Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/OppVzshxdOhBLLjMkNhCIt8tnns.roa
File: OppVzshxdOhBLLjMkNhCIt8tnns.roa (raw, json)
Hash identifier: zMsWxPJYasvtfFCZXzAcDVddszQ4sUwUgXlLPcwPcKw=
Subject key identifier: 3A:9A:55:CE:C8:71:74:E8:41:2C:B8:CC:90:D8:42:22:DF:2D:9E:7B
Certificate issuer: /CN=4ca66f3c0f25774e696d2a46723277eb961128c3
Certificate serial: 0197BD1735D8D870D559995B0452E48B8540
Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/OppVzshxdOhBLLjMkNhCIt8tnns.roa
Signing time: Sun 29 Jun 2025 19:08:24 +0000
ROA not before: Sun 29 Jun 2025 19:08:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8649
IP address blocks: 176.65.134.0/24 maxlen: 24
176.65.137.0/24 maxlen: 24
176.65.138.0/24 maxlen: 24
176.65.139.0/24 maxlen: 24
176.65.140.0/24 maxlen: 24
176.65.141.0/24 maxlen: 24
176.65.142.0/24 maxlen: 24
176.65.143.0/24 maxlen: 24
176.65.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bd:17:35:d8:d8:70:d5:59:99:5b:04:52:e4:8b:85:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3
Validity
Not Before: Jun 29 19:08:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a9a55cec87174e8412cb8cc90d84222df2d9e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:98:ac:25:c3:28:75:60:6d:f5:1e:10:ba:4a:
b3:be:87:8b:f0:ad:51:9a:0d:49:c9:a2:17:7d:01:
54:5a:e8:73:ff:98:2d:15:ba:b0:ed:43:b4:f7:c9:
83:c8:08:0f:f5:53:69:ba:7f:0d:8b:ff:c6:53:c5:
e0:07:4d:e0:da:93:98:31:14:ea:95:d2:db:b4:4c:
cd:a8:71:54:11:99:d4:e6:1e:6a:6a:b2:3d:93:d2:
a7:d9:c6:9a:bb:90:e2:00:e4:47:16:45:ad:61:e7:
b8:57:d6:52:eb:24:45:8c:5f:1e:a2:1a:e5:a5:05:
44:26:27:f7:bd:fe:60:7b:4e:a3:b7:93:43:f5:06:
c2:9f:ae:ed:eb:45:c8:c4:46:29:66:ec:f2:10:89:
27:3f:5e:f6:cb:c3:9d:00:85:9b:64:b5:6c:02:17:
b3:ac:dc:73:ab:06:c2:a6:1e:ec:fc:35:7a:74:41:
92:96:41:2d:ac:d2:24:f3:55:9f:dd:d2:6f:62:50:
10:0a:11:72:5b:b6:79:40:6a:bb:20:93:fa:ad:09:
d0:42:67:58:0c:e6:40:a2:28:71:69:93:6a:fa:09:
20:6c:44:6c:9c:4b:84:41:d3:ec:c4:05:12:fd:10:
be:bf:fb:b8:25:d7:6b:10:8d:11:df:8c:dc:6b:bf:
03:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9A:55:CE:C8:71:74:E8:41:2C:B8:CC:90:D8:42:22:DF:2D:9E:7B
X509v3 Authority Key Identifier:
keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/OppVzshxdOhBLLjMkNhCIt8tnns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.65.134.0/24
176.65.137.0-176.65.144.255
Signature Algorithm: sha256WithRSAEncryption
33:71:54:6c:23:8c:60:4a:19:7e:26:a1:be:3d:6a:8d:f3:37:
ae:1e:aa:f7:83:31:96:27:bf:20:d9:c3:51:df:49:d4:5f:f6:
c2:58:50:0c:2a:aa:6a:68:cf:7c:fc:1f:84:5f:cf:f3:8f:3c:
9f:f3:49:5c:11:88:b5:47:5d:10:53:31:6c:d6:37:b2:17:1d:
af:63:d2:1a:76:af:f2:e2:09:fc:35:c2:40:3c:a1:38:5b:ba:
22:90:c5:e8:4c:da:8d:98:4c:63:a5:b3:77:47:a8:f3:ac:64:
01:51:eb:c6:4f:63:06:89:16:6f:f4:95:3e:78:0f:0e:32:a7:
a9:ca:d3:a0:82:3b:58:c3:10:ec:15:0d:62:ab:f0:cc:09:32:
aa:cf:15:83:f2:95:f8:16:13:cf:f5:c1:91:fa:40:52:9a:ea:
43:02:b1:3a:97:b4:3a:7d:8e:ee:61:94:d3:9e:e9:98:51:46:
7e:9d:c0:76:e8:1d:da:d5:f7:ba:e0:21:d5:bc:f5:3b:40:7d:
1f:85:98:e4:2c:39:c8:bd:27:8d:10:e3:dd:96:22:e2:95:fd:
36:f3:cd:9f:74:38:90:07:94:ed:b3:64:c5:34:cd:53:44:08:
00:f7:1b:ca:b7:08:f4:ac:64:8c:1d:8b:82:1d:9e:dc:ed:9c:
32:91:4f:96
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 3 16:27:11 2025 by rpki-client