Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/0ea2fc-ad5c-4f2d-813f-0cee2c4ca062/1/oP0i5tSjJpPnw7rZtnRJyU5Q4vU.roa
File: oP0i5tSjJpPnw7rZtnRJyU5Q4vU.roa (raw, json)
Hash identifier: wSIal4fPSrIdhNkTAud1pbA+N7pOXY7jxLrkWLCn7Ns=
Subject key identifier: A0:FD:22:E6:D4:A3:26:93:E7:C3:BA:D9:B6:74:49:C9:4E:50:E2:F5
Certificate issuer: /CN=53b32c5aea1eb120b28f134dacb2004481ce0fb1
Certificate serial: 01A057FED0C74E6DF4EC54431A502995E4FF
Authority key identifier: 53:B3:2C:5A:EA:1E:B1:20:B2:8F:13:4D:AC:B2:00:44:81:CE:0F:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7MsWuoesSCyjxNNrLIARIHOD7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0ea2fc-ad5c-4f2d-813f-0cee2c4ca062/1/oP0i5tSjJpPnw7rZtnRJyU5Q4vU.roa
Signing time: Mon 31 Aug 2026 13:25:12 +0000
ROA not before: Mon 31 Aug 2026 13:25:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206924
IP address blocks: 31.99.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0ea2fc-ad5c-4f2d-813f-0cee2c4ca062/1/U7MsWuoesSCyjxNNrLIARIHOD7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0ea2fc-ad5c-4f2d-813f-0cee2c4ca062/1/U7MsWuoesSCyjxNNrLIARIHOD7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7MsWuoesSCyjxNNrLIARIHOD7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:fe:d0:c7:4e:6d:f4:ec:54:43:1a:50:29:95:e4:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b32c5aea1eb120b28f134dacb2004481ce0fb1
Validity
Not Before: Aug 31 13:25:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0fd22e6d4a32693e7c3bad9b67449c94e50e2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:fe:be:7e:2d:68:27:81:c4:2f:87:1a:19:bb:
72:2d:7c:2a:b6:df:02:c9:0d:39:4c:49:65:0f:6d:
e0:c3:3c:ac:cd:f7:22:09:37:c4:62:3a:d6:c3:44:
a5:16:5f:09:a5:90:1b:1d:ad:28:56:8c:4a:13:74:
14:e4:55:c9:f9:c1:16:ff:9d:c1:a8:4c:51:d5:ba:
48:6c:e8:bc:e9:14:e6:07:58:87:77:f4:39:35:53:
21:04:63:fc:69:24:79:6c:4f:7a:2c:cc:75:5d:71:
7c:c1:a7:3b:da:29:94:12:69:fd:9f:c3:06:d2:3e:
90:ba:94:81:2a:38:de:50:34:7a:eb:30:d6:13:df:
8c:fd:80:54:7b:3a:31:85:17:80:d7:4c:52:8e:26:
d8:b1:4b:0e:24:d7:cd:5a:f0:9f:73:8c:69:3d:bc:
50:f9:f6:32:4e:f7:90:69:b3:96:a9:d0:f0:af:c1:
7a:fb:cb:73:dd:28:f7:fc:0b:b8:75:75:17:23:a7:
7c:92:69:c1:e1:f6:85:4f:59:3b:10:91:94:3a:b4:
56:19:ef:a7:26:be:29:c9:d2:85:33:b6:54:65:ee:
8b:de:98:e8:fe:dd:c0:0d:2a:25:04:f3:7d:47:e6:
ce:60:8f:1e:c7:79:73:e6:f6:05:47:ce:27:6e:85:
9c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FD:22:E6:D4:A3:26:93:E7:C3:BA:D9:B6:74:49:C9:4E:50:E2:F5
X509v3 Authority Key Identifier:
keyid:53:B3:2C:5A:EA:1E:B1:20:B2:8F:13:4D:AC:B2:00:44:81:CE:0F:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7MsWuoesSCyjxNNrLIARIHOD7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0ea2fc-ad5c-4f2d-813f-0cee2c4ca062/1/oP0i5tSjJpPnw7rZtnRJyU5Q4vU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0ea2fc-ad5c-4f2d-813f-0cee2c4ca062/1/U7MsWuoesSCyjxNNrLIARIHOD7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.99.153.0/24
Signature Algorithm: sha256WithRSAEncryption
99:e5:63:89:06:28:58:40:6a:23:17:25:1b:13:7f:3e:88:35:
50:4d:0d:1b:aa:c7:d5:23:02:15:5e:71:cc:98:f0:51:39:bf:
6c:9d:9f:bd:51:36:22:c3:0d:29:b8:f3:65:07:c4:62:85:dc:
6c:83:50:ba:ae:f9:0a:ba:70:b9:d8:c5:89:01:74:b4:08:64:
b5:9c:5f:ee:3f:9f:22:f2:ae:34:e4:eb:11:e9:12:12:82:e9:
c3:5f:0c:7f:5a:b2:fe:a6:67:e9:c1:75:62:e8:bc:93:67:27:
c0:5c:f1:5d:05:27:f2:e4:38:49:60:02:07:37:dd:fb:df:7f:
23:60:ab:da:1c:1e:e3:d4:1e:fa:81:c2:2a:b9:5a:07:5e:1c:
0d:12:09:b7:83:91:af:ad:9c:eb:45:de:71:7b:ba:61:6b:cf:
8a:4c:6b:70:9a:25:dc:8f:dc:21:83:0f:fb:20:50:ba:5e:d6:
79:df:a4:f2:b8:c5:40:ce:9c:68:65:d4:61:55:f3:a8:2f:3b:
dd:2a:59:78:9d:c9:a8:50:9a:9f:a1:41:d2:5e:88:50:cc:b2:
39:6e:84:b1:f5:f3:f5:dc:ab:f9:34:8c:74:e3:14:8f:e7:04:
38:a3:ff:4d:8d:cd:d4:ff:d3:3f:15:bd:19:8c:ee:93:89:09:
74:24:a5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:22:04 2026 by rpki-client