Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/b0ikFO_qS9n_MIPrxxc6L5fetdI.roa
File: b0ikFO_qS9n_MIPrxxc6L5fetdI.roa (raw, json)
Hash identifier: Iw0obDEuYCcKatWgGaJ1UaUj/yi9Stb3XdDj5CWjvRg=
Subject key identifier: 6F:48:A4:14:EF:EA:4B:D9:FF:30:83:EB:C7:17:3A:2F:97:DE:B5:D2
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 019D1E9B2B5D49529BA005A4ACC0A72EBDA9
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/b0ikFO_qS9n_MIPrxxc6L5fetdI.roa
Signing time: Tue 24 Mar 2026 06:49:38 +0000
ROA not before: Tue 24 Mar 2026 06:49:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402187
IP address blocks: 141.98.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1e:9b:2b:5d:49:52:9b:a0:05:a4:ac:c0:a7:2e:bd:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: Mar 24 06:49:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f48a414efea4bd9ff3083ebc7173a2f97deb5d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:63:28:ad:4d:d9:ac:11:b8:e2:a7:75:38:6b:
5c:55:8c:02:de:3f:a0:2d:e2:0d:73:b2:63:87:02:
f1:62:7f:93:11:f1:5c:4c:66:27:2f:b4:a0:b8:15:
6a:bc:bc:40:1a:06:29:c8:d6:78:b8:06:c4:20:b5:
ed:5a:97:47:35:21:c3:5a:31:fb:bb:f1:f9:d8:26:
de:12:b5:ce:c1:08:1d:ee:a5:82:30:1a:b6:00:02:
ad:de:2d:cd:11:35:f9:1a:79:4f:72:a2:20:ec:02:
78:f5:32:41:11:d7:32:a0:58:84:df:93:9a:87:b9:
98:59:37:3f:49:58:60:1a:c9:51:fa:ce:49:f5:73:
7e:ff:e6:51:aa:96:69:79:d1:95:a4:f9:f0:1d:33:
b8:63:b4:23:4d:4f:8b:6c:f9:35:19:3e:e8:ef:e2:
cb:cd:ec:b9:da:20:7f:ca:12:5c:eb:3c:14:96:19:
5d:f6:74:94:a6:27:d1:a4:8d:ec:04:fb:6e:3f:47:
35:04:d5:fe:a0:72:b3:3d:9b:d6:d9:bf:92:09:ef:
e8:38:b1:09:c1:86:24:71:a2:77:fc:01:86:cd:31:
6a:e0:a0:67:88:60:27:ca:6f:1a:83:e5:20:b0:b2:
23:7a:59:14:5a:ae:80:7a:fe:53:71:b1:87:32:fb:
d6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:48:A4:14:EF:EA:4B:D9:FF:30:83:EB:C7:17:3A:2F:97:DE:B5:D2
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/b0ikFO_qS9n_MIPrxxc6L5fetdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.149.0/24
Signature Algorithm: sha256WithRSAEncryption
94:68:d7:81:c4:59:e6:a5:46:1c:ec:14:bc:7d:e7:32:12:1d:
e3:e7:78:ee:89:2d:88:31:bd:e5:97:98:e6:d9:51:ed:e0:f8:
3b:0e:31:69:00:39:ef:73:11:f1:65:a1:b2:86:e1:86:8e:2e:
f7:07:6b:34:9d:8d:f4:c2:23:83:0c:91:32:94:49:03:5b:93:
31:ab:64:b8:ce:33:b4:9d:80:1d:58:5c:b3:c3:17:dd:ce:e2:
9c:85:fa:e4:74:e2:28:58:d9:a7:82:10:a9:42:84:10:80:28:
07:e8:e6:35:95:38:35:e2:79:1f:88:23:9e:87:db:c0:bc:4f:
ab:ca:2a:3a:61:a1:82:1d:e4:82:1b:05:46:6c:50:85:43:61:
91:70:29:2a:39:81:14:46:9c:e8:74:df:4f:71:75:38:2f:51:
d7:25:96:22:c9:b0:fc:e2:69:27:c6:f4:32:10:3e:9f:c8:34:
e9:ec:2b:97:37:e8:e4:f8:63:7b:40:cf:2d:dc:8e:1d:a1:10:
fc:a1:16:fd:d1:40:d0:d5:58:c0:9c:40:f4:44:d6:ae:66:82:
7e:31:11:38:23:58:47:b5:99:24:1b:75:ff:4c:06:55:74:0b:
3f:1b:66:52:f1:f4:17:15:b1:01:cc:fd:a3:60:10:1f:f4:20:
20:f8:13:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:29:01 2026 by rpki-client