Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/348355-5c09-494c-b98f-c376d1f95b03/1/vOFi4vqQ941RKVxLlL--Kjz4M1Y.roa
File: vOFi4vqQ941RKVxLlL--Kjz4M1Y.roa (raw, json)
Hash identifier: NTePj0xJxi4d0cbIEQcwBmxgG0qDewsP9PpsmvJHEzA=
Subject key identifier: BC:E1:62:E2:FA:90:F7:8D:51:29:5C:4B:94:BF:BE:2A:3C:F8:33:56
Certificate issuer: /CN=05961f094a0e9c8f66828239fcc5281d8d2f8ce3
Certificate serial: 01A115C618931EB5F881F8449CD0EC1A4980
Authority key identifier: 05:96:1F:09:4A:0E:9C:8F:66:82:82:39:FC:C5:28:1D:8D:2F:8C:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZYfCUoOnI9mgoI5_MUoHY0vjOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/348355-5c09-494c-b98f-c376d1f95b03/1/vOFi4vqQ941RKVxLlL--Kjz4M1Y.roa
Signing time: Wed 07 Oct 2026 09:51:06 +0000
ROA not before: Wed 07 Oct 2026 09:51:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197842
IP address blocks: 153.56.181.0/24 maxlen: 24
159.200.234.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/348355-5c09-494c-b98f-c376d1f95b03/1/BZYfCUoOnI9mgoI5_MUoHY0vjOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/348355-5c09-494c-b98f-c376d1f95b03/1/BZYfCUoOnI9mgoI5_MUoHY0vjOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZYfCUoOnI9mgoI5_MUoHY0vjOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:c6:18:93:1e:b5:f8:81:f8:44:9c:d0:ec:1a:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05961f094a0e9c8f66828239fcc5281d8d2f8ce3
Validity
Not Before: Oct 7 09:51:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bce162e2fa90f78d51295c4b94bfbe2a3cf83356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d6:2a:f7:28:0e:e1:57:8b:e2:89:44:b2:4d:
7d:c0:c6:fd:71:9e:59:c6:51:f2:9c:f4:72:65:4f:
ce:06:73:2d:e2:0c:6d:4d:76:e8:3b:d7:bc:5c:37:
b6:52:18:86:ef:c5:2c:c8:6d:ab:f2:0d:31:ee:1e:
a6:f8:cb:88:a4:f0:9d:68:89:99:5e:ba:10:d9:d7:
8a:92:2f:5c:6b:9d:24:ac:5c:b6:00:be:34:b2:73:
b1:b3:47:8e:70:53:d3:69:02:f8:24:5c:10:56:5b:
0f:4f:8d:fb:71:ef:8c:b0:41:fa:5e:5e:6f:d2:10:
b6:74:b0:3a:16:cb:90:f6:f5:0a:ca:c9:5c:70:56:
02:a1:7a:21:17:34:e5:5d:28:64:fe:dd:00:7d:87:
e2:69:35:80:7e:e5:fc:ef:4f:61:7c:cc:b5:a5:ff:
85:ce:1e:04:64:48:08:60:6f:08:21:0f:44:cb:45:
9b:77:8b:72:0c:b3:4c:cd:fe:0d:4d:cf:3e:45:c8:
06:be:e2:26:6c:e1:04:c2:dc:b4:6f:ef:cb:8c:22:
d2:3c:97:59:bc:ed:72:ea:b5:91:63:95:ec:53:87:
98:98:fa:86:a3:e7:9c:3b:e0:e0:61:56:f5:94:60:
b7:93:fc:15:7f:57:fa:0a:c1:fe:ee:56:4a:82:19:
5b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E1:62:E2:FA:90:F7:8D:51:29:5C:4B:94:BF:BE:2A:3C:F8:33:56
X509v3 Authority Key Identifier:
keyid:05:96:1F:09:4A:0E:9C:8F:66:82:82:39:FC:C5:28:1D:8D:2F:8C:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZYfCUoOnI9mgoI5_MUoHY0vjOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/348355-5c09-494c-b98f-c376d1f95b03/1/vOFi4vqQ941RKVxLlL--Kjz4M1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/348355-5c09-494c-b98f-c376d1f95b03/1/BZYfCUoOnI9mgoI5_MUoHY0vjOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.56.181.0/24
159.200.234.0/23
Signature Algorithm: sha256WithRSAEncryption
48:93:9d:17:65:98:b8:f9:c2:9e:5a:35:00:86:98:cb:58:fd:
3d:ec:5c:c6:22:3b:ea:56:73:50:0a:34:b2:7c:b8:a3:83:a8:
0b:e0:1a:d9:dd:fb:2d:aa:00:33:c5:f6:21:c5:13:49:3d:4d:
40:c2:e9:9f:9d:ef:1b:3a:46:67:18:84:ae:09:63:0e:93:1d:
95:93:92:05:f1:25:48:32:8f:71:b7:ad:35:e4:50:72:20:88:
7e:e2:f3:90:58:2b:60:65:29:e3:8f:1e:24:92:97:a8:f7:fe:
27:10:20:20:ff:8f:2c:e7:9a:dd:83:1a:ee:ca:1d:f4:4e:05:
2b:3c:80:92:b3:37:a4:ed:05:bc:08:08:49:dd:b8:94:29:eb:
85:e2:44:19:70:cb:52:a2:eb:10:e5:b7:e4:df:cd:78:22:c7:
5d:a0:27:96:2c:74:ef:2b:dc:95:5b:97:c4:70:77:ca:e1:a9:
d5:26:22:9b:31:f8:6c:51:a5:13:7f:02:37:f9:76:77:4a:76:
1f:c4:4d:59:d2:3f:f8:bf:85:bb:9b:86:3f:75:18:25:35:94:
b8:d1:64:0c:82:89:c1:5b:79:c9:4a:ea:2a:ae:60:61:1a:96:
6a:56:ab:38:0c:df:04:3c:7c:ee:c5:c4:00:e0:ff:fb:4c:6b:
3e:e1:28:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 19:56:38 2026 by rpki-client