5e:ec:3a:98:ef:1d:7e:fe:be:50:7d:
88:ef:c9:8c:f0:66:44:39:8d:3b:cc:35:74:01:66:
fd:72:96:f8:76:fd:c9:cc:8f:75:58:20:27:35:84:
95:4d:63:bd:5d:93:dc:2c:6c:51:f1:a1:f5:2c:81:
77:57:44:00:d8:59:a8:c0:0f:8b:3e:f2:b5:f8:f9:
93:65:86:ed:ad:52:04:b3:24:e9:e1:36:59:02:25:
b0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F8:1E:A1:B8:39:E5:EF:25:AA:73:6E:4D:9B:B4:DF:26:F5:D8:08
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/Ofgeobg55e8lqnNuTZu03yb12Ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.5.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:51:51:9f:ca:e0:85:14:2d:28:87:8f:58:06:50:14:e2:28:
e6:fc:12:1d:4b:94:19:9c:3b:45:4d:38:fd:ae:82:17:1f:88:
b5:7f:5c:8b:f6:ad:75:7d:9a:2a:36:b9:78:78:42:90:b0:53:
3d:64:db:40:5e:e3:b6:76:1a:72:42:40:18:91:24:3a:c8:48:
78:7d:11:b3:43:63:f9:cd:ba:3e:e1:67:90:64:cf:8a:e6:14:
66:be:57:81:f7:9e:1f:80:21:a6:97:36:49:e6:a9:e7:85:e3:
ea:b6:60:4e:ab:81:64:32:36:73:f2:94:e6:c0:2c:ed:de:d1:
53:30:57:9a:4c:34:cc:21:8b:84:00:69:4a:b7:30:2a:7f:3e:
5a:3f:af:cf:f6:de:3d:16:ea:b2:09:5f:62:d4:89:d5:9f:fb:
ce:15:ac:3f:6c:75:6b:dc:8c:65:1f:64:9b:30:75:af:1c:ec:
65:20:2d:19:6f:44:17:6f:74:10:c4:5d:a6:1c:27:7b:00:b6:
3d:c0:a1:7f:ff:0d:d6:7b:f4:01:27:6a:6d:32:dc:26:95:d0:
18:b2:3f:a3:1b:ab:8b:f4:81:0d:4b:4e:93:d5:60:60:f3:c0:
7b:3c:a8:33:87:d2:38:88:82:10:9f:4e:ee:37:42:0a:4b:93:
07:77:4f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:21:43 2026 by rpki-client