Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/OjWROZOBfglqGcsPu8gIQoMEzOA.roa
File: OjWROZOBfglqGcsPu8gIQoMEzOA.roa (raw, json)
Hash identifier: n2BvxqRtWJfpbsPjrcU5EJ6Ktfrcveck/JszxVqfxqg=
Subject key identifier: 3A:35:91:39:93:81:7E:09:6A:19:CB:0F:BB:C8:08:42:83:04:CC:E0
Certificate issuer: /CN=4ca66f3c0f25774e696d2a46723277eb961128c3
Certificate serial: 0198CE5E0308A61BFB51804D61DE46479690
Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/OjWROZOBfglqGcsPu8gIQoMEzOA.roa
Signing time: Thu 21 Aug 2025 20:42:04 +0000
ROA not before: Thu 21 Aug 2025 20:42:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8649
IP address blocks: 176.65.139.0/24 maxlen: 24
176.65.140.0/24 maxlen: 24
176.65.141.0/24 maxlen: 24
176.65.142.0/24 maxlen: 24
176.65.143.0/24 maxlen: 24
176.65.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ce:5e:03:08:a6:1b:fb:51:80:4d:61:de:46:47:96:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3
Validity
Not Before: Aug 21 20:42:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a35913993817e096a19cb0fbbc808428304cce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d7:49:00:a7:11:91:22:6b:08:85:49:26:6b:
ea:9f:ca:7f:1f:59:cd:3a:a8:4d:2c:27:95:a0:25:
9e:3c:5f:a9:bc:49:f8:46:42:b2:46:b3:ce:be:85:
8e:d8:49:87:cd:06:f6:d8:46:b7:5f:a7:d7:bd:c1:
d2:b6:b9:11:4f:43:a3:0f:df:57:e0:84:cc:4d:82:
50:ec:9a:fb:3b:63:84:b4:d3:90:48:74:e9:7c:40:
3c:7e:71:63:72:15:d2:1e:6e:5d:7a:91:69:b8:b9:
5d:76:59:89:10:f2:30:25:37:e9:6c:e7:cc:ae:03:
1a:f0:f6:d7:27:00:d9:3d:f6:ca:05:41:34:e2:36:
8a:7f:96:9e:36:8a:06:da:b0:81:39:b3:d9:26:a1:
2d:40:5c:9f:15:8b:57:51:d0:f9:bc:9c:dd:7b:9a:
28:04:3d:42:9e:03:10:ec:92:8d:99:66:d1:2a:5f:
2c:17:b6:db:70:3f:7c:6f:b3:30:a4:ec:02:63:14:
4f:fa:42:da:df:c9:99:b2:5a:fb:d6:2c:95:01:93:
8d:89:c5:9e:6d:45:61:2f:ba:f6:32:89:29:b2:05:
7b:28:87:a3:e3:5a:28:45:68:29:6d:59:6a:2b:2a:
c1:17:f6:15:71:64:e3:96:1a:a9:a7:38:b5:c2:62:
d9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:35:91:39:93:81:7E:09:6A:19:CB:0F:BB:C8:08:42:83:04:CC:E0
X509v3 Authority Key Identifier:
keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/OjWROZOBfglqGcsPu8gIQoMEzOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.65.139.0-176.65.144.255
Signature Algorithm: sha256WithRSAEncryption
6a:51:b6:85:f3:58:ef:2f:3e:31:b1:b0:8d:db:d2:bb:bf:c7:
b2:b6:9d:36:b3:aa:ef:6c:7c:35:bd:e8:e7:fa:cf:1c:e7:a6:
2b:c0:a3:74:cd:7b:f5:f3:27:6c:34:27:54:6f:22:12:1e:ca:
66:b1:b3:be:33:2a:44:be:6a:bd:6d:f8:6d:a7:76:34:26:da:
05:17:98:b7:1f:c4:be:91:2b:b0:30:25:3e:8b:41:49:a2:cb:
a2:4f:31:5e:df:25:ee:17:35:a0:42:52:7a:95:f8:38:76:4d:
55:77:5f:6f:97:79:e6:d2:fa:38:ca:cd:93:b2:18:3c:64:b5:
a1:ec:79:93:7f:21:23:51:b9:0f:ed:27:fa:e0:37:66:ee:cc:
9a:39:71:fe:2a:8c:fd:98:e5:94:a7:66:fc:8e:78:e9:1d:1f:
a1:77:ac:3d:19:f5:2f:5c:4e:1a:35:7b:e4:18:0c:64:02:26:
0d:0f:56:14:8d:3e:68:8a:42:78:26:81:47:da:bb:2b:26:3f:
27:1e:47:84:9c:ee:5e:60:fa:3e:31:02:8b:73:c8:b2:f0:e7:
7b:8c:66:f5:c3:5f:4c:a8:eb:81:e0:7b:f3:07:8d:65:47:28:
ba:86:b2:47:e4:16:7d:b4:75:d4:34:5d:53:89:36:13:10:6d:
f5:0d:7d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:05:21 2025 by rpki-client