Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/OStASbykJW00B09ik-YszmXQIrs.roa
File: OStASbykJW00B09ik-YszmXQIrs.roa (raw, json)
Hash identifier: WtLfbQMK5RomnIWBiuwJyhnhCZPxJP0f2NJT5b5t7b0=
Subject key identifier: 39:2B:40:49:BC:A4:25:6D:34:07:4F:62:93:E6:2C:CE:65:D0:22:BB
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 01989E98B61C00D5CAE957F29D191D1C9DC0
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/OStASbykJW00B09ik-YszmXQIrs.roa
Signing time: Tue 12 Aug 2025 14:04:24 +0000
ROA not before: Tue 12 Aug 2025 14:04:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 109.122.15.0/24 maxlen: 24
109.122.20.0/24 maxlen: 24
109.122.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:98:b6:1c:00:d5:ca:e9:57:f2:9d:19:1d:1c:9d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Aug 12 14:04:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=392b4049bca4256d34074f6293e62cce65d022bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f4:0a:46:27:6c:d4:6c:fd:71:bf:f8:80:3f:
4e:d2:c2:1f:8b:b9:a6:e2:98:b9:15:48:72:17:a7:
3f:54:c8:06:41:61:61:9a:76:a0:20:b1:18:8e:90:
2d:26:ce:a7:9a:43:f1:76:9e:91:92:37:1d:99:73:
b6:d6:6e:d0:cc:e8:ca:0f:c8:23:7a:1a:b7:d5:c6:
60:ea:19:a6:e2:93:f0:8d:36:6e:9c:8a:ff:45:a0:
29:d8:3c:dc:1a:62:cf:0f:c3:99:a6:2c:83:c0:b6:
27:fc:b2:f0:95:52:5f:cb:53:62:cf:78:dc:4c:b9:
56:21:87:46:43:bc:46:34:58:ec:5d:1f:d4:00:af:
11:8d:ff:62:b4:4a:2e:7b:6a:c3:33:0f:a8:df:d1:
79:c0:54:e3:53:7d:0f:33:ae:a9:4e:be:2e:21:63:
cb:91:6c:29:c3:9c:2d:e0:bc:ef:c7:f0:a0:eb:3f:
1f:02:98:17:54:65:d8:b3:02:32:7a:93:2f:bd:65:
c4:dc:a7:8a:09:b2:b2:ea:86:d1:d5:87:bf:56:ad:
f7:e7:3a:34:9b:75:8a:05:f6:fc:aa:d3:27:06:34:
a7:04:d9:b4:c8:de:2d:0b:7c:bf:27:80:6a:24:9b:
39:78:e5:ee:cf:32:6d:aa:ae:92:ba:f0:f5:62:8b:
de:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2B:40:49:BC:A4:25:6D:34:07:4F:62:93:E6:2C:CE:65:D0:22:BB
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/OStASbykJW00B09ik-YszmXQIrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.15.0/24
109.122.20.0/24
109.122.26.0/24
Signature Algorithm: sha256WithRSAEncryption
60:30:12:ae:69:fe:6c:95:e4:37:a2:70:6b:5f:25:5a:ee:88:
c7:fe:bd:46:97:2b:a4:60:27:13:0b:b3:51:b1:3f:04:68:aa:
dd:0b:e1:bc:47:65:3a:1f:fe:64:ce:9b:29:2e:10:47:9e:0f:
45:6c:b2:24:33:2e:ba:f7:d5:a9:82:aa:a7:e9:f3:f0:56:17:
6b:bf:85:93:20:dd:43:92:ac:1e:e5:b0:a4:13:d5:37:8f:13:
fa:ff:95:f5:4b:00:9a:73:16:60:ce:9f:1a:ad:ee:91:d0:88:
3d:6e:a3:3b:da:94:0c:1c:4c:dc:ea:52:48:4f:50:45:72:21:
31:d9:17:40:ca:04:cb:b3:c5:77:92:9c:ee:7f:23:34:49:5b:
9c:b4:bd:31:ad:7a:2a:45:c1:05:86:cb:61:4c:78:a7:de:62:
29:5d:8d:ba:cc:4c:25:d5:e6:6e:ce:01:3e:73:49:33:10:cb:
7c:ba:dc:af:0a:93:d4:42:6d:70:3a:06:2b:db:0c:2e:7e:71:
b6:3c:0f:73:48:36:1d:71:f6:c9:5e:cb:cb:33:40:f0:d0:fc:
e3:4c:e8:cd:bf:4b:3e:70:7c:4b:0d:8e:20:22:b9:05:d7:90:
eb:3a:ad:3e:81:b0:bb:1e:7c:c9:79:20:4a:01:aa:b6:ac:a8:
7f:4e:3f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:57:09 2025 by rpki-client