Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/oQ47OO3iSNMtAuvlbZJhns5jtPo.roa
File: oQ47OO3iSNMtAuvlbZJhns5jtPo.roa (raw, json)
Hash identifier: DmNizIql71FSjnm9Foz1EExYyNgsI/RtmPHVmpQ2GmQ=
Subject key identifier: A1:0E:3B:38:ED:E2:48:D3:2D:02:EB:E5:6D:92:61:9E:CE:63:B4:FA
Certificate issuer: /CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Certificate serial: 019DDD19CFDBFB084F4B2F21CEA1CFC9D8B0
Authority key identifier: 13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/oQ47OO3iSNMtAuvlbZJhns5jtPo.roa
Signing time: Thu 30 Apr 2026 06:35:49 +0000
ROA not before: Thu 30 Apr 2026 06:35:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 45.80.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:19:cf:db:fb:08:4f:4b:2f:21:ce:a1:cf:c9:d8:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Validity
Not Before: Apr 30 06:35:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a10e3b38ede248d32d02ebe56d92619ece63b4fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:79:1a:1c:1c:71:c0:86:8f:13:c0:63:96:df:
93:39:6f:d6:10:25:8d:e8:31:28:32:e6:79:3f:59:
7a:db:9c:12:a8:90:ce:10:78:2f:31:06:dd:51:0e:
15:43:ec:c4:7f:d2:5c:f5:c9:88:a8:1f:b1:14:c0:
8e:43:be:1f:6d:63:a1:c2:ed:4d:1c:54:8c:a3:55:
b4:a3:f9:e7:58:f3:81:38:67:88:ce:3e:95:ed:3a:
85:92:75:13:29:cb:0f:a2:be:f8:dd:05:23:e6:f7:
5b:89:05:b4:80:65:a9:66:de:86:82:0c:fa:57:17:
16:21:8f:35:3c:c2:8a:3c:4c:a8:b6:b8:9e:14:75:
c6:72:ef:44:ed:38:29:91:5c:24:5c:a9:d4:10:5d:
9a:75:0a:0e:d7:92:50:ac:d0:ef:f2:d4:f3:1a:05:
37:f3:9a:6d:c1:b9:30:9e:6e:15:67:df:6e:b8:20:
42:e6:2d:7f:79:93:b2:e0:3b:a9:27:34:3b:f0:89:
5f:7d:a1:5c:59:f3:09:04:16:a7:20:1d:e7:96:37:
5e:b5:c8:4a:ec:b8:3a:1f:66:06:bd:96:cb:8d:48:
d5:a5:95:b2:4d:0f:00:29:ae:56:70:99:c3:ad:52:
33:fe:f0:8e:af:bc:da:81:9f:d1:9c:54:5e:ad:89:
79:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0E:3B:38:ED:E2:48:D3:2D:02:EB:E5:6D:92:61:9E:CE:63:B4:FA
X509v3 Authority Key Identifier:
keyid:13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/oQ47OO3iSNMtAuvlbZJhns5jtPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.48.0/24
Signature Algorithm: sha256WithRSAEncryption
44:db:dd:b0:55:c3:30:fb:4c:c1:05:e3:78:b5:ef:70:f7:35:
5b:47:55:0c:53:dd:8d:42:82:a8:79:80:0b:71:8f:c7:fb:86:
bf:4d:f7:02:b6:d0:30:b8:e7:3b:5f:9b:21:5f:70:bb:1c:86:
cc:51:60:43:75:f6:a1:26:29:ea:cd:29:6c:33:fc:34:de:e6:
be:e8:8f:dc:11:52:b7:7d:8b:a3:0d:c8:d6:3e:b7:9f:c5:01:
5f:6a:c1:f6:b1:fa:6c:f2:8f:86:aa:56:0d:fb:d7:de:34:db:
8f:d8:15:dc:82:9e:b3:2d:9b:4f:5c:f8:d0:d7:31:75:e6:a7:
fd:44:9e:76:bf:c3:62:2a:ca:b0:b9:4b:e5:e7:00:f4:62:b2:
ee:d5:aa:73:a0:fa:52:59:03:ca:06:6a:7a:09:a0:0b:6b:35:
36:a6:96:d4:3f:b6:6e:ed:a0:8a:18:10:c0:5c:ef:43:37:41:
0c:71:e7:99:57:4f:6d:f0:1b:ef:8b:d7:83:9a:e7:0f:25:e0:
c2:b2:51:57:e5:7e:54:fc:83:3e:39:a3:f3:b1:bb:3a:1b:5d:
59:61:fc:16:b2:a5:d8:a8:f3:12:c0:61:85:03:b6:75:c5:c6:
74:67:94:3a:80:74:c5:02:3b:4c:e8:96:ff:d9:22:97:79:c9:
f9:bf:a7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 14:47:49 2026 by rpki-client