Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ObNp08tcPswa_IVpxe5x_hcv00k.roa
File: ObNp08tcPswa_IVpxe5x_hcv00k.roa (raw, json)
Hash identifier: c/yuY9zOTI88TMqwFzI8MXmeUUqIy9UdRujaNGrWD24=
Subject key identifier: 39:B3:69:D3:CB:5C:3E:CC:1A:FC:85:69:C5:EE:71:FE:17:2F:D3:49
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019C58A3C442266DF987A01323D1A2C04225
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ObNp08tcPswa_IVpxe5x_hcv00k.roa
Signing time: Fri 13 Feb 2026 20:14:13 +0000
ROA not before: Fri 13 Feb 2026 20:14:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153786
IP address blocks: 103.102.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:58:a3:c4:42:26:6d:f9:87:a0:13:23:d1:a2:c0:42:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Feb 13 20:14:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39b369d3cb5c3ecc1afc8569c5ee71fe172fd349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:11:ab:f6:78:67:e9:26:f2:6c:13:86:10:26:
61:cf:5b:b6:f2:a9:22:10:de:dc:18:55:c4:9d:86:
c1:46:f0:4d:00:85:3a:a0:d1:3e:41:8b:51:c0:ec:
df:37:90:51:41:af:cb:fa:a8:db:de:3e:85:db:b9:
ee:7f:c5:4b:4e:0d:f4:37:bb:c0:75:4c:5a:a7:e9:
f4:af:27:2f:e9:44:5d:09:29:fb:df:b6:90:26:73:
4f:eb:df:c6:82:d3:72:b6:6b:5a:f2:b3:20:0f:e4:
0b:11:8e:54:2d:03:6d:00:65:e4:f7:6d:07:0f:5f:
12:71:db:b9:b3:ea:d6:a0:d6:1e:28:94:d2:55:f8:
6d:7f:fd:78:e5:d2:b3:8f:ed:53:f9:80:2d:0d:a1:
39:65:5e:2d:54:c1:90:10:e2:0c:c9:2e:a5:ef:c7:
16:2c:1e:2a:8f:84:86:e2:29:a7:90:82:e8:64:13:
ea:cc:78:bb:c6:60:c7:ef:31:86:d6:4c:00:96:cb:
5d:cd:38:6d:e5:e6:71:db:86:53:22:44:1a:37:09:
96:a2:1c:ad:41:1d:f5:1e:7e:26:e4:1c:2f:5a:3e:
df:12:46:bc:68:71:53:14:aa:04:67:8d:f3:52:4e:
25:62:76:c2:26:37:1c:66:d9:8d:cd:e2:55:c7:ac:
2d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B3:69:D3:CB:5C:3E:CC:1A:FC:85:69:C5:EE:71:FE:17:2F:D3:49
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ObNp08tcPswa_IVpxe5x_hcv00k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.133.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:9e:79:d6:fe:49:8f:89:10:d1:2c:88:f2:6a:c3:0b:fe:ad:
ea:c0:6f:cf:4a:a7:b8:7a:6a:43:31:d7:24:08:9c:06:96:90:
7d:8d:dd:1a:bb:1e:20:40:0b:df:f7:72:6d:40:99:11:9f:96:
9e:fc:e4:ef:9c:7e:2a:7b:eb:fa:64:d9:27:34:ac:9a:7d:87:
03:9d:5f:9d:14:09:ac:80:0f:61:40:f9:5c:d2:d0:f2:cd:33:
76:23:d8:eb:c9:02:af:a2:c7:27:ca:2c:94:3c:10:c7:76:f2:
b7:43:b5:c6:41:f2:31:79:c2:de:25:08:9b:b3:b2:c8:32:30:
87:94:aa:46:7c:58:b0:0b:aa:c8:f4:59:14:73:a3:a5:be:3d:
b3:fc:5e:01:06:6d:5c:9b:b7:8e:10:40:51:6d:68:f0:2a:48:
4b:35:14:c2:24:06:53:72:4b:a1:81:eb:2b:da:6a:6f:b4:28:
65:31:61:da:1d:76:a3:d0:64:ed:4b:16:75:1a:30:11:42:85:
3e:9e:7b:97:c3:59:08:27:d1:2b:a2:4a:4b:94:ac:e1:46:de:
7d:8d:15:bc:b1:3f:34:4a:18:65:64:55:73:66:90:d3:91:2a:
f1:7d:97:98:40:c9:00:39:de:cc:80:af:11:8e:89:e6:68:ab:
fd:4c:d2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:20:24 2026 by rpki-client