Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/olrnyQQfOhnKpr2co2Em_3dR--o.roa
File: olrnyQQfOhnKpr2co2Em_3dR--o.roa (raw, json)
Hash identifier: rp8wShqRa1Zo54SX2Szk+upU5GSFmN+Gac4fff3lsc4=
Subject key identifier: A2:5A:E7:C9:04:1F:3A:19:CA:A6:BD:9C:A3:61:26:FF:77:51:FB:EA
Certificate issuer: /CN=f464605eaf14b8b5d28ee8d076c1e3738f758253
Certificate serial: 0199A6CAF47E0702A2EB129CB494429A096F
Authority key identifier: F4:64:60:5E:AF:14:B8:B5:D2:8E:E8:D0:76:C1:E3:73:8F:75:82:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/olrnyQQfOhnKpr2co2Em_3dR--o.roa
Signing time: Thu 02 Oct 2025 21:19:02 +0000
ROA not before: Thu 02 Oct 2025 21:19:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64396
IP address blocks: 2001:678:f34::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a6:ca:f4:7e:07:02:a2:eb:12:9c:b4:94:42:9a:09:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f464605eaf14b8b5d28ee8d076c1e3738f758253
Validity
Not Before: Oct 2 21:19:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a25ae7c9041f3a19caa6bd9ca36126ff7751fbea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5d:e2:8c:1e:47:82:4b:24:af:ee:5f:ff:77:
49:ad:dd:dc:08:dc:b7:33:fc:38:58:18:01:17:2b:
9d:89:34:7a:72:20:97:3a:2a:00:cf:90:7f:25:12:
97:33:e6:73:13:83:0c:e8:b0:0f:cd:f2:72:48:d1:
53:db:41:2f:4a:a0:35:4d:85:28:11:3d:8c:5c:67:
0d:45:38:41:59:13:1f:cb:a9:3b:65:d7:d8:b5:57:
78:be:09:87:ed:05:9b:52:05:28:b4:c2:5a:0c:cb:
60:a0:da:ea:42:a4:9b:08:2f:02:82:d1:0c:3e:4b:
d6:01:d1:09:1c:2b:9a:ec:45:6f:64:b2:e3:58:3f:
8c:32:fc:c7:7d:7a:39:b6:2d:f1:41:f0:7b:b4:31:
e6:b8:a5:68:67:bb:d9:44:77:3a:c2:41:7d:0a:74:
80:34:c0:88:04:21:3e:c4:14:03:7e:28:e9:a9:41:
97:97:1b:f1:38:ac:8b:b1:d2:8e:56:1d:4f:a6:14:
c3:47:96:9b:6f:e1:5e:34:8c:92:f3:8e:34:ba:31:
e8:ff:77:0b:5f:3c:1f:41:04:c6:d3:87:ea:6b:cc:
9a:71:04:1c:ca:98:b3:52:ca:bb:32:ed:49:57:4e:
a0:0d:be:40:e3:b9:3d:77:88:2d:f0:71:ff:31:2d:
73:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5A:E7:C9:04:1F:3A:19:CA:A6:BD:9C:A3:61:26:FF:77:51:FB:EA
X509v3 Authority Key Identifier:
keyid:F4:64:60:5E:AF:14:B8:B5:D2:8E:E8:D0:76:C1:E3:73:8F:75:82:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/olrnyQQfOhnKpr2co2Em_3dR--o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:f34::/48
Signature Algorithm: sha256WithRSAEncryption
20:03:8d:2f:c3:d5:89:1a:32:57:5d:6c:ca:c2:cb:c9:53:37:
e8:77:08:23:02:d2:e2:66:d1:9a:11:0b:ec:4b:c9:a7:3a:2d:
0b:c3:92:f2:e5:f4:51:fe:04:86:44:f1:71:03:5e:cb:5b:b4:
60:b8:08:58:06:cb:4e:11:10:0b:8d:8a:84:43:dd:cd:6c:ee:
50:ff:66:15:dc:32:57:b8:cb:26:9e:fa:83:f0:60:96:b2:81:
ce:56:fc:1c:d1:41:26:87:e9:0b:79:5e:21:1a:de:29:7f:6d:
86:96:b7:72:62:59:1a:86:89:ec:ba:51:c4:d0:f3:e2:4c:bf:
34:48:b8:8c:b0:32:6d:5b:cf:5e:28:43:d6:25:55:61:a9:4b:
9f:b0:c0:67:d2:18:de:c3:d2:65:d4:76:3a:ee:92:36:04:a4:
24:7d:d6:14:36:6a:f9:a9:e8:eb:46:d1:52:5b:b5:67:4d:5d:
19:93:ea:a6:77:5c:6d:41:9f:fe:1b:67:fa:cb:44:31:9f:90:
84:22:bc:90:9a:d6:d4:09:b8:d3:54:15:d5:22:b4:10:e3:8b:
d6:0c:50:3f:da:ed:a0:f8:5f:f3:9d:9d:4c:79:f0:0e:67:86:
a6:04:7e:45:42:23:c9:68:ab:1a:98:d9:17:d4:1e:65:8c:d7:
07:5c:31:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:39 2025 by rpki-client