Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/oXOzqFKOXP3W4QFBtQoblsrTovg.roa
File: oXOzqFKOXP3W4QFBtQoblsrTovg.roa (raw, json)
Hash identifier: kz8J5VBJEC5JGo2WZcJjdy6PbbTAbAu9KBrjeHE5F9Y=
Subject key identifier: A1:73:B3:A8:52:8E:5C:FD:D6:E1:01:41:B5:0A:1B:96:CA:D3:A2:F8
Certificate issuer: /CN=2f70532664343cb3d2897023a127f60ba917a5dd
Certificate serial: 019A53A6F9557A23EF672E0ABFBCC1D73C69
Authority key identifier: 2F:70:53:26:64:34:3C:B3:D2:89:70:23:A1:27:F6:0B:A9:17:A5:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/oXOzqFKOXP3W4QFBtQoblsrTovg.roa
Signing time: Wed 05 Nov 2025 10:54:03 +0000
ROA not before: Wed 05 Nov 2025 10:54:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25488
IP address blocks: 87.250.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:a6:f9:55:7a:23:ef:67:2e:0a:bf:bc:c1:d7:3c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f70532664343cb3d2897023a127f60ba917a5dd
Validity
Not Before: Nov 5 10:54:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a173b3a8528e5cfdd6e10141b50a1b96cad3a2f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f9:62:64:5b:63:dd:af:8f:15:76:ef:19:ca:
d8:91:ae:d5:a2:e2:35:0e:39:44:85:4a:f2:e0:b3:
34:50:f4:5d:ae:83:f9:56:c6:d3:e8:22:69:76:bc:
70:aa:70:bc:f8:a0:88:16:7e:68:c6:15:fd:79:d5:
b2:b1:ff:f0:7f:f8:1d:4d:a1:22:e3:1f:25:77:ad:
5f:cd:11:3f:8c:1a:17:54:cc:55:9c:54:1d:6a:53:
96:a6:26:1c:7d:22:73:cb:54:12:5a:b2:6d:c7:78:
3a:56:5e:11:75:ca:04:8c:e3:92:b7:66:0f:60:67:
59:44:80:ea:c5:54:79:34:9c:0c:b1:ea:5b:9e:f5:
85:2c:9e:cf:14:5c:17:8b:6e:b2:9c:2c:c7:43:96:
a3:f3:2c:03:b2:97:00:d0:49:27:3c:01:99:0f:f9:
e1:70:96:b7:3c:91:0d:d0:14:a6:13:ec:af:f9:cb:
cb:83:8b:eb:3c:f6:e0:6f:eb:e2:fe:13:ee:33:04:
0d:e3:d9:1c:73:ce:26:89:cd:c8:a6:93:0a:5d:a3:
23:3d:fb:a0:60:58:ac:47:c6:58:b8:dc:e1:bb:13:
ed:38:4f:a8:d7:75:29:64:d6:a2:d5:fd:db:df:f3:
0c:4e:5f:df:13:69:d7:8a:ec:42:f9:02:54:c3:31:
f3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:73:B3:A8:52:8E:5C:FD:D6:E1:01:41:B5:0A:1B:96:CA:D3:A2:F8
X509v3 Authority Key Identifier:
keyid:2F:70:53:26:64:34:3C:B3:D2:89:70:23:A1:27:F6:0B:A9:17:A5:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/oXOzqFKOXP3W4QFBtQoblsrTovg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.250.64.0/19
Signature Algorithm: sha256WithRSAEncryption
50:6a:5a:b1:51:30:17:ea:a1:fb:66:3b:44:b2:c2:25:9c:d7:
d1:13:de:57:34:51:63:15:85:6c:f9:6c:20:60:7b:84:f4:0e:
c5:99:3b:67:2d:56:8b:c7:98:a2:95:17:0d:e8:e5:e1:eb:69:
2d:94:bd:a0:96:ab:1f:92:92:3d:0f:a7:59:4b:33:b2:04:b4:
2c:f5:54:f2:2d:af:7b:72:3e:1f:8f:09:48:81:e8:34:54:b6:
81:c0:a2:91:68:0b:90:77:49:e3:fd:83:04:85:28:de:dd:a4:
6b:c5:83:5f:f5:c2:f3:eb:f3:9d:42:fc:22:ac:37:e6:a9:d9:
f0:ab:9b:cc:be:05:09:7d:89:68:b8:40:02:b6:19:04:7c:b5:
a6:41:30:7a:e4:7c:52:4b:6b:6c:d4:0d:4e:84:40:97:98:ec:
6d:10:71:d2:69:6b:bc:ae:9f:18:0e:ec:64:c2:4f:e7:78:fd:
f6:fc:3f:fa:bb:71:04:5d:83:e3:b3:12:c4:62:8c:2c:8f:7b:
e9:46:dd:db:6c:82:a9:59:30:dd:d3:74:5b:92:23:4c:f7:4c:
b1:20:74:6a:35:61:aa:d7:5b:e7:69:26:88:5e:13:82:e5:75:
02:62:14:75:1c:c7:6f:1e:e7:1a:65:12:ee:d6:8c:f6:8f:5f:
67:85:4a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:21:49 2025 by rpki-client