Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/_OMF5Nl70k5FI6dZyBbjhO75Whc.roa
File: _OMF5Nl70k5FI6dZyBbjhO75Whc.roa (raw, json)
Hash identifier: 9Vx2B9Q4z5L6Kqh9xs9MrJDUwmGHBM33p0J4623FkWI=
Subject key identifier: FC:E3:05:E4:D9:7B:D2:4E:45:23:A7:59:C8:16:E3:84:EE:F9:5A:17
Certificate issuer: /CN=379cd67c0c18959239358553229e91f543cc5a5f
Certificate serial: 0199B0F884188AB705FB7E95B2AA0422D541
Authority key identifier: 37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/_OMF5Nl70k5FI6dZyBbjhO75Whc.roa
Signing time: Sat 04 Oct 2025 20:45:00 +0000
ROA not before: Sat 04 Oct 2025 20:45:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15169
IP address blocks: 193.186.4.0/24 maxlen: 24
2a00:1450::/32 maxlen: 32
2a00:1450:4001::/48 maxlen: 48
2a00:1450:4002::/48 maxlen: 48
2a00:1450:4003::/48 maxlen: 48
2a00:1450:4004::/48 maxlen: 48
2a00:1450:4005::/48 maxlen: 48
2a00:1450:4006::/48 maxlen: 48
2a00:1450:4007::/48 maxlen: 48
2a00:1450:4008::/48 maxlen: 48
2a00:1450:4009::/48 maxlen: 48
2a00:1450:400a::/48 maxlen: 48
2a00:1450:400b::/48 maxlen: 48
2a00:1450:400c::/48 maxlen: 48
2a00:1450:400d::/48 maxlen: 48
2a00:1450:400e::/48 maxlen: 48
2a00:1450:400f::/48 maxlen: 48
2a00:1450:4010::/48 maxlen: 48
2a00:1450:4011::/48 maxlen: 48
2a00:1450:4012::/48 maxlen: 48
2a00:1450:4013::/48 maxlen: 48
2a00:1450:4014::/48 maxlen: 48
2a00:1450:4015::/48 maxlen: 48
2a00:1450:4016::/48 maxlen: 48
2a00:1450:4017::/48 maxlen: 48
2a00:1450:4018::/48 maxlen: 48
2a00:1450:4019::/48 maxlen: 48
2a00:1450:401a::/48 maxlen: 48
2a00:1450:401b::/48 maxlen: 48
2a00:1450:401c::/48 maxlen: 48
2a00:1450:4025::/48 maxlen: 48
2a00:1450:480e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b0:f8:84:18:8a:b7:05:fb:7e:95:b2:aa:04:22:d5:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379cd67c0c18959239358553229e91f543cc5a5f
Validity
Not Before: Oct 4 20:45:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fce305e4d97bd24e4523a759c816e384eef95a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:16:94:33:b3:78:bb:ba:2b:94:18:4e:9b:2d:
e1:5a:f1:83:68:02:66:c3:a8:71:20:49:03:08:d9:
58:11:a6:89:bf:c3:e6:55:3f:ea:33:e2:53:98:0a:
7c:c5:7a:4c:83:67:57:6c:bc:70:23:62:47:02:d5:
1c:73:3f:95:21:6a:a3:d7:8d:db:f6:a2:01:5d:c9:
d0:75:93:0d:f2:55:76:24:16:79:e1:c7:0f:10:c3:
43:39:47:5d:55:72:da:8d:c0:f4:72:be:ca:ed:87:
2b:3e:e7:96:77:ab:be:c7:db:4f:91:60:10:7e:7e:
cf:ea:00:99:66:01:ff:b2:e6:d5:a2:a3:a6:df:fa:
71:ea:88:34:0d:bd:23:fe:c1:6a:64:9a:b9:51:af:
74:37:e0:c6:64:24:74:2a:4c:2e:78:40:11:57:c0:
56:f2:b9:8d:1f:16:0c:48:2c:ef:36:16:b0:69:80:
d6:bc:14:f0:dc:f5:1b:60:f4:a7:16:9b:4b:ef:77:
1e:96:24:c3:2e:f6:f2:98:59:e7:ea:ea:fc:5d:5c:
3f:ee:ed:a7:d9:5a:90:6a:15:a4:1d:95:9d:ec:51:
df:e4:bc:9e:dc:f3:63:61:49:db:03:e0:30:94:90:
9a:c2:32:46:e9:b3:b9:41:da:9a:51:5b:b9:09:1f:
b9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E3:05:E4:D9:7B:D2:4E:45:23:A7:59:C8:16:E3:84:EE:F9:5A:17
X509v3 Authority Key Identifier:
keyid:37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/_OMF5Nl70k5FI6dZyBbjhO75Whc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.186.4.0/24
IPv6:
2a00:1450::/32
Signature Algorithm: sha256WithRSAEncryption
22:b3:51:3d:b6:c9:05:9b:f4:69:a0:d1:46:ef:81:29:63:92:
4f:96:46:77:dc:b2:fb:d5:ac:a5:1a:b1:47:92:fa:5b:38:b6:
b8:2b:8f:aa:93:c9:20:5a:c0:de:e1:d0:1f:8e:05:75:23:4e:
b5:95:d7:c4:8b:6e:9a:64:28:1a:0a:7c:70:dd:c6:a3:c6:fa:
69:b4:ff:c9:bf:ca:91:3f:c2:ec:b3:62:1e:39:d8:3c:2c:02:
b2:ce:16:11:50:65:5a:06:99:38:29:eb:1a:0e:04:da:fa:76:
08:cc:5c:c1:61:9c:c8:da:b2:01:3c:3a:62:3c:4c:9e:94:7f:
45:16:05:68:5c:04:b8:14:a1:52:6e:a9:67:b9:5b:42:52:0c:
dd:a8:7e:f2:32:fe:82:55:81:90:e0:85:62:12:5d:ca:9d:8e:
2c:d9:2a:7d:ac:8e:85:72:1d:0f:3c:8a:ec:27:11:b4:71:cb:
52:8f:d2:0b:9e:dc:dd:a1:d5:57:6f:1e:25:a9:16:8c:f6:c1:
44:4c:3e:3b:f5:e9:34:90:c7:1e:54:9e:dc:4f:bb:72:24:a4:
43:f5:c4:cb:20:41:49:bc:60:37:4e:a3:ac:7a:b4:e0:f4:c2:
76:4b:39:77:19:e1:7a:bb:c5:fd:ce:b0:31:8a:c6:9b:32:80:
92:77:1c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:15:07 2025 by rpki-client