Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/OJCWpsxNbupszt0IJQ7GmjOPuU4.roa
File: OJCWpsxNbupszt0IJQ7GmjOPuU4.roa (raw, json)
Hash identifier: emoVCpaFA4Kcns27J7+DwGk3hNm6T2TOcgu0xzbdja8=
Subject key identifier: 38:90:96:A6:CC:4D:6E:EA:6C:CE:DD:08:25:0E:C6:9A:33:8F:B9:4E
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 019DB4363E80C21566D594EA0B582F26D082
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/OJCWpsxNbupszt0IJQ7GmjOPuU4.roa
Signing time: Wed 22 Apr 2026 08:02:26 +0000
ROA not before: Wed 22 Apr 2026 08:02:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 45.149.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b4:36:3e:80:c2:15:66:d5:94:ea:0b:58:2f:26:d0:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Apr 22 08:02:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=389096a6cc4d6eea6ccedd08250ec69a338fb94e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e9:dc:55:8d:56:b5:3e:be:db:b6:2c:80:6a:
11:65:fe:73:a8:8f:25:90:e9:94:67:ec:8e:4e:ca:
f5:74:59:aa:94:63:89:c4:69:97:aa:bf:5c:0a:b8:
d7:71:4a:44:8b:73:89:fe:2d:6d:bd:5f:31:46:c1:
d1:a1:28:30:2f:5e:5a:74:88:b3:0e:ec:5e:d8:3f:
94:38:07:49:0e:fb:03:72:55:25:62:3c:ec:75:a5:
c3:09:3e:d3:4c:ce:8e:45:c9:4d:25:d0:dd:b0:0a:
5f:eb:54:16:76:68:a4:b5:4c:68:56:40:58:62:b7:
70:7f:b6:71:2b:6c:05:e9:65:e7:61:4a:5c:e2:f7:
5a:d7:f6:9c:1a:ee:8b:ec:a4:da:ff:03:01:c8:68:
1d:80:86:90:96:34:48:0d:a6:43:5b:21:86:80:2f:
29:ce:87:0f:09:9c:1b:88:04:1d:44:23:f0:d8:54:
24:69:c4:4b:0b:68:ae:c4:f2:a2:6f:4f:31:d2:50:
53:53:f9:47:ed:8a:0a:62:ef:b0:d6:a7:f3:a9:d9:
3d:6a:e4:69:f4:3c:9c:47:62:bb:8c:91:2c:55:da:
fe:f4:da:fe:f6:22:03:04:65:30:ff:45:7a:b5:d6:
4c:5d:6e:5d:75:69:38:4b:67:b9:ca:7f:c1:0f:6b:
2e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:90:96:A6:CC:4D:6E:EA:6C:CE:DD:08:25:0E:C6:9A:33:8F:B9:4E
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/OJCWpsxNbupszt0IJQ7GmjOPuU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.6.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:1c:d4:79:9c:3e:75:77:5f:1a:02:59:59:9d:9f:4c:2e:0a:
c1:18:a5:49:70:0b:02:bd:0f:d6:dc:bb:7d:2d:4a:7a:13:5e:
36:24:73:51:6b:28:86:5e:41:3d:27:e2:40:2c:5b:7e:5e:0b:
ea:ac:b5:d8:a4:ab:ee:2c:05:4d:6c:69:a7:1e:ab:48:f3:67:
e5:dd:5e:3c:3f:c9:60:92:46:2a:a5:c1:57:c7:62:57:ec:b8:
91:96:f6:e3:f4:96:15:41:cf:72:52:a1:7f:26:aa:d4:d9:94:
f7:59:5e:26:32:78:b4:8e:ed:6c:de:66:8c:bf:fb:74:d3:34:
ed:02:95:ce:12:e6:55:7f:80:05:d3:31:c2:7b:33:53:b9:a0:
dc:a3:37:d3:71:0c:28:d8:89:43:d7:05:ab:ad:a5:c5:6d:46:
cd:da:0c:34:2f:57:99:6d:31:c3:34:a2:67:0d:b0:af:8d:58:
4a:9b:fe:a7:80:f2:cc:1e:3c:60:a1:96:5f:a8:42:bb:58:bf:
9f:d3:81:74:cf:57:8e:eb:8f:42:95:87:c3:f3:a6:08:e6:19:
7b:73:e4:07:b1:9a:4e:8e:fd:44:ad:29:0d:77:54:13:4e:84:
69:5d:8b:6f:57:19:c4:8f:25:57:97:8d:79:ad:3b:85:57:68:
dd:0e:9a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:40:18 2026 by rpki-client