Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/oBRUutA6byhNeTmrVOiHF4FKuEA.roa
File: oBRUutA6byhNeTmrVOiHF4FKuEA.roa (raw, json)
Hash identifier: BxEFGzjC/CLdAB2QyMLqY/rO8FKIx9NVWUkiqzsHO88=
Subject key identifier: A0:14:54:BA:D0:3A:6F:28:4D:79:39:AB:54:E8:87:17:81:4A:B8:40
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0198A47D800D2FB1ED104AFFC062547ADA7E
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/oBRUutA6byhNeTmrVOiHF4FKuEA.roa
Signing time: Wed 13 Aug 2025 17:32:24 +0000
ROA not before: Wed 13 Aug 2025 17:32:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133219
IP address blocks: 45.147.6.0/24 maxlen: 24
194.15.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a4:7d:80:0d:2f:b1:ed:10:4a:ff:c0:62:54:7a:da:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Aug 13 17:32:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a01454bad03a6f284d7939ab54e88717814ab840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8e:42:46:da:93:7a:bd:5f:ac:e9:19:4d:57:
87:a8:61:dd:e4:85:91:ca:65:ed:6d:d3:d0:e1:0a:
67:53:82:34:8b:37:38:25:a6:f7:98:5b:de:4b:39:
b4:40:65:d9:e1:77:d3:0d:7f:44:f1:11:a2:4e:49:
f3:3e:f9:59:b7:f6:33:84:92:9a:2a:ba:ca:d0:bf:
a7:86:99:d5:ec:a2:06:d2:a5:1a:82:6e:57:05:65:
ea:f7:1c:e8:63:4f:aa:11:8e:e9:ef:11:c9:08:bf:
e9:7c:92:7c:f6:84:27:f4:09:83:db:12:b7:c9:c5:
30:87:49:46:d0:7b:cb:67:7c:68:0f:d6:84:43:d2:
46:33:01:52:56:ca:43:56:40:cb:c5:da:d5:41:e2:
3d:a3:b6:a0:a6:54:74:cf:da:4b:b6:b5:16:67:b5:
9a:fe:4e:0c:14:fe:d7:0a:2d:9b:48:01:92:7d:52:
42:30:23:85:1b:3f:14:f6:ff:98:e8:13:95:83:35:
8a:e0:8c:4d:a7:9d:f0:b3:d0:ef:34:14:93:00:d9:
18:f3:46:18:75:8b:89:f6:77:23:55:5c:ed:39:d2:
44:9c:a6:9e:e2:33:5b:f1:d8:65:8d:9c:ae:a0:52:
01:3a:7f:7a:44:db:18:ab:71:7a:31:3b:3b:5e:90:
c9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:14:54:BA:D0:3A:6F:28:4D:79:39:AB:54:E8:87:17:81:4A:B8:40
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/oBRUutA6byhNeTmrVOiHF4FKuEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.6.0/24
194.15.39.0/24
Signature Algorithm: sha256WithRSAEncryption
56:9e:c2:80:7f:83:65:fc:bf:4c:a7:d8:75:06:04:36:fd:6b:
fc:3e:39:bf:4c:f0:16:8b:bc:ef:5e:f2:af:bd:e6:a8:1c:58:
92:45:ca:fd:ab:ea:41:94:dc:05:22:ad:3b:68:f4:76:23:1e:
b9:d8:29:8d:b0:fd:b8:f8:87:4f:9e:d8:62:db:e1:29:10:74:
62:6a:7e:ff:b0:d7:32:f0:e0:73:8e:7e:dc:f6:ac:3d:13:32:
bf:67:a9:b6:23:6c:b1:50:a1:19:17:d7:9a:c5:4e:c8:29:c7:
b9:c3:06:9e:4a:7a:ec:56:67:1f:c6:f2:2c:9d:51:dc:35:7e:
bf:64:b0:9a:80:fd:44:11:7f:3a:e6:8d:22:80:ea:01:8c:43:
be:54:7d:52:84:f0:4d:92:20:1a:6f:74:b1:32:90:28:eb:42:
09:26:01:27:26:63:1e:fd:f4:7e:d8:1f:b6:9d:4a:ad:8f:b5:
8f:b7:b5:85:c4:20:91:a8:14:ba:03:39:47:c6:70:6a:f3:55:
ab:46:52:75:df:34:fb:cd:73:e5:83:6e:ae:31:ed:8a:c8:8a:
7f:b5:dd:11:24:91:f2:50:46:d4:7f:02:73:82:03:93:63:1d:
ef:93:fa:78:54:63:c4:94:b6:ec:df:99:75:40:a9:8c:54:5e:
17:20:61:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:06:07 2025 by rpki-client