Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/OTfefXpqJS5N6ZeJMEPi4o2glcE.roa
File: OTfefXpqJS5N6ZeJMEPi4o2glcE.roa (raw, json)
Hash identifier: EXmrtcvCwOgf/pC8L7II//3SohUrOG6Iw5W8LXbZAkA=
Subject key identifier: 39:37:DE:7D:7A:6A:25:2E:4D:E9:97:89:30:43:E2:E2:8D:A0:95:C1
Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Certificate serial: 019EF934E851BEE54F315FD7096765DC9434
Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/OTfefXpqJS5N6ZeJMEPi4o2glcE.roa
Signing time: Wed 24 Jun 2026 10:37:34 +0000
ROA not before: Wed 24 Jun 2026 10:37:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6453
IP address blocks: 141.137.232.0/24 maxlen: 24
141.137.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:34:e8:51:be:e5:4f:31:5f:d7:09:67:65:dc:94:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Validity
Not Before: Jun 24 10:37:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3937de7d7a6a252e4de997893043e2e28da095c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fc:e2:30:cb:7b:ff:07:12:fa:a0:fb:73:ca:
e2:50:20:36:77:f1:8b:e1:18:12:1b:f4:a6:33:fe:
1f:9d:2c:53:e5:f6:60:63:dd:77:6c:01:91:5a:57:
ae:0f:a8:88:2a:d5:28:72:b1:a4:1a:81:d1:da:1f:
01:19:38:fa:27:ad:01:56:6b:a0:df:a7:d3:b6:d5:
dc:e5:e3:72:b7:68:9e:53:7b:f0:59:25:61:67:43:
c6:8a:49:ee:d6:18:af:bc:71:7a:76:da:ed:0e:26:
62:28:f8:bf:70:1a:15:46:93:a9:14:f6:14:ab:e3:
2a:62:14:8d:ce:f7:6c:cf:86:ab:5b:2b:6b:d5:51:
86:31:39:f6:46:76:b4:5d:8b:19:06:e4:57:9f:2b:
fd:01:a8:cf:00:4a:1d:4d:a2:ec:8b:31:8c:96:6e:
63:d3:dd:85:72:19:19:df:3e:73:ad:a3:27:ff:a1:
d8:4c:12:af:a5:bd:a9:37:e9:44:0e:04:18:95:3e:
41:83:42:18:a5:5d:fe:69:48:99:4e:64:b7:d1:69:
22:b5:98:6f:62:40:a6:57:48:43:28:f1:4f:5b:7a:
dd:9a:f2:cd:a8:4d:62:68:8b:76:95:24:88:10:70:
e1:56:31:56:64:e4:e1:71:eb:25:23:e0:08:43:f8:
04:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:37:DE:7D:7A:6A:25:2E:4D:E9:97:89:30:43:E2:E2:8D:A0:95:C1
X509v3 Authority Key Identifier:
keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/OTfefXpqJS5N6ZeJMEPi4o2glcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.137.232.0/23
Signature Algorithm: sha256WithRSAEncryption
86:22:ea:63:c1:15:c0:db:28:70:18:d5:e5:12:f4:ff:c4:08:
9d:3e:89:1a:0c:ae:97:37:5d:82:76:9a:8d:94:ce:b9:41:1e:
00:1b:b8:aa:6a:5e:78:05:e8:31:1d:38:d7:7e:f1:c5:4c:b6:
a0:1b:0d:48:39:ee:48:4e:1c:b1:80:98:f3:41:f6:73:ef:18:
cc:c5:51:17:40:83:1d:02:2d:2c:a9:37:fb:c5:29:46:c5:3f:
57:75:24:d8:bd:1a:af:3d:9f:b9:98:cf:28:71:ea:d5:4b:23:
34:73:fd:22:6d:a1:ce:4a:ed:4c:88:12:44:77:e6:a9:99:7a:
89:2c:28:72:a7:3a:a9:af:62:b2:f5:2b:aa:79:e0:cc:25:ac:
7f:97:c1:02:37:7b:97:34:2c:22:c0:ba:cc:41:c4:a4:a5:26:
93:21:82:a3:41:e5:ef:42:1c:48:61:d1:88:7a:ee:86:56:38:
2c:04:a4:3d:27:e5:42:84:6f:16:09:cf:51:7a:be:76:aa:3a:
55:8a:a5:9b:b6:bf:06:22:e7:0a:db:35:46:23:e2:40:a0:d4:
8b:47:d5:29:dd:48:f7:3e:39:f6:11:c2:8d:91:95:51:de:21:
2b:6a:36:ce:c6:cc:fd:23:cf:b0:60:b7:06:b1:e7:0c:af:6b:
cd:ac:36:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:21 2026 by rpki-client