Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/OBVrhxJJoBc-VRBg3UgoLatO8jw.roa
File: OBVrhxJJoBc-VRBg3UgoLatO8jw.roa (raw, json)
Hash identifier: KCv58SPJtOd1CZuOt1f7SzknAaoYC3n9p/ssJu75MPg=
Subject key identifier: 38:15:6B:87:12:49:A0:17:3E:55:10:60:DD:48:28:2D:AB:4E:F2:3C
Certificate issuer: /CN=e0405884dac59da1e5d585193e065681f9d6615e
Certificate serial: 0199F0AE9B403975680C1D3770D961A0EF01
Authority key identifier: E0:40:58:84:DA:C5:9D:A1:E5:D5:85:19:3E:06:56:81:F9:D6:61:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/OBVrhxJJoBc-VRBg3UgoLatO8jw.roa
Signing time: Fri 17 Oct 2025 05:39:58 +0000
ROA not before: Fri 17 Oct 2025 05:39:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49737
IP address blocks: 185.117.188.0/24 maxlen: 24
185.117.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f0:ae:9b:40:39:75:68:0c:1d:37:70:d9:61:a0:ef:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0405884dac59da1e5d585193e065681f9d6615e
Validity
Not Before: Oct 17 05:39:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38156b871249a0173e551060dd48282dab4ef23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:66:8e:d4:fe:25:3d:19:44:6d:c8:12:38:43:
b7:df:4e:23:01:66:e4:b1:57:ca:6a:d9:09:16:4f:
a6:31:83:61:d1:80:81:b3:fc:10:b8:c3:52:38:2e:
2c:5f:79:1f:39:94:61:72:8a:30:2f:ee:b7:68:5c:
1a:10:ab:f4:b3:86:a2:2f:d4:d6:5a:d5:b2:b7:94:
1d:b7:28:8b:71:2a:24:17:7d:fa:de:f5:79:a9:7a:
9d:a5:71:7c:2a:22:d5:22:5a:4a:04:25:4b:af:55:
d1:95:2b:16:14:73:85:20:da:f8:0d:86:81:ea:39:
8c:1c:d8:f6:af:40:ba:dd:08:0e:16:fc:b4:f3:f2:
c6:96:0a:2b:05:39:05:46:e4:4b:24:95:f4:09:13:
ec:28:9f:ed:03:43:8b:e1:b8:5b:d5:18:19:9c:89:
5f:7a:11:78:52:c9:f8:1e:16:48:f6:a3:be:a1:a4:
7c:c0:c5:4a:64:3c:94:46:d7:cb:80:7f:cb:57:56:
39:fa:99:d4:f5:af:5e:23:86:0b:ee:82:e7:74:6d:
af:c3:27:06:69:3f:1f:e5:01:a3:f9:f4:26:3a:3d:
f8:40:e5:a3:66:1a:6a:ef:03:a3:d7:e5:65:a6:dd:
b1:4d:ed:d1:14:85:2f:36:5a:e4:6e:5f:1f:71:6d:
fe:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:15:6B:87:12:49:A0:17:3E:55:10:60:DD:48:28:2D:AB:4E:F2:3C
X509v3 Authority Key Identifier:
keyid:E0:40:58:84:DA:C5:9D:A1:E5:D5:85:19:3E:06:56:81:F9:D6:61:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/OBVrhxJJoBc-VRBg3UgoLatO8jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.188.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:7a:9d:50:84:5d:0b:8f:9f:d6:55:0e:0d:6c:15:57:92:29:
1e:e6:01:79:59:07:ef:4b:5d:1f:de:99:8e:bc:90:2e:6e:9d:
55:77:91:82:d2:8c:90:1f:47:db:ff:b4:15:ff:b4:28:5b:88:
ce:cf:8f:b6:0c:60:10:15:71:81:2f:19:25:f3:9a:f4:3b:93:
91:84:56:8e:aa:16:30:cb:e5:d3:e1:65:e1:8c:92:2f:28:5b:
35:b7:6a:ea:22:03:d3:d1:6e:f6:83:35:31:0f:58:e5:16:b2:
2a:3a:27:06:52:f5:fe:6b:b4:f6:aa:22:9a:e4:3e:ff:ab:4f:
77:0c:7e:f2:c9:47:cb:06:39:97:31:9d:c4:a0:70:60:a9:29:
f3:5e:7e:7d:76:bd:e5:ae:49:6e:c3:fc:20:1a:a8:01:d4:c6:
cf:89:f1:54:ea:fd:63:2c:80:a2:b9:02:26:ec:b4:72:0c:8f:
3f:c0:e1:00:bb:8e:51:60:3f:5c:d4:3a:88:82:9e:35:7e:8d:
ef:e5:d2:73:18:d2:6f:71:6c:3a:36:47:b5:b7:39:4a:de:4d:
03:eb:2e:20:1a:94:0c:4a:73:66:4a:30:31:12:3f:e9:9a:23:
45:57:67:73:b3:7e:ee:1d:94:71:1f:f1:3c:b3:33:fe:0b:d9:
96:bc:ad:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:19:46 2025 by rpki-client