Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/Oaj1ekGiHqlv1Dma2o_E2V7oad0.roa
File: Oaj1ekGiHqlv1Dma2o_E2V7oad0.roa (raw, json)
Hash identifier: wx8arTEOltxp00f50ADtRMGBaOT600gG2onw7S76NlY=
Subject key identifier: 39:A8:F5:7A:41:A2:1E:A9:6F:D4:39:9A:DA:8F:C4:D9:5E:E8:69:DD
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 019CB31FBAD57FB28A7CC5F402854FF3DF27
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/Oaj1ekGiHqlv1Dma2o_E2V7oad0.roa
Signing time: Tue 03 Mar 2026 09:55:26 +0000
ROA not before: Tue 03 Mar 2026 09:55:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204415
IP address blocks: 31.192.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b3:1f:ba:d5:7f:b2:8a:7c:c5:f4:02:85:4f:f3:df:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Mar 3 09:55:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39a8f57a41a21ea96fd4399ada8fc4d95ee869dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:11:1a:c6:d1:f5:f3:70:18:47:27:c0:4b:5f:
16:5e:b4:48:b3:56:5e:19:40:3c:eb:cf:63:8d:64:
30:77:cb:28:c6:a8:67:e9:75:a9:4c:ef:52:81:c1:
2b:50:2f:b6:06:14:96:86:5c:9e:0e:c8:b1:c5:09:
81:bf:d6:01:f8:ff:e3:91:46:1c:7c:0e:2e:df:0a:
81:8b:f3:d7:09:24:67:82:50:6f:b1:90:a3:da:51:
0c:cb:82:74:e6:bc:dc:3d:42:ba:4b:5c:70:e0:59:
6f:fe:00:3f:a8:6c:ff:78:fe:37:1c:37:a7:c9:fb:
96:d3:a4:e1:dd:55:6e:a2:9c:4c:31:67:42:c2:4f:
84:c2:db:c4:d1:b9:61:f0:65:67:3e:72:84:01:16:
ad:90:40:b3:e1:43:00:8f:84:22:a0:ba:2d:29:c8:
32:79:38:33:b7:b7:73:06:03:de:78:a7:d6:5a:8a:
c5:34:d5:c0:95:27:be:27:e3:30:41:16:29:86:4e:
c4:0d:a0:54:1b:95:ca:40:30:46:d6:b7:85:92:40:
6f:4e:d6:f0:2b:44:0c:c3:c6:7a:1a:06:b3:57:77:
19:c7:0e:8d:65:1c:f1:ab:5b:ec:5b:1c:34:d8:08:
69:d9:bd:f3:57:a8:b3:a1:e1:96:df:d9:f1:7e:de:
d6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A8:F5:7A:41:A2:1E:A9:6F:D4:39:9A:DA:8F:C4:D9:5E:E8:69:DD
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/Oaj1ekGiHqlv1Dma2o_E2V7oad0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.247.0/24
Signature Algorithm: sha256WithRSAEncryption
33:2f:90:4f:58:29:d9:fc:e9:37:38:47:68:a9:fc:9a:90:ee:
d3:cc:de:ca:50:f8:ab:f9:b7:4c:43:40:2d:56:4a:47:58:eb:
3a:31:b0:78:2b:e0:79:36:93:1d:d4:9a:53:51:b0:a1:8d:3e:
39:07:20:da:aa:cb:55:d0:d8:dd:19:e7:40:2a:d6:77:06:0e:
b9:1d:d4:e5:d3:96:b8:93:61:d4:60:23:c1:e0:04:c3:a3:37:
64:2e:2e:be:e3:6e:06:24:29:72:2d:92:1b:d4:47:56:f1:9a:
cb:b7:80:af:24:df:0c:0d:f0:f4:41:56:a7:5c:ce:ad:a5:a6:
89:02:b3:5b:5f:91:e8:5c:00:6d:db:26:d0:48:45:fb:f5:a2:
a7:d9:a7:8e:d9:b7:da:60:20:49:3d:5c:b5:09:4d:d3:e6:24:
09:e0:a3:02:d9:ee:39:9b:b5:86:37:9f:cb:ae:2f:7f:69:21:
8e:cc:e5:d7:33:65:3f:be:2d:02:47:b5:c7:58:82:6f:26:c0:
5e:d8:1d:fa:68:13:e4:9a:c8:18:00:4e:d6:01:3f:16:ea:18:
af:eb:d6:d6:84:da:2d:97:76:b9:7c:a1:00:1a:af:76:b5:8f:
95:7d:a8:19:f2:f8:af:87:b9:9c:3a:b3:66:d1:ac:d1:d3:ba:
e8:8f:bd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 12:42:51 2026 by rpki-client