Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/0Ozk8TSYbJ2ZWJegWuAygP_CL9U.roa
File: 0Ozk8TSYbJ2ZWJegWuAygP_CL9U.roa (raw, json)
Hash identifier: gB16aRWagR7Cxhmumf9ReGoxKMb5RK+zp1UcFQRekDw=
Subject key identifier: D0:EC:E4:F1:34:98:6C:9D:99:58:97:A0:5A:E0:32:80:FF:C2:2F:D5
Certificate issuer: /CN=24cacceee35ff87cd678ef6a92262cefce8492df
Certificate serial: 01987E55F5836B184E9F53D83549350A2B94
Authority key identifier: 24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/0Ozk8TSYbJ2ZWJegWuAygP_CL9U.roa
Signing time: Wed 06 Aug 2025 07:43:39 +0000
ROA not before: Wed 06 Aug 2025 07:43:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48944
IP address blocks: 5.23.112.0/21 maxlen: 21
95.130.56.0/21 maxlen: 21
95.130.56.0/24 maxlen: 24
95.130.57.0/24 maxlen: 24
95.130.58.0/24 maxlen: 24
95.130.59.0/24 maxlen: 24
95.130.60.0/24 maxlen: 24
95.130.61.0/24 maxlen: 24
95.130.62.0/24 maxlen: 24
95.130.63.0/24 maxlen: 24
109.72.192.0/20 maxlen: 20
109.72.192.0/21 maxlen: 21
109.72.192.0/24 maxlen: 24
109.72.193.0/24 maxlen: 24
109.72.194.0/24 maxlen: 24
109.72.195.0/24 maxlen: 24
109.72.196.0/24 maxlen: 24
109.72.197.0/24 maxlen: 24
109.72.198.0/24 maxlen: 24
109.72.199.0/24 maxlen: 24
109.72.200.0/21 maxlen: 21
109.72.200.0/24 maxlen: 24
109.72.201.0/24 maxlen: 24
109.72.202.0/24 maxlen: 24
109.72.203.0/24 maxlen: 24
109.72.204.0/24 maxlen: 24
109.72.205.0/24 maxlen: 24
109.72.206.0/24 maxlen: 24
109.72.207.0/24 maxlen: 24
109.238.176.0/20 maxlen: 20
109.238.176.0/21 maxlen: 21
109.238.184.0/21 maxlen: 21
109.238.184.0/24 maxlen: 24
176.67.64.0/20 maxlen: 20
185.11.176.0/22 maxlen: 22
185.193.208.0/22 maxlen: 22
185.214.36.0/24 maxlen: 24
185.214.37.0/24 maxlen: 24
185.214.38.0/24 maxlen: 24
185.214.39.0/24 maxlen: 24
185.226.132.0/22 maxlen: 22
185.226.132.0/24 maxlen: 24
185.226.133.0/24 maxlen: 24
185.226.134.0/24 maxlen: 24
185.226.135.0/24 maxlen: 24
185.246.4.0/22 maxlen: 22
185.246.4.0/24 maxlen: 24
185.246.5.0/24 maxlen: 24
185.246.6.0/24 maxlen: 24
185.246.7.0/24 maxlen: 24
2a02:d2c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:55:f5:83:6b:18:4e:9f:53:d8:35:49:35:0a:2b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cacceee35ff87cd678ef6a92262cefce8492df
Validity
Not Before: Aug 6 07:43:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0ece4f134986c9d995897a05ae03280ffc22fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:84:cc:b7:e1:16:c4:37:2d:56:ff:a5:c3:4c:
ed:68:63:1a:c8:fd:6b:fd:ed:f7:0c:0d:1f:88:f5:
9a:44:42:bb:b1:a9:62:71:cc:01:50:aa:e1:19:36:
2c:53:4f:a4:1d:2b:e9:76:2c:6d:af:e0:b4:37:57:
01:8e:bd:eb:a2:c1:8d:06:db:f8:33:e6:56:6c:62:
d6:59:de:57:20:ae:05:ca:95:1b:fb:45:8c:3f:00:
f1:0b:fa:54:d6:4c:b8:06:82:1d:35:5b:a1:bc:44:
f4:ee:f6:29:27:0b:d4:62:42:3a:7a:da:1b:c7:3c:
99:a6:66:5d:ee:5f:e9:f8:c7:0f:dd:ea:d9:ba:f4:
d2:18:6a:f6:44:c2:0c:7b:a9:38:08:6b:26:11:9b:
ee:51:1b:54:e9:07:31:12:e1:4a:c5:04:6c:6a:b0:
53:38:08:df:40:d6:07:6e:40:77:23:de:69:11:e9:
eb:89:48:83:e6:9e:41:0d:7b:cb:21:47:45:3f:7b:
fb:6c:ee:50:1e:fd:23:e3:3c:a8:e4:a8:25:e1:a5:
2e:39:c2:5f:f1:c8:0c:d8:42:aa:92:1d:8f:fb:1e:
e9:90:e8:2e:94:1c:b9:43:d1:0c:3c:13:74:7c:46:
1a:c7:d4:7b:d8:f1:d2:8b:4f:8c:cf:04:af:83:70:
d6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:EC:E4:F1:34:98:6C:9D:99:58:97:A0:5A:E0:32:80:FF:C2:2F:D5
X509v3 Authority Key Identifier:
keyid:24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/0Ozk8TSYbJ2ZWJegWuAygP_CL9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.23.112.0/21
95.130.56.0/21
109.72.192.0/20
109.238.176.0/20
176.67.64.0/20
185.11.176.0/22
185.193.208.0/22
185.214.36.0/22
185.226.132.0/22
185.246.4.0/22
IPv6:
2a02:d2c0::/29
Signature Algorithm: sha256WithRSAEncryption
40:a8:c3:3a:a2:c6:21:18:bf:7a:d0:fe:6c:6a:5c:81:bd:ea:
d7:d5:5a:7b:a6:77:15:9e:d7:3c:a6:a1:c6:8d:6e:81:4e:fa:
7a:46:75:df:c8:43:b7:c4:a2:cd:44:c0:f8:7d:4b:26:64:42:
e0:6f:77:42:36:aa:dd:d3:5d:2e:68:28:fe:d9:66:23:0a:02:
cf:7b:e0:f2:fc:a6:0e:9c:c8:8f:31:6b:82:47:20:84:00:8c:
50:81:fd:31:94:b0:87:c2:4a:dd:26:f4:5f:73:e3:68:cb:a5:
6d:8d:52:a8:5a:e0:a6:9c:e5:99:7f:7b:22:f7:7b:ef:d4:35:
d3:e5:4d:a0:dc:c4:e5:68:c9:5b:7c:7d:bd:30:30:8c:04:53:
64:95:6d:22:4d:e0:6b:1d:cf:65:8e:d1:51:ed:78:e4:ce:71:
2a:21:6a:7f:5a:cb:d5:9c:88:c7:b2:18:9c:5b:bf:5b:fd:a7:
69:4d:6b:9e:54:d1:6c:88:e7:79:02:1a:78:d8:3f:be:c1:d7:
2f:c1:cb:dc:c0:2c:ba:db:0c:25:15:65:2f:7a:6c:61:9d:fc:
3d:7e:93:05:19:7b:d3:71:3c:e9:ff:bd:1d:01:1c:99:05:00:
3c:38:25:3c:73:57:fc:e1:6c:53:91:1a:08:6a:32:f6:32:55:
4d:6e:30:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:30:44 2025 by rpki-client