Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/olW552xGDkhRoLpEwX5CtPmtkTA.roa
File: olW552xGDkhRoLpEwX5CtPmtkTA.roa (raw, json)
Hash identifier: P9ekqpymtSp2qXAXS9yQTKWHryK9/aDlpiq/qzfL8BA=
Subject key identifier: A2:55:B9:E7:6C:46:0E:48:51:A0:BA:44:C1:7E:42:B4:F9:AD:91:30
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019A05B33A68B5598019AC9A96D56817A52A
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/olW552xGDkhRoLpEwX5CtPmtkTA.roa
Signing time: Tue 21 Oct 2025 07:37:03 +0000
ROA not before: Tue 21 Oct 2025 07:37:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63199
IP address blocks: 212.134.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:b3:3a:68:b5:59:80:19:ac:9a:96:d5:68:17:a5:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 21 07:37:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a255b9e76c460e4851a0ba44c17e42b4f9ad9130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d9:53:4a:74:ab:bd:2f:bc:3a:eb:fb:c8:d2:
cb:d4:55:23:dd:00:c8:b4:d0:4c:cf:dd:bc:ff:08:
4f:30:03:52:6d:56:35:d5:35:a8:f4:2a:7f:e7:cc:
8d:e3:90:52:1e:a3:2c:60:41:86:13:37:1f:74:2d:
70:a6:7f:21:ee:34:06:6f:3f:f7:26:3e:11:dc:e3:
c1:dd:fe:f0:52:4d:95:12:1b:6e:73:1c:a5:65:6c:
c0:50:21:16:8b:11:0f:24:07:b5:ed:1c:0f:96:9c:
41:71:68:c0:94:26:21:23:f9:61:61:21:46:f8:9b:
3c:f8:31:00:f6:8c:14:b9:8d:0f:b9:cf:78:69:e1:
7b:51:31:2b:95:37:b7:b5:c4:c1:0d:88:8a:e3:24:
ad:2b:5d:35:88:bf:27:a1:21:d4:17:d6:5f:a6:74:
13:81:7b:69:9e:3e:5c:a5:45:62:85:b4:b1:af:3e:
73:3c:4a:e3:4c:07:23:b4:ae:32:5e:5e:3f:3d:00:
0c:83:3e:65:a9:52:55:76:ef:97:66:b1:35:a6:42:
da:ad:8c:fe:4b:57:e5:c6:38:89:73:e8:7f:e0:92:
99:db:b5:8a:4f:c4:1e:f7:b9:14:06:85:cb:03:ad:
09:c5:d0:a6:36:41:0f:f9:f4:e6:e2:d4:da:29:41:
06:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:55:B9:E7:6C:46:0E:48:51:A0:BA:44:C1:7E:42:B4:F9:AD:91:30
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/olW552xGDkhRoLpEwX5CtPmtkTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.157.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:91:c3:4d:a9:5f:ca:b7:d2:05:f9:60:05:e0:a2:29:fa:0d:
f7:6c:8f:eb:09:91:7f:ae:3a:58:0d:83:91:12:b2:33:15:90:
96:fa:2f:00:04:ce:86:30:93:a9:0a:bc:58:69:90:af:59:18:
4d:8d:fb:71:e8:b1:c6:1f:90:91:24:fe:9a:14:13:e1:ac:f3:
0e:3b:f3:7c:e7:c4:bc:c6:14:07:58:ed:96:6b:16:d9:84:6f:
80:da:e6:81:64:1d:79:a6:3c:2a:e3:25:8c:b7:cb:ff:1b:93:
da:d9:40:f1:5f:d9:0c:90:06:8d:1b:c4:cd:28:f4:88:f2:15:
f8:9c:c5:33:4c:4b:4a:0c:81:0e:ee:d4:4e:d9:a7:ca:af:75:
91:62:10:b8:1c:e2:82:51:55:5f:e4:b6:13:39:3c:17:76:5c:
4c:9f:3d:ad:db:34:4c:f8:24:53:1d:1c:9b:f1:94:84:02:20:
5f:0b:a6:ee:7f:7c:69:11:ce:aa:da:8c:d7:e1:8f:da:6b:33:
21:fb:b8:1a:43:91:82:a2:b6:fe:96:d1:99:64:05:85:32:c3:
b3:54:40:70:2d:3a:c3:b8:64:32:c2:08:01:c5:6a:b1:d6:00:
ff:3e:7c:03:5a:60:1c:ef:79:44:00:7b:ff:1d:57:c7:c1:aa:
bc:67:12:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:21:49 2025 by rpki-client