Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/onb3rJiukMEmxTOk_8qYPQ5pFvg.roa
File: onb3rJiukMEmxTOk_8qYPQ5pFvg.roa (raw, json)
Hash identifier: rVertN8iUSrJY5Sj1WLa+FHIXHq3KLU3I9MXMNSNWto=
Subject key identifier: A2:76:F7:AC:98:AE:90:C1:26:C5:33:A4:FF:CA:98:3D:0E:69:16:F8
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 0197C17AD725F1FD00C6CFE8B358103AF6E9
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/onb3rJiukMEmxTOk_8qYPQ5pFvg.roa
Signing time: Mon 30 Jun 2025 15:35:42 +0000
ROA not before: Mon 30 Jun 2025 15:35:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43298
IP address blocks: 185.13.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:7a:d7:25:f1:fd:00:c6:cf:e8:b3:58:10:3a:f6:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Jun 30 15:35:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a276f7ac98ae90c126c533a4ffca983d0e6916f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:09:3e:69:4f:e0:ab:1d:58:19:97:65:c2:6e:
f4:19:cc:d1:f1:71:af:9d:47:de:17:1d:eb:fe:cc:
f4:b9:84:05:05:b6:7d:75:c2:61:e8:f0:f4:a2:6a:
6c:68:df:f4:a8:55:cb:42:37:2a:27:25:3f:76:d6:
3d:31:3d:c3:f7:33:3d:7a:1f:23:e5:c8:0f:ff:67:
12:8e:20:92:dc:55:ba:9d:d8:e7:03:fd:8e:3e:b7:
11:42:0a:94:b8:f8:2a:88:fc:92:d7:1f:1c:59:0c:
50:68:7c:41:74:47:d9:ae:d8:25:8a:1a:79:3c:77:
3c:fa:ea:dd:9f:a8:dd:16:1d:c7:de:d5:fc:a5:cd:
3f:0f:59:ef:33:e9:f8:6f:de:d5:9c:5b:95:40:53:
d1:81:10:06:ca:c0:8a:13:4a:22:c1:00:db:02:7e:
c2:2a:85:fb:ca:5f:00:b3:0a:d7:61:5b:12:36:03:
3f:fc:8e:89:a5:e6:3b:5b:40:18:96:4b:44:89:43:
a1:73:f0:96:56:fc:11:61:fa:0f:0a:8b:49:0f:3e:
a3:de:df:52:e6:a7:ac:d1:8d:82:ee:aa:8f:51:f0:
28:ed:d7:4f:bd:6d:8c:ee:67:0d:e6:d2:93:04:e7:
27:e3:67:ee:17:4f:51:8f:9b:44:35:bc:7c:04:32:
73:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:76:F7:AC:98:AE:90:C1:26:C5:33:A4:FF:CA:98:3D:0E:69:16:F8
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/onb3rJiukMEmxTOk_8qYPQ5pFvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.160.0/24
Signature Algorithm: sha256WithRSAEncryption
36:d1:e5:22:8c:6f:82:70:b0:15:68:f4:bc:1c:3e:c7:7b:da:
42:4c:3f:3c:50:be:09:bb:27:fc:98:06:2c:eb:ca:38:56:fc:
36:94:cd:35:2b:a1:40:3b:e8:57:5a:74:f3:8a:80:5b:49:3a:
f5:a4:36:01:44:78:26:95:cf:fe:90:1f:02:bb:f6:15:f8:41:
41:f2:1d:02:4d:d9:45:6d:cc:93:2d:8d:fb:8a:62:d2:c8:0c:
68:2e:cc:36:77:8e:95:e0:f1:e0:86:e7:1b:9a:93:a1:51:8c:
f2:cd:2b:b6:36:28:9d:95:61:24:92:c3:02:9f:60:4e:f7:d3:
58:bb:45:63:fa:6e:1b:11:03:20:e0:cc:c5:e4:9d:f4:ef:5e:
54:f3:bd:3b:ee:7c:f9:7e:f4:a1:ef:df:c5:c9:22:a7:52:34:
1b:df:71:e3:b1:da:88:5b:c4:48:01:e2:51:53:80:cf:83:af:
03:c3:86:33:01:0a:e8:8e:c2:3a:ce:79:a6:ca:15:4a:56:fe:
8b:81:14:4b:97:27:73:4f:ad:45:3a:ce:fe:b6:6d:97:6f:f1:
25:16:22:e8:c5:86:ee:6c:36:83:ad:86:94:d0:c1:8b:5c:f4:
d6:cc:95:af:61:55:e5:9c:8d:f7:4e:18:bc:72:3f:14:6e:6b:
6b:d1:34:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 20:44:24 2025 by rpki-client