Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/O18qD-IOxU7Qpx-7qCdZCriatME.roa
File: O18qD-IOxU7Qpx-7qCdZCriatME.roa (raw, json)
Hash identifier: XB9lqyR5AkwxeYq52oBczF39tInCtjYqPPhU7+xJ+5I=
Subject key identifier: 3B:5F:2A:0F:E2:0E:C5:4E:D0:A7:1F:BB:A8:27:59:0A:B8:9A:B4:C1
Certificate issuer: /CN=20a7fcbe59314c372b68f232223828b1e33a03ec
Certificate serial: 01999EA2A2EC319CB28142A4EA195DC86778
Authority key identifier: 20:A7:FC:BE:59:31:4C:37:2B:68:F2:32:22:38:28:B1:E3:3A:03:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/O18qD-IOxU7Qpx-7qCdZCriatME.roa
Signing time: Wed 01 Oct 2025 07:18:02 +0000
ROA not before: Wed 01 Oct 2025 07:18:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203214
IP address blocks: 81.22.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9e:a2:a2:ec:31:9c:b2:81:42:a4:ea:19:5d:c8:67:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20a7fcbe59314c372b68f232223828b1e33a03ec
Validity
Not Before: Oct 1 07:18:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b5f2a0fe20ec54ed0a71fbba827590ab89ab4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fb:4f:d5:fa:a1:98:07:1b:ea:be:66:6a:a4:
61:e4:06:ac:d5:d6:af:99:15:2f:1c:6d:d3:be:7e:
67:0f:55:81:69:e8:00:17:55:c7:1c:58:9f:47:77:
b3:fa:fd:9a:94:6e:1f:de:ae:92:1c:28:21:e7:3a:
45:ee:cb:53:30:c5:2d:ed:9d:f4:0a:37:c4:c3:a1:
ed:df:d9:c1:11:09:e6:6b:17:d3:88:98:97:e1:61:
3a:95:3e:18:10:04:c3:69:92:ae:4b:02:56:99:a4:
1e:5c:df:5a:90:3b:23:6a:63:59:4f:96:a9:55:98:
ff:58:64:82:35:83:30:a4:79:a3:fa:a3:f2:89:39:
87:dc:54:38:40:70:a8:d7:dc:61:17:0f:bf:9a:98:
42:6f:19:15:ba:b5:42:58:a6:8b:cd:f8:ea:7a:d9:
e9:04:52:4a:35:9f:1e:c2:62:bd:ae:0c:cc:14:c9:
76:59:e0:f1:b9:79:03:cd:c8:52:1b:8e:fc:c1:fd:
b0:5a:0c:a3:8f:ef:bb:b1:7a:02:9d:75:dd:f1:2f:
8b:f4:7b:aa:5b:a7:e1:2f:cb:13:fd:39:ca:2a:f3:
d2:98:a8:14:e7:10:ca:0c:90:56:db:10:f6:03:03:
2c:03:93:d7:42:4b:c2:b2:9e:e9:96:4f:85:96:7c:
12:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5F:2A:0F:E2:0E:C5:4E:D0:A7:1F:BB:A8:27:59:0A:B8:9A:B4:C1
X509v3 Authority Key Identifier:
keyid:20:A7:FC:BE:59:31:4C:37:2B:68:F2:32:22:38:28:B1:E3:3A:03:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/O18qD-IOxU7Qpx-7qCdZCriatME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.33.0/24
Signature Algorithm: sha256WithRSAEncryption
81:9b:a8:4b:80:3c:23:69:63:f4:6c:86:b8:f7:3d:30:9d:d0:
82:48:69:8e:07:f6:7f:c9:89:46:aa:ff:80:a0:2d:ba:22:5f:
58:1a:c4:c3:1f:c5:ec:05:3c:01:92:97:ea:8a:8e:22:d9:04:
06:35:ec:63:90:b2:4b:43:05:d6:a1:61:44:39:92:fb:4a:7f:
f0:51:85:34:a8:a5:8d:bc:bd:cd:c2:f6:e7:87:fc:f8:ce:8a:
42:37:c9:2d:39:0e:be:b9:db:4a:33:da:59:c0:eb:76:f4:0d:
e9:c7:f5:52:11:a5:09:3b:65:6b:1d:6a:47:de:22:0d:d3:c6:
f8:28:56:a3:b9:62:78:66:82:71:3c:e9:16:5d:c1:cb:13:1a:
bf:31:82:ff:e6:58:1b:05:e8:4f:52:03:17:fa:52:d3:71:b0:
29:fc:62:dc:bf:ae:a1:99:2b:40:36:87:33:33:8e:d5:77:d3:
a9:e8:89:5b:e4:fc:0d:b3:b8:04:80:f5:f5:e1:99:af:57:3e:
23:c4:c8:66:d6:b9:85:6d:89:ef:76:6d:5a:24:fd:36:a9:99:
0f:89:3b:30:93:35:27:65:b5:35:c3:c0:c2:c0:23:5f:c3:0c:
81:1b:a6:f1:55:27:90:25:a1:c7:bd:f5:ca:4e:a2:90:09:2c:
d4:28:39:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:46:37 2025 by rpki-client