Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/OLQEBDuNUrExyxuWVr-4LGbpVts.roa
File: OLQEBDuNUrExyxuWVr-4LGbpVts.roa (raw, json)
Hash identifier: QwtYz2DdlIiUMOBq8WGEjwBYkU8XvTqziioJHxdhWEU=
Subject key identifier: 38:B4:04:04:3B:8D:52:B1:31:CB:1B:96:56:BF:B8:2C:66:E9:56:DB
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 019994F70E03189C1B586DD56ACD861C2A52
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/OLQEBDuNUrExyxuWVr-4LGbpVts.roa
Signing time: Mon 29 Sep 2025 10:14:02 +0000
ROA not before: Mon 29 Sep 2025 10:14:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1653
IP address blocks: 145.98.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:94:f7:0e:03:18:9c:1b:58:6d:d5:6a:cd:86:1c:2a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Sep 29 10:14:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38b404043b8d52b131cb1b9656bfb82c66e956db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:47:6f:03:0a:12:ce:95:65:91:55:7e:6e:f9:
bc:2d:b4:51:11:37:a7:5d:86:2d:58:14:ec:b6:61:
5c:39:e0:66:bb:91:29:df:ba:d8:bb:c0:5b:d6:11:
85:7c:c8:10:63:17:0e:53:22:64:e8:9c:80:b5:a4:
29:0a:28:fc:3e:8d:b1:bf:cb:9a:3f:cc:be:3b:03:
eb:d5:40:b3:e7:f6:94:d2:0b:04:0c:02:5e:8a:14:
d2:d5:07:6f:dd:fd:2f:2c:7d:c1:9c:b1:b6:c6:fd:
c6:a5:28:ff:8b:c4:4c:ca:13:63:51:d9:d7:fd:ff:
14:df:6c:f5:d8:9d:9d:69:e5:1d:d5:49:f4:2a:5b:
32:ec:c2:a6:f8:e9:87:22:a2:59:02:33:e1:0a:3e:
8d:ae:48:02:2c:ff:4f:b4:b7:be:14:59:75:c5:f5:
a4:d8:8a:ff:53:5c:61:20:ff:36:eb:2a:b8:d2:39:
35:a2:a1:fa:8e:d1:38:e4:80:a9:dc:85:17:57:a9:
05:c6:52:6e:60:a2:ff:c7:7b:2d:9e:19:62:08:ad:
c8:0b:76:9d:0e:51:84:da:97:fc:16:7c:57:f7:f7:
e9:19:27:d4:bd:c8:cf:7c:b3:9f:7c:19:ef:a8:2d:
5d:f4:9c:5e:1a:6f:83:20:96:8c:9c:c6:6c:9d:45:
ac:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B4:04:04:3B:8D:52:B1:31:CB:1B:96:56:BF:B8:2C:66:E9:56:DB
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/OLQEBDuNUrExyxuWVr-4LGbpVts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.98.16.0/24
Signature Algorithm: sha256WithRSAEncryption
92:08:17:91:dd:b0:d0:8c:59:48:59:f5:c7:da:84:b1:45:77:
2b:85:0b:52:5c:cb:9c:b8:5c:49:9b:0b:db:63:12:cf:89:d5:
db:da:f1:63:d7:fb:cc:47:d0:4c:27:c9:b0:0b:b1:ca:cb:3c:
b4:ce:bc:c7:e5:a8:2c:cd:33:9e:8b:db:c6:68:2c:41:b1:a5:
5c:29:16:6f:06:f0:3e:1c:e9:ee:43:fe:12:76:3e:37:da:f0:
ba:81:41:48:4c:72:90:20:82:db:f6:db:aa:15:99:51:ad:6e:
9b:76:78:40:aa:51:97:54:e4:f2:42:19:27:43:22:cb:6d:e0:
2c:2a:b4:75:a5:80:58:80:5e:f0:13:c3:c0:62:8d:74:73:f0:
2f:a2:fb:5d:83:04:c8:7b:72:0b:a2:0c:8c:2d:2c:ec:50:0c:
fe:83:ee:98:fe:44:4f:67:e7:ab:6d:6a:75:2a:c2:b9:f3:9a:
dc:d6:7d:0c:9b:95:40:b3:88:96:36:38:6d:4e:f6:04:8b:a3:
5c:eb:6e:be:5f:e6:e3:8d:97:48:dd:06:c7:d5:57:1f:4b:3a:
bc:21:6e:ad:2d:4f:72:58:c9:aa:08:b3:4d:e8:0c:98:17:6c:
9b:e4:ae:81:b9:62:79:de:68:03:fa:53:60:5f:96:15:15:0d:
ad:cc:7a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:48:08 2025 by rpki-client