Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/OnNYGnbqp6-fj4QLhqpKr4VBeic.roa
File: OnNYGnbqp6-fj4QLhqpKr4VBeic.roa (raw, json)
Hash identifier: w+hOlu+E8R5Ml5MAC2W4ymPZgm0/SvhP8ooeJtcS3pc=
Subject key identifier: 3A:73:58:1A:76:EA:A7:AF:9F:8F:84:0B:86:AA:4A:AF:85:41:7A:27
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019A17C2A395BB9DDE3BD0F1F836EF757A70
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/OnNYGnbqp6-fj4QLhqpKr4VBeic.roa
Signing time: Fri 24 Oct 2025 19:47:03 +0000
ROA not before: Fri 24 Oct 2025 19:47:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 45.155.64.0/24 maxlen: 24
2a05:9a40::/29 maxlen: 29
2a06:5fc0::/29 maxlen: 29
2a0b:ac00::/29 maxlen: 29
2a0f:9b40::/29 maxlen: 29
2a10:3f80::/29 maxlen: 29
2a10:77c0::/29 maxlen: 29
2a13:b4c1::/32 maxlen: 32
2a13:b9c0::/29 maxlen: 29
2a13:bb40::/29 maxlen: 29
2a13:c240::/29 maxlen: 29
2a13:c340::/29 maxlen: 29
2a14:1100::/32 maxlen: 32
2a14:1101::/32 maxlen: 32
2a14:1102::/32 maxlen: 32
2a14:1103::/32 maxlen: 32
2a14:1104::/32 maxlen: 32
2a14:1105::/32 maxlen: 32
2a14:1106::/32 maxlen: 32
2a14:1107::/32 maxlen: 32
2a14:62c0::/29 maxlen: 29
2a14:6a40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Nov 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:17:c2:a3:95:bb:9d:de:3b:d0:f1:f8:36:ef:75:7a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Oct 24 19:47:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a73581a76eaa7af9f8f840b86aa4aaf85417a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:16:5c:ad:5a:de:49:9f:00:89:c4:78:6e:76:
9b:27:ea:ab:c1:2e:7e:31:dc:77:ac:ec:40:c9:ce:
56:26:7f:62:17:ce:c6:3c:60:12:f0:ed:9f:74:ff:
2c:9c:9b:57:6e:fd:58:75:00:2f:bc:a4:41:27:71:
99:2f:22:ee:83:65:45:39:ed:81:39:77:88:3a:86:
97:3e:04:81:dd:53:f7:95:2a:b5:0b:ea:9f:b4:d9:
e8:5a:b0:8f:ee:06:4c:99:8f:bf:b5:4a:b5:ec:54:
22:f8:ef:9c:9a:ba:52:8e:f7:51:95:dc:93:df:08:
e2:a6:3d:88:4d:d2:e0:be:f5:96:7e:11:eb:ab:d6:
ed:78:80:46:e9:4a:89:08:ff:77:59:8b:de:ff:c0:
1b:4d:f9:27:53:49:dc:ef:10:ee:8a:07:7b:2e:ff:
09:27:7f:49:0a:88:70:f8:80:75:39:f2:32:a2:32:
8e:1a:33:39:47:6b:0c:d4:44:ed:5f:33:31:22:a1:
9c:a4:dd:d5:27:42:d4:3c:c3:d5:13:02:af:69:53:
83:0c:2e:9b:c1:41:c2:48:1f:c4:2d:29:35:9c:dc:
26:e9:fe:a0:12:18:23:a6:7b:aa:d4:0d:6a:5d:80:
1e:4d:4c:f0:27:48:be:d2:b9:34:89:af:63:96:de:
eb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:73:58:1A:76:EA:A7:AF:9F:8F:84:0B:86:AA:4A:AF:85:41:7A:27
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/OnNYGnbqp6-fj4QLhqpKr4VBeic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.64.0/24
IPv6:
2a05:9a40::/29
2a06:5fc0::/29
2a0b:ac00::/29
2a0f:9b40::/29
2a10:3f80::/29
2a10:77c0::/29
2a13:b4c1::/32
2a13:b9c0::/29
2a13:bb40::/29
2a13:c240::/29
2a13:c340::/29
2a14:1100::/29
2a14:62c0::/29
2a14:6a40::/32
Signature Algorithm: sha256WithRSAEncryption
65:b8:a1:58:93:6c:e0:3e:2a:fb:ac:69:1a:15:c8:d1:4f:f6:
af:d5:1d:3c:0e:c3:2d:6c:84:e7:ed:40:4c:5d:37:8c:7e:a3:
a6:40:0b:1e:3b:a7:1a:8a:19:42:c9:54:0b:28:42:99:fb:51:
ad:51:61:1d:50:4e:5b:85:03:48:a1:78:16:bc:c4:b7:56:a6:
11:c8:43:99:87:54:db:a7:a6:ae:3d:65:99:26:ea:5d:d8:95:
9e:6e:f4:f4:ba:7b:38:b2:f4:cd:14:f0:56:77:41:6d:af:7e:
6e:ee:af:91:7f:d2:d2:c7:33:8f:40:ef:2a:09:e8:94:df:fe:
db:f7:09:04:c1:f2:96:35:8f:f8:03:e2:0c:33:a8:7a:4c:cc:
92:e3:a6:54:b4:c3:fb:38:81:6f:58:2e:66:b0:e4:8f:2a:0f:
90:bf:80:da:36:b8:22:7e:0e:0a:4b:a7:65:ab:0d:66:e8:e4:
55:cf:62:4f:25:89:79:56:85:e6:cd:57:1a:a2:48:b5:f9:4d:
30:77:da:a9:61:1f:38:7f:0f:f9:3b:d1:51:19:5d:96:91:77:
78:90:05:a7:44:b6:18:c0:7f:a2:1f:20:9e:54:90:9d:6c:1c:
63:67:b7:3a:1b:49:f3:98:13:54:6b:9a:d5:35:e8:5f:a7:85:
82:21:fd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 11:54:12 2025 by rpki-client