Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/OLpJ9Bd9ZoAmgRKrxQeXRHzzVFE.roa
File: OLpJ9Bd9ZoAmgRKrxQeXRHzzVFE.roa (raw, json)
Hash identifier: IxODUiMSX3F7Gj+ZqyPwgE/3+jVQ+YMse6cLMmOU7iI=
Subject key identifier: 38:BA:49:F4:17:7D:66:80:26:81:12:AB:C5:07:97:44:7C:F3:54:51
Certificate issuer: /CN=a63c7f29b883f4b3c2436d963dc8532a1a634cca
Certificate serial: 019A53ACC2E5517E8670D3A813174D2CAFC6
Authority key identifier: A6:3C:7F:29:B8:83:F4:B3:C2:43:6D:96:3D:C8:53:2A:1A:63:4C:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjx_KbiD9LPCQ22WPchTKhpjTMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/OLpJ9Bd9ZoAmgRKrxQeXRHzzVFE.roa
Signing time: Wed 05 Nov 2025 11:00:22 +0000
ROA not before: Wed 05 Nov 2025 11:00:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42130
IP address blocks: 185.192.208.0/24 maxlen: 24
185.192.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjx_KbiD9LPCQ22WPchTKhpjTMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 20:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:c2:e5:51:7e:86:70:d3:a8:13:17:4d:2c:af:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63c7f29b883f4b3c2436d963dc8532a1a634cca
Validity
Not Before: Nov 5 11:00:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38ba49f4177d6680268112abc50797447cf35451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2e:09:07:d5:3e:c4:17:2e:36:f5:5d:3a:e1:
12:f4:fc:92:ef:15:ba:c0:96:66:e5:69:f2:45:e9:
8a:a3:b2:5b:64:11:a0:ed:ec:29:18:14:8d:24:2d:
19:0f:54:9f:0b:b7:06:45:66:e9:94:aa:c0:81:2b:
f7:3a:4d:6e:52:e2:d5:16:52:a2:44:89:51:f9:a4:
a3:68:b3:91:0e:f8:83:b3:c6:2c:dd:dd:80:88:51:
ea:d6:cc:6f:ce:32:e7:fb:a0:f1:6b:32:a5:aa:ca:
39:b8:d0:1e:95:f5:b2:50:32:83:79:70:9c:46:0a:
6a:69:ed:f9:d5:19:80:2c:02:7e:c3:06:89:6b:dc:
78:50:8a:f4:c8:34:b4:ba:7a:8d:70:b3:72:71:20:
98:c7:26:9a:38:3a:00:ae:3b:4d:af:04:3d:dd:fc:
4a:d0:ee:12:ec:90:ff:bf:43:7b:4a:b7:c5:0b:52:
ac:90:cd:c8:01:b8:01:8a:6d:6a:bc:ed:44:ba:30:
6a:6f:15:f0:49:dc:62:6d:33:47:cf:0e:1f:d4:c7:
5e:a6:87:b6:cb:12:76:4c:a0:01:d7:73:43:99:1f:
f0:71:d2:ba:31:5b:16:65:31:10:bc:33:51:ec:95:
ff:fb:b2:1b:4c:88:76:ed:90:5f:ef:2f:0d:be:89:
33:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BA:49:F4:17:7D:66:80:26:81:12:AB:C5:07:97:44:7C:F3:54:51
X509v3 Authority Key Identifier:
keyid:A6:3C:7F:29:B8:83:F4:B3:C2:43:6D:96:3D:C8:53:2A:1A:63:4C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjx_KbiD9LPCQ22WPchTKhpjTMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/OLpJ9Bd9ZoAmgRKrxQeXRHzzVFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/304d73-65ba-4bbe-9fde-dc26e9ee8410/1/pjx_KbiD9LPCQ22WPchTKhpjTMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.208.0/24
185.192.211.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:7b:10:a8:02:7b:df:6b:f5:31:e3:7d:14:08:1d:6f:39:94:
07:43:45:e0:2e:0e:06:2e:df:63:37:05:35:14:57:f2:08:6e:
6f:90:b0:4b:d4:7d:c0:86:52:9e:f0:69:6a:63:50:39:c7:ab:
9d:46:a6:22:08:20:59:86:ee:d9:b9:05:a1:5c:73:ca:b9:fc:
9e:61:1f:5b:d4:1d:83:51:eb:2c:d6:8b:f8:e2:c0:05:c2:8c:
e1:1a:93:c3:ee:1b:bf:c2:d0:b3:4c:22:59:54:c2:d7:6b:d9:
ee:eb:10:ef:49:df:8c:4e:10:22:0b:54:50:31:76:5b:81:1e:
92:3f:a8:19:e6:75:35:ab:31:20:42:58:43:44:5c:80:cd:e6:
b8:cc:42:15:53:46:ba:c0:40:9c:94:40:a9:f4:00:e1:c9:30:
06:2a:93:2f:3e:22:8b:d6:3d:d0:7a:6d:4f:b0:ba:b2:de:d1:
99:ed:f6:85:a6:c8:5f:98:39:9a:86:7d:bd:3a:da:80:bb:85:
da:13:5f:42:c0:a5:95:6f:92:3d:9a:95:21:27:4f:98:38:53:
a0:f9:69:34:1d:0b:34:16:f5:2a:c8:7e:cc:fc:4f:a8:c3:71:
0b:95:78:a5:00:ac:83:ec:eb:87:4c:df:72:52:b8:2a:d9:d8:
9a:b7:b2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:28:40 2025 by rpki-client