Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ONpsMn-BWW06iZz79lZDvY9Uk40.roa
File: ONpsMn-BWW06iZz79lZDvY9Uk40.roa (raw, json)
Hash identifier: ZYu74l+ylcurM70qGGnhn1VIrE7f4B+k6C5g9dPKN+g=
Subject key identifier: 38:DA:6C:32:7F:81:59:6D:3A:89:9C:FB:F6:56:43:BD:8F:54:93:8D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0198F084E83721CBBEAE5B6F57A5646F0570
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ONpsMn-BWW06iZz79lZDvY9Uk40.roa
Signing time: Thu 28 Aug 2025 11:51:38 +0000
ROA not before: Thu 28 Aug 2025 11:51:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34665
IP address blocks: 2a0f:16c0::/29 maxlen: 29
2a10:33c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f0:84:e8:37:21:cb:be:ae:5b:6f:57:a5:64:6f:05:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 28 11:51:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38da6c327f81596d3a899cfbf65643bd8f54938d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:80:1c:32:07:9a:2a:1c:25:58:93:d0:01:44:
a1:8c:d2:8e:51:9d:86:29:98:4b:38:88:08:72:cf:
2c:ac:95:67:ed:84:c7:aa:b0:21:fa:48:a9:1d:98:
35:14:e7:92:95:7a:03:8c:6b:46:c8:1a:ab:98:a2:
ff:00:ed:8a:89:d8:e6:d7:ba:23:30:ae:46:3c:14:
75:3b:6f:ed:b3:d7:fa:9d:b2:ea:f0:7c:1b:1f:d7:
05:75:40:70:00:d2:ee:ea:e9:33:56:f9:c5:fb:71:
ec:ea:3a:11:de:dd:2b:eb:f9:87:0d:2c:db:59:c9:
a4:f7:07:1b:bf:f4:82:9b:9e:57:6d:0b:04:74:06:
b8:be:87:9d:9c:ad:0f:d2:d2:a6:ed:31:4d:98:80:
b2:19:51:0c:0e:7a:7e:6f:d1:bf:87:0c:7e:65:9e:
77:9b:27:d9:09:c0:76:7e:3a:18:fd:93:34:fa:05:
53:9d:40:f7:72:0a:ae:e2:59:68:32:c2:ff:fc:bd:
c6:d5:30:d4:e1:8a:95:6c:b4:a1:f6:54:dd:43:80:
df:d5:1c:70:57:30:2c:23:6d:65:53:25:f4:4e:b0:
33:f0:26:de:bd:42:48:84:50:6e:72:db:16:aa:08:
22:ac:7d:c3:2a:de:2f:98:29:14:ce:73:6b:48:19:
3a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DA:6C:32:7F:81:59:6D:3A:89:9C:FB:F6:56:43:BD:8F:54:93:8D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ONpsMn-BWW06iZz79lZDvY9Uk40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:16c0::/29
2a10:33c0::/29
Signature Algorithm: sha256WithRSAEncryption
47:14:30:6b:f5:03:42:9b:60:d5:4c:8c:5f:b5:c0:bf:3a:4b:
81:0a:2c:12:19:83:6c:e4:51:bd:ed:f2:62:43:fb:8b:d9:56:
f2:97:ad:c2:e6:a0:ca:20:10:70:af:4c:6c:a0:ff:b2:57:c2:
a6:f2:72:5f:96:a7:da:a0:f5:17:07:6e:5c:cd:06:b1:8f:63:
9f:3f:2e:e7:2b:23:27:91:08:02:bc:76:7b:4d:ee:99:39:d0:
78:8e:92:ab:3a:16:f1:2d:9c:1d:db:32:06:69:e5:40:f7:ef:
8c:46:c1:0a:81:5e:60:e4:0b:79:a3:a3:5d:47:18:11:11:06:
4b:84:30:4b:12:e4:53:08:eb:db:fc:10:7a:06:db:c7:4a:2e:
7d:40:b4:a3:1d:e7:ee:2a:55:8e:38:ac:31:b6:ed:4c:54:52:
52:40:5a:2f:34:8e:33:13:01:59:0e:78:8d:68:9b:70:b6:30:
0c:ac:b7:29:7c:42:16:e1:cb:0c:22:8b:26:68:88:c1:04:ab:
39:93:17:a2:ae:6a:e4:6d:69:e6:d0:01:5f:02:c2:4b:fe:1a:
cc:6a:5f:3b:76:a9:5d:09:02:d8:b2:4c:81:79:b8:18:a4:19:
8d:94:ad:31:e4:ed:78:6e:a0:af:04:d8:1f:b1:88:5c:e9:94:
b0:0c:c0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 20:49:58 2025 by rpki-client