Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/ON9oJk-G7vGxcsUv8cq5LVs7MV0.roa
File: ON9oJk-G7vGxcsUv8cq5LVs7MV0.roa (raw, json)
Hash identifier: ifavu6O7cNZknOzLI2bfFtyPKDxeUxAmdy+zZOwFV+U=
Subject key identifier: 38:DF:68:26:4F:86:EE:F1:B1:72:C5:2F:F1:CA:B9:2D:5B:3B:31:5D
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 019A5E0EC90AD23295F1235F68C28141E7C9
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/ON9oJk-G7vGxcsUv8cq5LVs7MV0.roa
Signing time: Fri 07 Nov 2025 11:23:38 +0000
ROA not before: Fri 07 Nov 2025 11:23:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62300
IP address blocks: 37.44.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5e:0e:c9:0a:d2:32:95:f1:23:5f:68:c2:81:41:e7:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: Nov 7 11:23:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38df68264f86eef1b172c52ff1cab92d5b3b315d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:38:3f:fd:38:0d:75:c5:94:94:ff:5a:3a:86:
e7:cb:37:18:4b:8a:2a:7b:66:09:1a:ed:c3:6e:58:
02:d1:39:a4:40:02:2e:40:a2:51:1c:d5:30:56:4c:
fa:27:96:af:bb:e8:22:55:2a:45:bc:64:91:00:5d:
73:d2:73:3c:ba:14:b8:f3:03:1f:13:18:f5:5b:50:
da:af:d0:ca:5f:f6:11:06:1d:cb:2a:c3:b7:a6:de:
a1:d0:95:f3:72:db:ac:2f:5a:1f:a0:f1:ec:71:f3:
30:a0:14:28:d7:de:05:64:b8:76:fb:44:5e:1a:11:
b2:3d:07:3c:7b:d4:a5:e4:32:87:d6:49:ab:1e:cf:
bb:c6:94:d1:6a:8a:5c:8c:11:9f:48:33:49:9f:6f:
ad:18:44:b3:21:25:72:eb:84:46:83:e9:57:d6:b9:
a9:1b:33:8d:64:42:c2:a6:0b:05:95:0d:e5:ff:d3:
e4:82:5c:91:6b:20:c0:f0:9b:5e:37:da:9d:40:5f:
2a:7c:e8:0c:26:1d:ad:fb:6d:68:52:4f:55:e2:df:
72:1e:38:70:f1:9d:21:2b:aa:e8:23:70:ab:ca:9a:
85:bb:c5:a1:e8:ee:40:f0:1a:6c:20:b8:2a:d3:a5:
0f:6c:d3:66:96:51:4d:bb:77:dc:0b:a8:0b:fc:d5:
a0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DF:68:26:4F:86:EE:F1:B1:72:C5:2F:F1:CA:B9:2D:5B:3B:31:5D
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/ON9oJk-G7vGxcsUv8cq5LVs7MV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.199.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:ee:ce:40:c6:8d:45:05:3a:25:5f:0a:c4:69:68:2b:7a:e2:
a3:31:41:6d:ac:17:1f:d1:e3:0c:45:ee:68:2b:5f:76:66:05:
1d:23:cd:71:e3:1d:f2:d5:8e:1d:60:c4:64:93:ff:1b:85:49:
2f:d8:66:3c:30:70:8d:16:64:2c:ea:f6:f0:21:c2:4f:31:d8:
17:87:12:f9:5e:ee:46:d6:2c:ea:1e:6a:f5:91:c7:8c:78:e4:
dd:57:83:f9:2a:08:4c:ff:96:f9:60:15:50:b5:47:da:c4:66:
c0:7b:17:39:c4:8f:87:fb:25:cd:8b:bd:0f:4e:5d:f2:62:29:
50:8e:cf:36:6b:79:c8:03:4a:14:bf:1c:d9:be:2c:e7:92:79:
16:74:1e:92:8b:f3:3e:ce:26:6c:2e:ed:45:64:42:e3:3b:f7:
d8:3d:6c:3d:bb:f4:68:91:c0:e2:0f:2d:97:3c:78:67:73:79:
f5:51:53:ef:9f:95:91:72:ee:41:c0:0d:de:94:f5:46:83:3b:
e3:4e:ff:48:b8:8a:f0:1a:64:0f:ba:5f:4c:70:08:72:17:d3:
cb:e8:93:97:3b:bf:12:7a:1f:6d:73:62:e7:d4:e3:a9:10:92:
8c:12:f4:4f:3a:48:05:4c:cd:99:9d:4f:b6:cd:76:8c:8f:f7:
cf:59:95:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:16:13 2025 by rpki-client