Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/O88pJYUrrqVOidkJjEP-5_wS7ww.roa
File: O88pJYUrrqVOidkJjEP-5_wS7ww.roa (raw, json)
Hash identifier: cvcdBAMQsvb0r0SAZ093g5qXRau0yzmBdmsOPLmPc+M=
Subject key identifier: 3B:CF:29:25:85:2B:AE:A5:4E:89:D9:09:8C:43:FE:E7:FC:12:EF:0C
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 0198DAEE434BC1EA8D0EE9503A5153E1E63E
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/O88pJYUrrqVOidkJjEP-5_wS7ww.roa
Signing time: Sun 24 Aug 2025 07:15:04 +0000
ROA not before: Sun 24 Aug 2025 07:15:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 45.11.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:da:ee:43:4b:c1:ea:8d:0e:e9:50:3a:51:53:e1:e6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Aug 24 07:15:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3bcf2925852baea54e89d9098c43fee7fc12ef0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:df:8d:c5:56:d3:ef:aa:1b:e6:d5:73:87:e0:
bc:af:0d:b9:e3:7b:11:99:d1:af:3f:2e:ca:f7:f0:
84:c9:b9:60:8f:33:fb:a2:b7:3f:f6:c0:c0:8a:44:
5e:f2:7f:cf:cf:2a:09:e0:34:03:48:da:c7:8a:bc:
9f:41:0d:90:ba:a4:a7:34:2a:5b:d8:cd:60:46:c2:
61:be:71:43:d1:e1:ee:70:7c:a6:6a:df:e0:4d:0d:
83:d4:f9:60:19:4e:2b:2f:17:7b:3c:40:c9:be:75:
dd:7c:f9:af:5e:5b:c7:ed:cb:0e:26:7c:a1:81:90:
ae:9d:96:b2:05:7f:75:9e:b3:d7:9f:60:25:02:14:
af:f4:1b:25:f4:99:13:28:88:cb:3c:5f:ad:b5:c0:
a3:04:6c:18:c5:53:8a:8a:23:79:ac:0f:ff:d1:d5:
eb:b8:bd:fc:38:32:31:a3:32:a9:0f:d3:c7:7b:83:
dd:ae:c3:76:ee:e0:b8:64:7f:8d:05:76:67:c2:7e:
9a:8f:ca:5b:72:b7:2f:f7:41:e9:07:21:ff:2f:31:
93:47:57:1d:71:af:4e:19:93:7c:f6:e9:9e:da:83:
06:0b:c9:d2:b2:00:36:45:c1:a7:69:51:d5:93:3c:
e7:60:74:8c:2b:69:86:2e:a3:cb:f1:e7:c4:de:b5:
92:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CF:29:25:85:2B:AE:A5:4E:89:D9:09:8C:43:FE:E7:FC:12:EF:0C
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/O88pJYUrrqVOidkJjEP-5_wS7ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.188.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:70:92:b6:bb:d3:29:85:2e:6c:49:6f:35:83:a8:77:75:cd:
6a:a1:62:e9:fc:d2:d0:56:4a:8c:67:f4:8e:be:72:ba:e3:10:
47:83:f8:7c:a0:ba:1f:ac:62:5b:23:a5:ce:d2:d6:99:5b:66:
51:73:40:74:17:c9:d3:b6:a0:ce:21:1c:ea:98:ae:72:82:d3:
41:4b:7a:82:48:d9:c7:30:d0:75:5d:7c:99:bb:7d:7f:9c:17:
21:6b:ed:04:31:e3:8f:19:03:a7:dc:82:20:6e:7a:fa:48:91:
8e:d9:74:d7:8d:68:81:76:95:7a:ac:71:cb:f5:3c:fd:0f:78:
a0:a5:c5:e6:a5:03:98:14:11:0b:36:9a:90:6e:3b:98:bd:55:
06:a1:12:65:dd:87:56:b7:5f:2a:7f:92:fa:4a:be:33:c6:65:
12:7f:6a:b4:0b:37:c3:32:b9:0d:e8:6a:39:30:42:c2:70:61:
4d:c4:5a:2e:c2:7f:77:58:fb:5b:01:25:44:b8:85:d3:db:77:
89:4a:67:47:20:f2:4f:fe:ea:af:98:c8:b7:a1:77:74:a8:05:
d1:a6:8b:67:e4:ff:ad:35:5b:2c:e0:1c:0e:ab:f4:22:93:06:
0d:73:19:a3:96:17:08:3e:8a:6a:f5:5b:3b:94:29:00:5a:ed:
b5:6a:41:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 15:37:18 2025 by rpki-client