Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/OHctpNz_hhm9bPX3cKVQ1EtLD-c.roa
File: OHctpNz_hhm9bPX3cKVQ1EtLD-c.roa (raw, json)
Hash identifier: 8FZm1tGVETXKlmG85vdoH3UOxX9O19NVBR+Lz7FCIVA=
Subject key identifier: 38:77:2D:A4:DC:FF:86:19:BD:6C:F5:F7:70:A5:50:D4:4B:4B:0F:E7
Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial: 0199FDE750BF19A1C3A7D77FE3FB61C59CCE
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/OHctpNz_hhm9bPX3cKVQ1EtLD-c.roa
Signing time: Sun 19 Oct 2025 19:16:59 +0000
ROA not before: Sun 19 Oct 2025 19:16:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 2a14:ae00:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:e7:50:bf:19:a1:c3:a7:d7:7f:e3:fb:61:c5:9c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Validity
Not Before: Oct 19 19:16:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38772da4dcff8619bd6cf5f770a550d44b4b0fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a6:f3:6f:c0:9c:9f:68:3b:b2:34:21:bf:a2:
10:e0:73:76:da:4d:30:71:03:50:5d:e2:c2:47:53:
14:a0:e0:f6:f7:a1:63:17:9c:3a:0f:2b:2e:2d:c4:
d6:82:5f:fe:cc:e0:28:60:1f:41:6e:c0:a0:03:e8:
77:d1:74:e1:75:d5:23:e5:99:51:93:98:0a:f8:ca:
09:6a:38:72:0d:2b:d7:b5:20:c0:0b:09:76:b8:eb:
2a:d4:22:da:fc:d9:f5:b1:a5:ca:02:ab:fb:a6:2e:
57:7a:88:5f:1d:1b:0f:4f:f1:18:aa:92:4e:4d:18:
49:02:45:68:72:e3:c2:a5:01:26:be:6e:bf:7f:c0:
e8:2b:82:83:ab:ec:17:bc:96:91:08:85:1c:3d:27:
4b:78:b5:47:27:2e:c3:32:63:66:87:26:12:9d:44:
b1:1e:db:01:4d:c8:94:61:4d:22:66:b5:c8:55:00:
91:b6:d1:ca:69:30:5e:22:74:28:12:70:38:2b:53:
54:1d:5a:50:a7:d5:7a:cc:9b:b2:a2:7c:fe:6f:ca:
92:2f:7f:43:32:47:ae:5c:31:98:ac:2e:58:20:c0:
6e:18:8c:73:78:3c:62:ff:ab:5a:25:50:10:6d:63:
5d:b2:6c:f9:f5:b7:1d:f4:0f:c3:d6:c1:39:8c:eb:
15:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:77:2D:A4:DC:FF:86:19:BD:6C:F5:F7:70:A5:50:D4:4B:4B:0F:E7
X509v3 Authority Key Identifier:
keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/OHctpNz_hhm9bPX3cKVQ1EtLD-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:ae00:5::/48
Signature Algorithm: sha256WithRSAEncryption
3a:f9:5c:e3:f9:83:ca:f3:f3:49:40:fd:8b:1b:6c:f3:d5:af:
36:43:03:65:3a:40:37:7e:2d:2e:6d:af:8d:95:1c:7e:d1:af:
3d:52:59:48:0c:c0:59:a1:ea:15:3a:be:5a:f2:6c:a3:74:26:
af:c3:ab:92:67:bb:78:6f:39:6e:76:55:bf:64:59:5a:4f:72:
a7:4c:fa:ab:7c:39:0b:8d:aa:29:ef:9e:14:3f:ff:27:a7:bb:
92:75:d5:59:29:e2:9f:0e:d2:c0:cd:44:da:08:4c:63:72:43:
dd:4c:f7:33:1a:d3:49:d5:ce:54:76:54:42:90:9b:9a:88:89:
a9:f4:7c:6a:06:6d:ca:a2:7b:ee:a2:08:1f:5c:c7:f5:ff:0a:
e8:f4:6e:3e:2a:41:31:b5:28:28:77:1b:de:96:a6:da:4e:65:
eb:33:b7:af:5a:0d:48:c2:d6:32:2b:a1:af:79:31:89:fb:40:
5a:6c:d7:49:a8:89:78:b9:66:4b:95:b2:12:90:e3:0d:5d:69:
a4:8d:5a:02:11:54:9f:85:b6:a1:a8:fb:45:ff:0d:49:43:57:
04:6a:76:d6:a7:ce:d7:4e:8a:dd:3d:89:2d:15:79:da:fa:55:
0a:40:77:7f:32:7d:1f:25:1e:80:67:f4:c1:1b:a8:e8:cf:d7:
91:0b:98:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:46:06 2025 by rpki-client