Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/AogunF2vY6jwFQqloSaO1hbzpk8.roa
File: AogunF2vY6jwFQqloSaO1hbzpk8.roa (raw, json)
Hash identifier: it2LBzN2gPXG+ZsVF9U3YkMRcRGbDQsz+oO4JZZUzeg=
Subject key identifier: 02:88:2E:9C:5D:AF:63:A8:F0:15:0A:A5:A1:26:8E:D6:16:F3:A6:4F
Certificate issuer: /CN=49c403d43b5f38fca2119cd1409a92763edefe71
Certificate serial: 019E3B419EB92A5AF034D7A6041A4D15477D
Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/AogunF2vY6jwFQqloSaO1hbzpk8.roa
Signing time: Mon 18 May 2026 13:23:36 +0000
ROA not before: Mon 18 May 2026 13:23:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 272381
IP address blocks: 185.75.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 30 May 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3b:41:9e:b9:2a:5a:f0:34:d7:a6:04:1a:4d:15:47:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71
Validity
Not Before: May 18 13:23:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02882e9c5daf63a8f0150aa5a1268ed616f3a64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:68:2d:d8:82:7a:04:cc:93:ff:fc:30:90:66:
12:a5:44:4c:d7:2c:51:f5:9c:77:fa:05:58:e0:65:
f4:f2:9e:0c:16:9c:be:7a:e1:68:c9:50:92:cb:e5:
48:25:14:d1:5f:ad:89:5b:e0:ef:62:63:85:64:3b:
b0:5c:7e:ba:0a:6f:4b:62:e7:3a:f7:94:4f:14:c7:
14:82:a2:31:26:d4:87:e7:12:17:24:98:88:0f:2f:
62:ac:03:28:44:b8:4f:e8:5b:af:17:67:28:7a:b6:
3a:b4:0e:df:fd:9f:fa:0b:da:72:c4:43:85:ef:a1:
4e:77:ec:f8:65:66:90:78:77:a8:0e:51:a2:6a:7c:
93:81:a3:20:b3:a3:85:28:dd:25:d0:74:05:5f:55:
8e:64:6d:6d:e5:ad:3f:14:77:e7:5c:01:66:05:0b:
ea:ea:b1:d9:2b:6c:d5:7d:eb:12:c9:46:0c:9c:d9:
6c:a5:8e:f1:fb:23:4a:ed:4f:49:b7:6f:55:66:0c:
8b:cb:e5:ba:de:45:11:ae:5f:53:9a:4e:85:d5:3a:
6f:7f:97:dc:59:b7:5d:55:82:f8:c8:dc:b8:be:1c:
6f:2c:94:54:c1:1c:b7:d6:36:eb:9d:f5:b8:6a:bb:
b7:7c:66:07:34:f0:4e:8a:5a:75:5f:75:eb:93:b0:
89:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:88:2E:9C:5D:AF:63:A8:F0:15:0A:A5:A1:26:8E:D6:16:F3:A6:4F
X509v3 Authority Key Identifier:
keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/AogunF2vY6jwFQqloSaO1hbzpk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.15.0/24
Signature Algorithm: sha256WithRSAEncryption
70:0e:ea:12:f9:ee:de:25:e1:be:3b:27:a3:f5:aa:df:4e:db:
fb:94:f8:9b:3a:78:b0:79:f1:35:2d:4a:97:ed:d6:ec:80:13:
23:11:36:aa:14:87:b6:67:b6:57:f9:d7:3d:0b:7d:7b:18:6e:
ab:66:68:fe:2a:5c:ce:d2:c0:6e:9a:16:76:fa:c4:b4:75:16:
76:74:f4:c8:59:e2:0d:c5:a4:38:50:5e:79:b3:9b:01:da:e9:
e5:1c:18:10:23:a7:21:af:2f:5d:95:d4:20:d6:a1:f8:c9:b6:
a4:2c:33:30:09:50:42:87:4e:f0:a0:55:2c:79:38:73:18:24:
b7:a4:05:1f:81:45:98:cb:1d:6d:cb:6f:fc:02:59:19:2e:a1:
2f:cf:04:39:4b:dc:d3:dc:ab:d4:ec:f6:4c:66:44:6d:a5:0f:
48:3b:37:37:13:54:96:3a:61:57:d8:4d:af:dd:42:1d:b1:38:
e7:6c:49:50:e8:aa:3f:df:f5:62:3a:d6:86:c3:68:08:39:ca:
61:e5:03:81:d1:5b:02:34:4e:4e:8d:5a:a2:2d:62:30:67:14:
d9:9b:c5:88:e9:32:89:91:94:2d:0c:2b:13:f6:83:63:ec:e8:
1b:d4:53:4f:fc:7a:ad:9c:02:69:96:be:0b:46:22:14:1b:c7:
d2:1d:8c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 00:58:43 2026 by rpki-client