Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/OpajlkHDpon19U18ggG9FFwUI1g.roa
File: OpajlkHDpon19U18ggG9FFwUI1g.roa (raw, json)
Hash identifier: 0NgRgCohtRVsBoGKPeoUvEb9hb3CRPChTkYpBTFVDQM=
Subject key identifier: 3A:96:A3:96:41:C3:A6:89:F5:F5:4D:7C:82:01:BD:14:5C:14:23:58
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019CBE1892C4C01A89A1CF89996EE6BF7103
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/OpajlkHDpon19U18ggG9FFwUI1g.roa
Signing time: Thu 05 Mar 2026 13:03:27 +0000
ROA not before: Thu 05 Mar 2026 13:03:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200367
IP address blocks: 45.43.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:be:18:92:c4:c0:1a:89:a1:cf:89:99:6e:e6:bf:71:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Mar 5 13:03:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a96a39641c3a689f5f54d7c8201bd145c142358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:53:70:1a:c3:3a:64:91:9e:6f:3f:d7:50:f5:
bf:ba:ba:c2:bb:82:06:f1:bf:c3:fa:9a:9d:8c:f2:
29:f9:38:95:c4:8a:a8:ef:6b:dc:43:a0:1d:6b:68:
6d:0d:77:c4:b9:98:57:5f:a1:e9:9b:65:8c:4e:19:
69:71:6a:51:a7:d2:1a:74:cc:95:54:b4:68:39:60:
4a:ec:74:07:f9:d5:08:a2:91:19:15:e7:64:4e:ab:
1f:f5:68:2b:27:ac:3e:50:7d:a2:28:df:3d:22:39:
e0:2e:61:99:a8:74:4d:49:bb:0c:cf:2d:2f:2b:23:
54:40:c1:38:8d:2a:2f:30:af:db:2e:76:4f:73:21:
50:23:92:34:37:ad:e2:fb:8f:bc:a2:93:cd:5c:4d:
10:ab:7a:21:ca:6c:ae:d2:cb:46:93:87:6b:c1:92:
3a:e1:8d:24:50:49:01:d3:c2:14:fc:b2:53:a1:33:
65:4f:89:8f:2f:bc:72:bc:fa:af:5a:89:f3:03:ff:
60:e9:ea:78:14:14:b0:80:5d:bc:6b:97:55:71:d7:
7d:bb:25:aa:60:31:09:67:73:b3:5e:93:ce:c3:02:
6e:e3:01:be:79:4a:03:38:33:db:17:87:bf:56:3f:
05:06:d2:ac:8b:a7:b5:75:ed:32:65:09:19:a4:2e:
86:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:96:A3:96:41:C3:A6:89:F5:F5:4D:7C:82:01:BD:14:5C:14:23:58
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/OpajlkHDpon19U18ggG9FFwUI1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.149.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:b8:65:1a:80:86:7f:38:a1:f8:db:33:2a:07:43:99:7c:42:
f9:f4:19:dc:da:9a:42:55:28:77:1d:aa:7e:cf:94:af:6d:d3:
27:8d:d0:b8:d5:65:5b:a3:7f:cb:c2:e5:91:c3:1b:cd:4c:1f:
db:ff:a7:fa:c5:02:7d:30:4e:54:cf:58:a3:79:d7:ba:ca:ce:
d4:d3:54:b9:76:10:43:6e:3e:3a:32:73:6c:31:4f:11:01:c2:
d2:bf:0c:35:78:4d:4e:4f:5d:0d:01:34:5f:3c:0b:db:23:01:
55:bd:66:d9:25:ee:b2:4e:6e:34:b1:06:93:05:07:5c:3e:6a:
78:0f:13:e9:24:63:0b:f0:b1:3b:c4:2e:9a:b8:48:d3:73:8e:
af:52:12:41:54:8a:47:cf:de:04:dd:da:fb:30:2c:e9:d8:01:
7e:f7:3a:b2:32:9a:ef:03:e8:a8:85:e9:7c:4f:98:96:79:29:
c5:b3:9b:71:bd:aa:46:af:ee:84:36:46:be:f9:3d:17:45:ad:
20:13:f4:c4:f1:d8:b1:ae:b1:20:a4:b0:4d:7a:65:cd:f8:80:
d8:22:bc:b3:f7:c6:0f:ad:b0:e9:9a:67:a1:1b:03:f5:17:8f:
25:c0:cc:75:88:41:df:15:bf:25:ee:7d:f4:ec:c1:9e:d7:af:
85:41:8c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 01:10:13 2026 by rpki-client