Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/OCppJhYZMyX6DOiNlHQEp5iC5Sc.roa
File: OCppJhYZMyX6DOiNlHQEp5iC5Sc.roa (raw, json)
Hash identifier: 5wyl6ad1af6VUZiYn8oNG7NUkEBKw7TV7cvjfjqNGSY=
Subject key identifier: 38:2A:69:26:16:19:33:25:FA:0C:E8:8D:94:74:04:A7:98:82:E5:27
Certificate issuer: /CN=bfac971076263bddb0eecf5bea6574a405b985de
Certificate serial: 0199E6511724DDB34970806BBB629696A9EC
Authority key identifier: BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/OCppJhYZMyX6DOiNlHQEp5iC5Sc.roa
Signing time: Wed 15 Oct 2025 05:21:37 +0000
ROA not before: Wed 15 Oct 2025 05:21:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213636
IP address blocks: 80.244.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e6:51:17:24:dd:b3:49:70:80:6b:bb:62:96:96:a9:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfac971076263bddb0eecf5bea6574a405b985de
Validity
Not Before: Oct 15 05:21:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=382a692616193325fa0ce88d947404a79882e527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:31:02:b9:e4:52:cd:54:20:11:a5:6c:fb:33:
94:6b:4f:ad:4f:07:bb:46:b1:c8:85:9f:b9:11:24:
44:77:9a:04:77:72:ac:b5:50:a8:44:6a:fd:14:8c:
51:51:e1:fa:8c:33:99:38:c3:c1:e4:39:0f:98:ac:
1c:b0:b8:32:d4:35:70:84:0b:4d:da:98:d8:94:f3:
a3:ab:0f:07:ef:b4:0c:a1:ee:41:1b:8a:6e:cf:bb:
3a:a0:c9:51:10:37:05:c3:4a:22:4f:d7:e7:ed:2c:
56:98:49:ea:cb:da:c0:16:b5:b8:9d:3c:07:db:71:
6f:39:0a:c9:7d:b7:64:88:a6:b3:10:f2:d5:43:d7:
74:4a:82:77:3c:e2:fa:4c:ea:b8:be:76:e7:4d:bf:
4b:23:d6:a3:ec:f9:2f:d9:0b:e0:09:66:43:d4:11:
63:65:33:2d:b8:ea:fe:ac:33:93:85:b4:e1:a7:a9:
40:71:d6:f0:ea:57:fb:22:bd:9e:56:52:09:0d:e1:
36:61:49:02:09:a6:d4:de:ae:10:89:5d:90:ef:70:
13:e3:82:83:5e:41:a8:f3:62:3e:47:27:20:6a:f8:
d0:cd:a7:62:fe:d9:99:26:7a:ba:c9:44:db:b6:85:
10:62:6d:f0:24:4e:f3:ca:77:39:87:dd:56:43:f1:
82:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2A:69:26:16:19:33:25:FA:0C:E8:8D:94:74:04:A7:98:82:E5:27
X509v3 Authority Key Identifier:
keyid:BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/OCppJhYZMyX6DOiNlHQEp5iC5Sc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.13.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:41:d3:b7:19:9e:db:46:d3:79:f8:7d:ff:72:c2:f3:44:27:
1d:5a:cf:f1:ef:2a:53:1b:00:dc:93:7f:16:19:92:34:a4:e8:
80:4e:01:f8:c1:4a:d3:cb:62:07:37:58:67:42:d8:be:0f:a5:
87:54:3e:74:35:bc:22:95:39:68:60:dd:f4:c2:ec:21:93:28:
d8:04:e2:b4:37:2b:41:e8:1e:a3:5a:38:5a:ab:cc:97:56:d5:
0b:8b:75:09:f0:f4:83:fe:ba:35:80:ad:9a:f7:33:64:90:01:
81:c1:0f:c1:90:f5:a8:80:4d:6a:18:bc:d8:26:49:ad:84:87:
e4:88:bd:65:02:08:4c:b2:79:9c:59:41:f1:42:59:3a:44:3f:
fe:1e:4e:f8:2a:c6:7c:67:51:fc:ba:c5:df:91:06:27:2e:68:
95:8a:a5:78:b1:f9:38:e6:84:ad:91:f9:c7:36:b3:5c:c7:76:
04:35:e5:84:f6:f2:50:98:18:ef:1e:23:3a:c2:14:30:80:98:
50:0e:4a:ea:29:91:dc:ca:8a:ad:d4:c6:41:16:f0:6b:4c:e8:
8c:e2:c3:2a:b0:8b:46:cf:8c:89:85:d9:43:9d:e3:d3:7c:12:
eb:84:b3:ad:8b:e6:64:0b:48:fa:76:37:45:dc:fe:e8:89:49:
a0:48:4f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:09:03 2025 by rpki-client