Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/oqNBVeq-n6QjqxczJV0o7AeES9M.roa
File: oqNBVeq-n6QjqxczJV0o7AeES9M.roa (raw, json)
Hash identifier: VDR79QslHvn29P0hItfX3W/ovvmhN1om4rCyvajroOo=
Subject key identifier: A2:A3:41:55:EA:BE:9F:A4:23:AB:17:33:25:5D:28:EC:07:84:4B:D3
Certificate issuer: /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1
Certificate serial: 01988A496E1890484323276C3E8C62F32834
Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/oqNBVeq-n6QjqxczJV0o7AeES9M.roa
Signing time: Fri 08 Aug 2025 15:25:24 +0000
ROA not before: Fri 08 Aug 2025 15:25:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213938
IP address blocks: 2a07:8143::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:49:6e:18:90:48:43:23:27:6c:3e:8c:62:f3:28:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1
Validity
Not Before: Aug 8 15:25:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2a34155eabe9fa423ab1733255d28ec07844bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4d:ea:f5:b9:91:77:9c:58:96:a9:03:f1:57:
d4:bc:1f:6f:5e:d3:ee:3c:d9:4d:e8:ba:83:4f:03:
f0:fb:f7:0d:f5:8d:20:6e:a5:b5:33:7b:9f:fd:65:
3e:e3:5a:54:17:6c:fe:5b:f7:87:36:38:70:5b:93:
6c:4f:07:f7:a2:7d:cc:ea:17:ee:38:d2:73:d5:8e:
ba:ca:16:fd:d2:23:30:8a:f2:9e:da:74:db:e3:8e:
dd:3a:5c:f0:68:37:0f:c0:50:2e:68:5f:78:73:c8:
bf:99:62:e5:8b:13:34:ba:b6:b5:a5:bb:21:c8:d0:
06:52:24:41:8e:47:74:4c:b3:da:0b:da:aa:42:9d:
29:da:66:d5:3e:a6:84:02:aa:c8:0f:70:9d:c3:62:
81:92:39:bb:15:f5:64:e7:78:d5:16:fe:e6:e8:9a:
12:66:6a:e7:26:70:72:37:26:42:7b:26:8d:26:34:
40:20:e0:fe:72:b3:7d:2f:c1:0b:16:36:1d:cc:fc:
88:24:9c:2c:d4:e6:b2:99:89:b3:9f:bb:47:b9:b3:
af:43:ad:6f:ef:97:fd:7c:88:1f:6f:3a:13:95:e3:
58:d9:99:33:e4:c6:41:44:15:03:dc:8b:bf:60:33:
b2:ca:96:f4:38:f5:5f:16:6f:cb:02:9c:5f:16:9b:
e4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A3:41:55:EA:BE:9F:A4:23:AB:17:33:25:5D:28:EC:07:84:4B:D3
X509v3 Authority Key Identifier:
keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/oqNBVeq-n6QjqxczJV0o7AeES9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:8143::/36
Signature Algorithm: sha256WithRSAEncryption
9d:f2:3a:a7:64:12:ba:de:61:76:ec:86:cb:72:bc:96:bc:b0:
97:96:1d:ae:0d:fb:73:78:6d:c7:e5:0b:48:21:d8:32:a1:c1:
42:3b:2d:0d:e8:8e:6e:27:28:c2:90:b8:a4:3b:2b:2b:f8:73:
56:92:dd:92:6b:25:7b:3a:22:8a:a9:e5:5c:1f:4c:33:31:71:
70:89:c4:22:b5:58:dd:64:63:96:8b:62:ea:5d:22:09:32:fc:
e0:e6:00:e0:fa:7d:5c:49:9b:9f:47:b1:32:8c:52:40:ab:14:
9c:db:61:5c:32:57:6a:17:25:98:25:0d:64:05:85:22:12:5b:
22:65:2c:87:f2:dd:e2:06:8d:20:20:cd:6c:ff:7f:42:12:1a:
35:6b:4f:de:06:28:c2:e1:3e:3c:ad:54:09:82:fc:b0:a7:d4:
e8:84:aa:81:09:50:4a:b0:23:98:7c:6f:0a:7d:4c:a8:3d:1b:
bc:9a:a6:0a:44:28:8a:33:b7:86:86:59:60:84:bb:0a:94:28:
d3:da:a1:50:e8:53:22:fb:2b:a7:86:a4:2a:7b:5a:b0:54:4b:
d8:e8:d0:36:3a:43:99:04:95:36:46:a0:ab:8c:30:99:33:96:
fb:18:e7:39:95:e3:0d:60:2f:5a:eb:8a:e2:25:b7:7e:00:db:
c5:9b:79:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:51:35 2025 by rpki-client