Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/OLvoqpf3W79jvjtnPnf-r7FiUAQ.roa
File: OLvoqpf3W79jvjtnPnf-r7FiUAQ.roa (raw, json)
Hash identifier: /I95rYWv2Wk9WQ2CoO2shPPFk/KikGoC6xEfeQs+E4E=
Subject key identifier: 38:BB:E8:AA:97:F7:5B:BF:63:BE:3B:67:3E:77:FE:AF:B1:62:50:04
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0199A973327A550D948F085C9FB04485349E
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/OLvoqpf3W79jvjtnPnf-r7FiUAQ.roa
Signing time: Fri 03 Oct 2025 09:42:03 +0000
ROA not before: Fri 03 Oct 2025 09:42:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201670
IP address blocks: 2a0c:b641:3a0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a9:73:32:7a:55:0d:94:8f:08:5c:9f:b0:44:85:34:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Oct 3 09:42:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38bbe8aa97f75bbf63be3b673e77feafb1625004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:75:88:47:60:76:c2:94:bf:57:fc:7c:55:b8:
d4:0b:90:4c:ac:7a:7b:7d:74:49:a6:c6:06:ae:c8:
6d:b3:7d:c7:3b:f9:0e:57:e9:e0:1c:3e:d5:23:42:
dd:c1:92:4d:2e:5f:5f:16:2d:2f:cb:02:20:06:a7:
c5:54:9d:00:c0:6f:2d:07:a7:ee:ae:6e:4e:f8:7c:
6d:e1:ca:ad:0b:29:0d:85:79:d3:70:37:ed:5b:fa:
37:73:85:ec:63:f0:93:63:31:ef:d6:fd:53:94:96:
d3:fc:6d:eb:2e:a8:50:b6:0b:7e:0b:85:9c:8f:41:
cd:d3:95:0b:f5:97:6d:a6:63:f1:1b:8a:d1:bc:c2:
ff:e3:7e:eb:a5:ff:1b:af:6e:2a:8d:bb:62:ab:e4:
81:d3:ec:85:5d:38:58:03:e0:f8:82:12:05:7f:bc:
e3:cb:3e:4d:57:17:8f:e6:13:41:39:fe:1f:ab:0d:
d1:12:31:b0:51:16:b5:a8:2d:ff:16:35:ad:ec:f1:
3a:8e:9a:75:e9:db:22:8e:1e:07:94:a1:e9:ca:41:
c3:4c:ad:4b:9d:ff:6f:a8:fd:c8:ad:bd:51:82:5a:
52:34:35:14:55:9f:c3:5e:cd:5f:ac:fb:e6:c4:3d:
f7:c1:27:9b:9b:3a:a9:88:6e:6d:cf:6c:37:64:ae:
ba:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BB:E8:AA:97:F7:5B:BF:63:BE:3B:67:3E:77:FE:AF:B1:62:50:04
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/OLvoqpf3W79jvjtnPnf-r7FiUAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:3a0::/44
Signature Algorithm: sha256WithRSAEncryption
96:a7:d8:af:cc:e3:5d:d4:4a:08:fb:e6:90:b2:f9:79:fc:dc:
20:83:0a:da:56:b4:40:a9:69:f7:75:d9:ac:53:3c:9b:83:0f:
80:0f:3c:35:85:70:b0:42:db:65:cc:1f:7a:06:ce:38:59:98:
f2:d4:df:0e:72:16:9c:f3:8d:49:d3:29:29:23:8d:f6:c6:aa:
3f:59:d0:5f:90:7d:99:15:19:00:c2:8c:98:3a:09:e7:94:ff:
cb:d4:f4:06:40:10:6e:af:04:65:6c:fe:7b:1f:11:33:a4:40:
02:03:d3:24:5f:b9:96:ce:90:a2:5c:97:8d:91:61:54:d8:d9:
4d:47:f2:8f:26:35:f9:41:cd:0f:25:68:31:c1:fe:6d:32:b7:
7b:ca:87:85:10:d0:94:7a:b3:8f:fc:01:39:1d:6f:2a:48:e2:
e9:bb:7e:d1:91:4f:a4:76:e2:21:6d:a0:ca:0e:24:b1:5a:b0:
ba:6d:89:31:14:b3:09:66:01:a9:ca:33:44:64:d5:0f:ec:40:
4e:32:fc:cb:01:6c:5e:f3:6b:85:50:d8:dc:d5:46:9b:3e:fb:
64:ed:7a:bd:a7:d7:af:a6:22:85:57:a6:6d:6c:56:ba:20:09:
40:ea:63:9d:d1:69:a8:fb:73:7c:c9:65:f5:87:e7:27:19:f5:
44:9d:b1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:50:34 2025 by rpki-client