Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/bOGK-i6sQG7WCHvE4FXVJT58zlU.roa
File: bOGK-i6sQG7WCHvE4FXVJT58zlU.roa (raw, json)
Hash identifier: tayfvyx217Xws5KJCeCymFPS0aqS71FkBV3qyWTO9JA=
Subject key identifier: 6C:E1:8A:FA:2E:AC:40:6E:D6:08:7B:C4:E0:55:D5:25:3E:7C:CE:55
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 019CEBDD8753B3991D1518CA165E11F0C961
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/bOGK-i6sQG7WCHvE4FXVJT58zlU.roa
Signing time: Sat 14 Mar 2026 10:21:29 +0000
ROA not before: Sat 14 Mar 2026 10:21:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200239
IP address blocks: 132.243.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:eb:dd:87:53:b3:99:1d:15:18:ca:16:5e:11:f0:c9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Mar 14 10:21:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ce18afa2eac406ed6087bc4e055d5253e7cce55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:09:b7:80:fe:20:06:44:35:1b:40:f0:97:00:
ea:6b:ba:3e:af:50:26:3f:92:eb:c0:e7:47:ec:dc:
e6:2d:51:18:c1:92:f9:0f:bc:13:df:82:85:d0:25:
17:a2:fa:54:6a:94:51:c8:77:d3:44:4c:29:17:03:
a2:23:15:1a:b3:b0:99:7a:2e:f8:14:1b:3c:bf:c1:
dd:51:cb:bc:ed:d7:af:51:91:4b:9d:83:fc:c4:0c:
54:48:99:d0:c3:b0:82:e9:5d:26:7f:ac:5f:4a:7f:
57:5e:07:98:fe:32:66:58:05:49:df:17:be:b1:d3:
86:e8:fa:d1:a1:92:de:b9:f0:09:65:af:0c:09:00:
f5:83:64:7d:4d:36:a1:4e:b7:91:b9:3a:76:9d:6b:
04:b5:65:90:48:b1:eb:81:91:61:43:b1:40:bf:51:
a9:57:fe:a6:9e:f0:97:50:b3:cb:f8:57:20:e2:d2:
6b:10:bb:88:30:70:c5:c3:a1:18:7e:fb:6c:6f:16:
4c:7a:bc:0c:de:61:b0:ca:67:78:e9:b2:fa:67:21:
ad:ac:ba:b2:c1:8d:cd:83:94:9e:89:40:0d:94:5a:
62:41:c2:7e:6b:b3:7e:99:8d:fe:42:d3:47:98:7e:
b9:9f:c9:e4:db:97:fb:c4:a6:8f:78:e2:d9:21:bb:
69:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E1:8A:FA:2E:AC:40:6E:D6:08:7B:C4:E0:55:D5:25:3E:7C:CE:55
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/bOGK-i6sQG7WCHvE4FXVJT58zlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.243.196.0/24
Signature Algorithm: sha256WithRSAEncryption
55:e4:a2:f3:66:8d:ec:2a:5f:41:29:be:89:b8:9e:c0:13:f8:
7c:2f:a2:ef:68:20:a0:8e:fe:ef:86:89:7f:8d:3a:13:66:17:
b6:cd:89:29:fb:74:c4:98:01:f8:dd:df:01:1a:63:f0:ee:69:
24:74:37:c0:9a:c5:fe:5f:0b:d7:86:ea:97:e6:ce:40:76:59:
b7:ca:41:99:f5:0f:fa:1d:19:fa:50:50:ff:34:66:01:dd:88:
cc:e3:39:c8:b8:0c:24:ce:5c:2a:7d:94:02:10:85:ab:5a:53:
2f:2a:ea:cc:6a:e8:47:1d:4e:bf:eb:01:0a:70:90:66:7a:18:
ff:a8:93:8c:b4:ca:81:b4:0d:e8:20:cf:43:a8:c1:60:2a:44:
92:7f:73:9a:43:49:8c:27:8b:9c:8e:d3:74:af:50:f4:7f:27:
86:86:28:d3:ed:e6:26:30:d4:26:7d:d5:b6:1b:b4:74:bd:aa:
73:af:cb:08:22:f0:41:8a:c7:3c:49:da:bd:9f:4b:83:80:37:
b1:39:e8:24:95:73:65:1a:e9:b5:bb:a6:cd:47:5a:63:2c:68:
8d:55:4b:d8:d9:7a:c9:17:34:47:74:8d:1f:35:25:fc:0d:7b:
8c:c9:3a:47:e6:dc:ed:59:38:64:93:ce:ee:b0:b3:50:14:02:
2d:53:49:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 17:16:30 2026 by rpki-client