Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/OYeJ5-M4T5L2FKRWKI3a9a6VDmM.roa
File: OYeJ5-M4T5L2FKRWKI3a9a6VDmM.roa (raw, json)
Hash identifier: 97peS8uVIiDVTMSy/TPUaF9XV25de95MIKkCc5hRj/U=
Subject key identifier: 39:87:89:E7:E3:38:4F:92:F6:14:A4:56:28:8D:DA:F5:AE:95:0E:63
Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial: 019DFAAFB4854231A908D86D7C447FAE6A38
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/OYeJ5-M4T5L2FKRWKI3a9a6VDmM.roa
Signing time: Wed 06 May 2026 00:28:32 +0000
ROA not before: Wed 06 May 2026 00:28:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198130
IP address blocks: 95.181.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fa:af:b4:85:42:31:a9:08:d8:6d:7c:44:7f:ae:6a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Validity
Not Before: May 6 00:28:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=398789e7e3384f92f614a456288ddaf5ae950e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c7:58:87:dd:03:e4:8d:b1:18:26:b6:dd:d7:
2d:11:72:42:74:0f:e3:89:c2:b6:16:a6:04:2d:9b:
f4:96:7b:f2:ac:ab:62:ee:d4:71:f4:12:2c:67:32:
3b:a6:10:ec:15:6f:2a:27:7e:e6:6e:99:43:a5:aa:
b6:f8:ae:7c:55:02:e4:9d:e4:34:fe:a7:aa:8c:89:
07:bb:e1:5f:25:8a:fa:46:24:8e:9c:3c:c9:f5:04:
87:d3:0e:5e:96:48:cf:92:63:bd:23:9d:97:3d:3f:
62:55:aa:de:af:fa:55:0f:b2:bb:01:d2:52:50:ca:
57:cb:01:2c:6f:7a:86:e9:f2:1d:2d:85:f6:a6:7b:
a4:26:e9:7b:43:0b:dd:f4:15:a6:ec:ac:ad:79:91:
07:7b:07:76:c4:62:8b:03:1e:bb:56:78:77:58:5e:
22:4f:df:25:e9:27:30:37:0b:68:25:87:8c:46:ba:
32:b5:c2:a5:1f:7a:32:c4:57:18:7b:6a:36:8a:2e:
98:60:4e:30:0a:4d:22:7b:84:ce:c8:1e:5f:39:02:
2e:d9:57:c4:1c:ba:40:79:e4:2f:7b:a7:d8:e2:97:
68:40:65:c4:4a:93:80:ee:40:6d:c4:36:4e:72:64:
dd:a2:a2:41:24:b5:db:a7:d9:93:29:b7:91:b6:15:
f2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:87:89:E7:E3:38:4F:92:F6:14:A4:56:28:8D:DA:F5:AE:95:0E:63
X509v3 Authority Key Identifier:
keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/OYeJ5-M4T5L2FKRWKI3a9a6VDmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.153.0/24
Signature Algorithm: sha256WithRSAEncryption
43:76:a6:60:de:a0:c8:56:87:5f:ad:48:60:b7:0a:cc:0f:c0:
19:11:90:28:22:a8:67:28:bd:4e:b1:68:f5:0c:41:f8:0f:20:
df:04:9d:14:07:b6:c0:30:f2:ee:fe:ad:b2:6d:5f:bf:d6:af:
6f:d9:0a:4a:3c:11:c7:fe:dc:95:68:6e:07:23:6f:2a:a4:f2:
3e:83:93:9c:ed:0e:d0:05:85:b2:e3:ce:1e:db:44:04:ff:fb:
5c:f5:71:6a:61:a7:e2:c4:34:a8:5e:6c:ba:97:84:01:a3:13:
b1:0f:ad:fc:49:22:c9:c7:2f:59:7b:34:4b:ea:9d:30:c7:8d:
4e:bd:d6:1e:ba:87:6c:bc:45:89:42:3e:b0:6a:3b:fb:9c:22:
38:87:5a:ae:d8:7e:59:97:32:80:4a:f5:d5:78:31:96:28:36:
0f:c2:79:ef:c1:98:01:3a:fa:40:ce:45:c1:f5:b1:fc:63:97:
57:2e:f8:04:9f:05:1e:92:dc:d5:ec:b1:80:ac:59:18:6c:da:
0e:44:5a:50:93:f3:e8:62:a9:f5:12:24:ab:b5:a3:9b:88:85:
03:58:7a:1b:98:ee:6b:d3:cb:19:05:f8:fa:d8:22:46:6b:12:
a8:a2:3a:aa:73:e1:ee:aa:83:5d:ed:6f:89:f0:4a:d0:ae:64:
a5:22:df:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:49:00 2026 by rpki-client