Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/OTLEUpb0Lh4TIiObS90hrL2Pu14.roa
File: OTLEUpb0Lh4TIiObS90hrL2Pu14.roa (raw, json)
Hash identifier: F0CitYXSap1fCHzjNOe2cEZar7gVTEIwqHcXaHjMMUY=
Subject key identifier: 39:32:C4:52:96:F4:2E:1E:13:22:23:9B:4B:DD:21:AC:BD:8F:BB:5E
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 019E6D3BF9479366F5376FCB0AAE0DD617AF
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/OTLEUpb0Lh4TIiObS90hrL2Pu14.roa
Signing time: Thu 28 May 2026 06:18:27 +0000
ROA not before: Thu 28 May 2026 06:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 216.195.216.0/22 maxlen: 24
216.195.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6d:3b:f9:47:93:66:f5:37:6f:cb:0a:ae:0d:d6:17:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: May 28 06:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3932c45296f42e1e1322239b4bdd21acbd8fbb5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2d:2c:b0:e5:76:a3:56:55:f0:68:f8:c9:fc:
b7:44:7a:0c:cd:5e:95:61:40:a6:18:76:94:ba:f2:
5d:45:7f:8d:7a:6c:c1:a7:7e:89:2a:2b:95:b1:55:
4a:e0:c8:99:46:1e:ac:d2:0c:6c:67:b5:7c:0d:7d:
f6:3e:38:3e:97:2c:4a:c0:5a:46:4a:08:06:ac:7d:
2b:9b:f4:ad:5b:1d:68:db:fc:f3:fe:a0:31:a7:c8:
8d:b2:1b:c4:92:21:44:41:e8:7f:28:bb:bf:a4:85:
b5:58:b9:60:0e:45:9a:df:76:4d:ec:b6:e9:b7:12:
84:67:a5:0e:3b:0b:a5:2e:a5:6c:ff:30:92:c4:79:
2f:0a:94:11:3d:0b:ad:67:b8:76:34:a0:53:93:49:
15:c1:fe:33:24:5a:28:df:fc:60:5c:ac:98:48:dd:
86:1d:fb:36:ef:a9:56:0d:53:c5:15:6e:cf:bf:15:
0d:e1:8a:6e:a9:5b:96:38:e5:87:2f:73:53:f7:a8:
6d:4c:cf:ae:39:1c:9e:44:88:db:b2:c2:bd:d8:3c:
1a:c3:b0:f0:c0:f7:ed:41:8e:24:c6:92:83:96:e1:
69:79:c5:48:ef:f3:9b:44:12:a3:9d:79:e4:15:5d:
ea:ab:43:a3:84:08:e0:c6:59:d1:90:cc:a0:68:3c:
fd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:32:C4:52:96:F4:2E:1E:13:22:23:9B:4B:DD:21:AC:BD:8F:BB:5E
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/OTLEUpb0Lh4TIiObS90hrL2Pu14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.195.216.0-216.195.220.255
Signature Algorithm: sha256WithRSAEncryption
59:06:c1:79:ce:70:84:27:65:29:a4:11:e4:76:b5:bb:d4:2a:
09:5f:3c:de:b1:fc:53:17:a4:bd:39:de:ca:3a:e3:db:2f:33:
a0:99:d6:0f:4a:f4:88:47:9d:8e:46:56:3e:78:78:4c:c9:21:
39:ed:a8:d0:1e:86:51:36:80:f5:86:c8:76:04:92:1f:72:34:
7a:e9:2c:3d:85:c6:2e:49:53:c7:f0:33:d6:0e:f7:0d:93:fe:
2d:0b:83:dd:99:f7:94:be:44:d6:ff:40:c7:ed:59:97:b4:d2:
25:50:f8:56:55:82:cb:af:0f:9f:e8:7f:d0:76:24:70:43:1b:
a3:1a:03:02:9d:a3:96:7f:f3:61:9e:36:75:fc:ff:7c:b3:e4:
37:07:5f:b7:b7:83:6b:55:23:35:05:fb:c6:0f:ba:69:d5:1c:
ff:2f:ea:16:df:6a:ff:88:6c:53:e9:f4:1e:5e:9d:cc:d6:95:
0d:cb:e5:ba:0e:de:74:6e:6c:85:2d:40:0d:23:85:43:87:13:
82:7a:41:b1:ac:f6:73:3a:62:2b:1f:e2:5e:4b:97:c6:22:d9:
52:3c:e5:d8:0b:84:af:e9:c4:44:60:4d:f2:64:96:e9:14:9e:
6d:39:17:e3:43:4a:f5:9e:2f:b9:86:fe:67:c1:34:a3:a7:56:
57:e4:96:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:21:43 2026 by rpki-client