Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/OKXdbYt6uiI_E7K2Y5NQ0q7B-Hg.roa
File: OKXdbYt6uiI_E7K2Y5NQ0q7B-Hg.roa (raw, json)
Hash identifier: QufMF5nQ301kb3Q/QUdR+FEuJBPVpRiSz6zQPzVWvIk=
Subject key identifier: 38:A5:DD:6D:8B:7A:BA:22:3F:13:B2:B6:63:93:50:D2:AE:C1:F8:78
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01A03AF0D7808A5869C5D96CF01F86DE7F06
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/OKXdbYt6uiI_E7K2Y5NQ0q7B-Hg.roa
Signing time: Tue 25 Aug 2026 22:00:57 +0000
ROA not before: Tue 25 Aug 2026 22:00:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13737
IP address blocks: 37.221.109.0/24 maxlen: 24
45.141.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3a:f0:d7:80:8a:58:69:c5:d9:6c:f0:1f:86:de:7f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Aug 25 22:00:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38a5dd6d8b7aba223f13b2b6639350d2aec1f878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:96:f6:86:14:7d:0c:64:8a:07:fb:f7:46:0b:
52:aa:0e:4b:01:98:a0:a4:1f:29:7e:3e:ed:06:7c:
48:da:a3:99:a5:70:ac:bd:5d:79:4f:5e:81:ac:eb:
dd:fe:c4:ae:cd:c1:9f:47:d0:eb:0b:1f:ee:22:79:
99:3b:73:83:f1:9f:57:a9:3a:9a:61:2f:98:03:18:
b7:2f:ec:a9:dc:56:f6:1f:05:a8:57:3d:b7:00:ad:
e2:52:a5:81:5b:d1:19:0b:f6:7e:b7:fd:15:7a:2e:
6d:05:ab:4a:e5:b8:9b:17:c0:a5:f7:3a:e5:23:67:
05:9e:be:a9:33:da:18:c4:ca:e2:f3:9c:2c:08:89:
33:da:05:3c:75:23:ff:42:dd:ae:f2:03:91:d2:06:
82:13:41:95:b7:9e:e2:e2:d3:4c:2c:c0:88:52:f6:
6d:fb:5d:3b:85:66:84:ba:4d:1f:f8:24:10:ff:84:
d5:fb:8c:6e:c1:21:56:64:b3:3a:8f:86:ad:8a:15:
f3:c2:69:fc:bd:78:48:77:de:98:f9:f8:c3:ee:9a:
48:8b:8a:97:66:1b:36:45:67:64:75:b2:68:06:15:
72:07:ec:5c:f4:bd:c5:68:7b:da:13:04:3b:e2:86:
03:cc:14:8d:fe:f1:c6:cc:27:fc:75:06:5d:aa:1a:
97:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A5:DD:6D:8B:7A:BA:22:3F:13:B2:B6:63:93:50:D2:AE:C1:F8:78
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/OKXdbYt6uiI_E7K2Y5NQ0q7B-Hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.109.0/24
45.141.13.0/24
Signature Algorithm: sha256WithRSAEncryption
87:e7:b8:44:00:88:7f:f5:f1:c2:d2:48:5f:d9:e9:3c:9c:32:
28:f1:34:94:96:ee:cb:e3:e2:25:25:24:ba:08:a8:83:4e:2f:
19:e6:cd:c1:cc:19:d3:e1:5d:aa:a1:8f:0f:f6:c8:61:9b:4c:
98:3d:6b:9b:3c:59:05:39:d9:df:36:4b:17:56:24:5a:bf:89:
89:3a:b9:c4:56:91:0b:34:6c:d4:ea:e6:02:cf:7e:ad:42:92:
44:2f:ab:06:c9:cb:b0:0d:9a:e1:80:41:07:1c:e1:32:75:a9:
59:f7:b0:b0:6f:5b:5f:f6:a8:f1:d2:b2:e9:3f:83:a3:bc:f7:
b0:a7:3a:68:d4:bc:a0:7b:17:10:92:e0:a3:95:ea:a5:4b:a9:
6d:45:6f:d7:0e:04:f8:49:9c:ab:45:f5:d0:5c:9a:75:3d:9b:
33:a4:2e:d0:60:63:67:be:64:59:4a:ed:6c:a8:84:26:ff:69:
2c:29:fc:eb:f8:6a:7d:91:80:6e:96:18:8e:1d:a7:c0:5f:05:
55:02:9d:f1:8b:ce:fb:58:ed:e0:51:2c:d6:79:15:d6:c0:c0:
f5:dd:76:3c:32:cb:f1:8e:7b:ad:30:71:6a:9e:05:6e:93:fd:
84:01:c4:62:de:a2:f8:c0:5b:98:fd:43:41:bd:44:9b:cf:5f:
7d:bd:07:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:24:43 2026 by rpki-client