Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/Or69i08je9IL_3FfPQ5ndTzvaFs.roa
File: Or69i08je9IL_3FfPQ5ndTzvaFs.roa (raw, json)
Hash identifier: EOOy075Oq0onvPdfIA9R8xzQhr3n3IW53fTBxa2LQcc=
Subject key identifier: 3A:BE:BD:8B:4F:23:7B:D2:0B:FF:71:5F:3D:0E:67:75:3C:EF:68:5B
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 01993E6A920B7CDB68B44D183CD853782927
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/Or69i08je9IL_3FfPQ5ndTzvaFs.roa
Signing time: Fri 12 Sep 2025 14:53:15 +0000
ROA not before: Fri 12 Sep 2025 14:53:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53363
IP address blocks: 193.203.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3e:6a:92:0b:7c:db:68:b4:4d:18:3c:d8:53:78:29:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Sep 12 14:53:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3abebd8b4f237bd20bff715f3d0e67753cef685b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2f:fb:35:91:07:9a:e9:ec:fd:0c:69:58:f2:
9f:07:9f:e7:3d:09:2e:bc:db:e4:dc:fd:a1:f8:7f:
70:67:46:04:a4:65:30:b6:59:0b:fe:ed:8f:d9:8d:
be:a2:a9:85:ae:a4:58:df:ce:0f:d9:5f:63:29:13:
d9:fc:dc:7e:15:e0:0b:d0:b2:ac:7c:50:2e:c9:ce:
73:7f:41:78:c6:92:68:b4:a2:ce:21:8d:14:62:e0:
90:a0:82:56:21:24:61:e9:55:ee:84:c1:c2:ae:00:
ec:54:17:bf:07:68:e3:03:c6:15:cc:b5:8f:46:17:
f1:18:dc:50:1b:f9:ed:27:24:93:0b:8f:e2:2e:4c:
6e:9d:94:10:6f:54:4b:0d:48:4e:22:9e:97:28:72:
70:e1:07:31:a6:32:e0:ec:41:c4:5e:68:59:c2:5e:
f6:ac:87:a4:cd:cd:91:56:c4:4c:b3:c5:ec:ef:02:
2a:5b:af:15:ec:c3:af:a5:d7:e3:27:e8:6d:b6:0d:
be:e4:64:32:eb:9b:92:2f:9b:04:04:6a:f3:7a:75:
6a:63:f0:9a:32:27:e5:f6:53:6f:17:86:9d:d5:0c:
03:54:9b:8d:5a:4c:e0:01:46:0a:b4:cf:73:e4:5c:
bf:51:64:28:52:22:3f:a6:89:42:52:bf:23:bb:88:
4e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BE:BD:8B:4F:23:7B:D2:0B:FF:71:5F:3D:0E:67:75:3C:EF:68:5B
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/Or69i08je9IL_3FfPQ5ndTzvaFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.203.0/24
Signature Algorithm: sha256WithRSAEncryption
10:e1:9a:77:f2:be:5c:24:8b:ce:a2:ad:83:fe:94:22:78:24:
2c:76:d3:b4:3b:2f:c8:48:2e:5a:10:b7:89:29:23:ce:64:d1:
c0:c2:1a:f0:8f:65:05:ee:c4:e0:0b:b6:87:5c:f0:4d:e4:f4:
ee:ab:a2:8b:e9:6b:52:ee:1a:2c:ee:3a:d7:b0:5f:ae:27:3f:
0d:49:01:65:5f:2a:98:72:57:94:81:32:12:17:f1:f7:78:40:
04:91:50:35:0a:fb:cd:93:83:7a:45:0d:99:e5:9f:b7:91:23:
f1:08:3b:a6:9f:3e:f0:60:44:a1:12:33:1c:7c:57:11:3c:8a:
47:70:16:22:7a:af:36:ac:5b:9d:1b:9c:b3:4b:5e:05:57:3c:
fa:28:df:21:b5:a0:a0:55:16:e5:89:5a:2c:c9:a0:c7:90:e3:
1e:8b:0d:98:12:6b:f9:d0:ff:ec:93:cf:7c:9d:89:0c:57:f4:
bd:ea:28:9b:26:e0:99:7c:e7:be:a2:14:20:2f:27:11:ea:0b:
e8:60:1c:ca:1e:bc:e3:92:6f:9a:58:f7:24:83:11:39:81:e0:
6e:8e:d9:c4:6b:dd:87:fa:bc:39:50:94:68:c5:87:4b:3c:31:
cf:9a:ac:01:dd:10:97:f0:09:26:da:07:80:18:a7:58:a5:33:
72:62:c0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:17 2025 by rpki-client