Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/ooL_E33HTzn_575C0eXoXSyKU5E.roa
File: ooL_E33HTzn_575C0eXoXSyKU5E.roa (raw, json)
Hash identifier: lCWMZcae4eRiQ+kLtw1+t/M7HsNIV33pFKpLJrC3YM4=
Subject key identifier: A2:82:FF:13:7D:C7:4F:39:FF:E7:BE:42:D1:E5:E8:5D:2C:8A:53:91
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 01A14086345F13D595177D4D7A4A7BE0DE2F
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/ooL_E33HTzn_575C0eXoXSyKU5E.roa
Signing time: Thu 15 Oct 2026 17:04:59 +0000
ROA not before: Thu 15 Oct 2026 17:04:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26548
IP address blocks: 107.161.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:86:34:5f:13:d5:95:17:7d:4d:7a:4a:7b:e0:de:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Oct 15 17:04:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a282ff137dc74f39ffe7be42d1e5e85d2c8a5391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e4:0c:16:0d:e5:60:44:01:d3:a5:54:5f:68:
d0:d6:36:3c:6d:3d:52:74:0b:86:2e:dd:f7:1b:9c:
4d:1a:05:1a:ec:83:44:88:1b:b8:4c:ec:d3:72:bb:
88:e4:02:ac:35:a9:27:71:df:89:d4:3a:38:73:8a:
cf:ea:6e:54:85:16:25:ea:c2:ce:45:35:a2:2d:bc:
77:9e:71:ea:0e:d1:e8:04:f8:8f:b5:30:1e:67:a2:
f0:83:a3:4d:1f:fe:b8:1e:7d:f0:bd:04:66:88:97:
f7:f7:7f:d7:94:e6:72:d2:bb:c0:97:51:1d:06:28:
11:09:55:5d:58:aa:42:a5:ba:65:3e:c2:f8:1a:cc:
3e:cc:7e:ab:d9:03:a2:02:30:32:4a:3b:2b:63:4e:
81:e0:0f:cf:da:7e:2c:31:85:7c:09:a5:d8:25:8d:
e6:e0:03:18:02:45:c8:19:4d:1f:7a:f6:6f:cb:8a:
06:85:72:44:38:92:08:be:e0:4c:8e:e1:8b:3e:c6:
40:39:31:ae:9e:83:7d:72:18:71:e2:0c:29:c5:a2:
91:12:8a:88:de:e9:60:a8:34:49:56:f0:e0:c2:f0:
67:33:5c:6a:37:f5:4b:e5:20:4a:e0:16:66:fa:2c:
61:bb:f9:a5:16:07:54:cb:87:2c:92:b8:a0:2a:58:
62:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:82:FF:13:7D:C7:4F:39:FF:E7:BE:42:D1:E5:E8:5D:2C:8A:53:91
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/ooL_E33HTzn_575C0eXoXSyKU5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.161.161.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:e1:72:c8:d6:ae:70:31:25:76:25:cc:4f:5c:db:b9:c6:72:
a4:b1:67:ff:07:b9:24:4c:d2:3a:53:52:1d:18:76:e0:93:fc:
e5:b3:6a:54:7e:5d:a6:52:50:08:b1:87:e8:f3:9b:9d:92:b0:
59:69:5e:7b:98:b3:b8:25:f2:b8:52:39:ba:7a:b5:4e:e9:df:
a3:2a:bc:79:b6:63:81:e6:62:2b:70:2e:a9:53:9d:92:4c:30:
c3:33:5d:e8:95:be:46:28:70:7d:a7:6d:c3:f3:cd:9c:41:c2:
1d:4e:40:e8:06:37:18:d1:dc:27:3b:fa:d6:0f:16:06:f6:66:
ad:7e:11:d2:a8:1d:be:c5:7e:61:a3:df:b6:24:ae:8e:68:48:
52:53:6d:57:7e:61:e0:84:77:ba:ef:d2:76:16:7a:d7:7d:fd:
88:3e:f3:77:27:80:43:c5:e3:86:37:05:95:4d:fb:71:7b:76:
3a:df:dd:18:15:1b:90:6d:17:9a:66:c5:8f:a0:33:96:11:3c:
36:d0:24:76:7e:40:d2:63:dd:f8:58:07:0e:da:de:f8:18:d6:
0d:17:37:3f:65:a1:f1:8c:8a:4e:85:53:71:a4:03:b1:33:51:
05:29:97:5f:40:3f:d2:65:46:ab:02:f7:e3:7f:2b:7c:9d:9b:
c1:15:eb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 09:18:53 2026 by rpki-client