Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/ojQylV1In9b_cmWbkErVQtX_c0g.roa
File: ojQylV1In9b_cmWbkErVQtX_c0g.roa (raw, json)
Hash identifier: yXdKShEv9gKUMmqT53345vY7rE9y/T/S4WodyMW0wT4=
Subject key identifier: A2:34:32:95:5D:48:9F:D6:FF:72:65:9B:90:4A:D5:42:D5:FF:73:48
Certificate issuer: /CN=039e97e33d67c7e2950028a941e5bd0db26657fd
Certificate serial: 019FDBC35910250E01431A49D9E1B866799C
Authority key identifier: 03:9E:97:E3:3D:67:C7:E2:95:00:28:A9:41:E5:BD:0D:B2:66:57:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A56X4z1nx-KVACipQeW9DbJmV_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/ojQylV1In9b_cmWbkErVQtX_c0g.roa
Signing time: Fri 07 Aug 2026 10:27:20 +0000
ROA not before: Fri 07 Aug 2026 10:27:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 137.44.124.0/23 maxlen: 23
2a13:49c0:fff0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/A56X4z1nx-KVACipQeW9DbJmV_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 19:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:db:c3:59:10:25:0e:01:43:1a:49:d9:e1:b8:66:79:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039e97e33d67c7e2950028a941e5bd0db26657fd
Validity
Not Before: Aug 7 10:27:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a23432955d489fd6ff72659b904ad542d5ff7348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0c:d9:2e:a8:9a:2a:56:ed:ce:f3:bc:c7:28:
1a:26:e8:19:be:e7:8e:f1:e4:60:6c:b5:fc:b4:9f:
f8:8e:ba:71:cf:fd:0e:b2:65:2a:e9:76:20:01:a8:
67:11:be:ad:d5:8c:28:c6:49:71:44:bc:ff:5d:9d:
4d:04:6c:38:a5:91:a2:2e:d9:a6:5f:63:fc:bf:be:
06:d0:7a:5c:91:9f:26:b2:25:41:63:17:98:97:00:
f7:cd:0b:72:00:4b:69:3a:ee:4d:fa:69:dd:eb:d2:
0b:92:88:7f:7a:8a:de:96:5c:14:49:16:b5:e0:fd:
a8:be:46:70:d5:4d:94:53:22:fa:03:3b:db:78:eb:
e6:63:e5:d6:e0:19:46:d0:fc:2b:3f:d7:20:c5:f8:
2f:3a:4e:42:08:24:f3:19:81:8a:81:f8:f0:1d:e7:
e7:b9:b0:5f:00:b0:d7:42:48:70:f2:bb:1e:b3:f3:
bb:35:f4:3d:36:c0:28:34:dd:3c:00:ed:0a:0e:2c:
ab:76:c4:87:f9:de:d6:fb:33:64:98:bd:fa:e7:cf:
26:fc:2d:36:22:11:d0:2a:57:90:d7:f5:12:b5:73:
13:c5:22:d0:3f:70:55:70:c8:04:52:42:d6:1d:72:
ff:65:bd:d9:0b:94:c6:51:ae:b6:c4:f9:a9:44:48:
dc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:34:32:95:5D:48:9F:D6:FF:72:65:9B:90:4A:D5:42:D5:FF:73:48
X509v3 Authority Key Identifier:
keyid:03:9E:97:E3:3D:67:C7:E2:95:00:28:A9:41:E5:BD:0D:B2:66:57:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A56X4z1nx-KVACipQeW9DbJmV_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/ojQylV1In9b_cmWbkErVQtX_c0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.44.124.0/23
IPv6:
2a13:49c0:fff0::/48
Signature Algorithm: sha256WithRSAEncryption
46:c5:27:32:46:60:49:63:20:a6:e8:be:3f:25:59:3e:0b:56:
d6:1c:7e:69:c1:f0:4d:92:2a:3c:c9:a7:c0:03:1b:29:0d:42:
c1:13:3b:b4:df:61:2a:f4:03:55:17:f9:11:e2:dc:73:59:6b:
7b:a2:c7:35:50:98:15:17:da:8c:1b:81:ba:b8:77:c3:a8:8e:
55:ac:5b:0e:14:d0:43:ac:29:81:68:06:6c:f3:b7:40:f2:b9:
06:4a:b5:9d:dc:59:0e:f1:a8:45:e1:86:6d:25:4c:f2:bf:8d:
a9:b5:b7:c8:83:d1:7e:f6:dd:fd:f2:fd:8a:df:82:ab:b2:75:
dc:fb:11:80:da:a4:9b:51:33:af:2c:e3:0a:15:16:bb:71:06:
f2:b5:55:71:23:5a:1d:a4:2c:c5:74:5e:ff:3b:37:4b:ab:3e:
3a:43:04:c1:7c:ba:ed:a1:a5:30:a8:fd:60:fc:f0:3b:7c:d4:
97:b7:d7:b6:1c:57:16:69:17:6a:f7:67:7b:0c:7b:36:0d:35:
2c:9c:99:e6:57:41:e9:7f:04:bb:03:b9:d6:a3:f5:a9:f1:9e:
32:62:2c:ea:6a:58:47:ea:b1:ed:98:01:63:5d:2c:82:b9:2f:
1d:57:6b:01:ee:90:10:03:79:67:fc:b7:f7:d7:76:4d:6d:d6:
54:5e:49:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:47:58 2026 by rpki-client