Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/Oz1W0gA_gp2o0ksJWMkSuPbI3kg.roa
File: Oz1W0gA_gp2o0ksJWMkSuPbI3kg.roa (raw, json)
Hash identifier: LL/ivhxpLxJhJ9AWIntZGeKRbSlrt1Vlzwu4w7/JynA=
Subject key identifier: 3B:3D:56:D2:00:3F:82:9D:A8:D2:4B:09:58:C9:12:B8:F6:C8:DE:48
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0199B315976883F7309DCA9DA281C64AD0AA
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/Oz1W0gA_gp2o0ksJWMkSuPbI3kg.roa
Signing time: Sun 05 Oct 2025 06:36:00 +0000
ROA not before: Sun 05 Oct 2025 06:36:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44208
IP address blocks: 31.170.48.0/20 maxlen: 24
94.74.128.0/18 maxlen: 24
94.74.136.0/24 maxlen: 24
94.74.147.0/24 maxlen: 24
94.74.165.0/24 maxlen: 24
94.74.166.0/23 maxlen: 23
94.74.168.0/23 maxlen: 24
94.74.190.0/24 maxlen: 24
109.203.176.0/21 maxlen: 24
176.46.134.0/24 maxlen: 24
176.46.139.0/24 maxlen: 24
176.46.144.0/24 maxlen: 24
176.46.147.0/24 maxlen: 24
176.46.148.0/24 maxlen: 24
176.46.149.0/24 maxlen: 24
176.46.153.0/24 maxlen: 24
176.46.154.0/24 maxlen: 24
176.46.155.0/24 maxlen: 24
176.46.156.0/24 maxlen: 24
176.46.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b3:15:97:68:83:f7:30:9d:ca:9d:a2:81:c6:4a:d0:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Oct 5 06:36:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b3d56d2003f829da8d24b0958c912b8f6c8de48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e5:e5:96:df:cb:3f:1b:14:d1:6b:e7:82:a9:
b6:f6:ca:ad:7d:fb:59:45:bb:0f:62:72:5b:58:4a:
47:19:4e:0f:44:5d:77:07:fb:22:5e:ee:0e:ff:20:
44:a2:0d:17:8f:cc:2b:19:a1:94:86:b2:14:6c:d2:
6c:2c:44:fb:3a:e9:31:e3:bd:96:6a:44:c3:2f:e0:
29:72:36:c2:2a:14:53:70:6f:ab:ea:59:bc:f1:c5:
24:84:ea:4e:a7:52:0f:d8:2b:fb:22:f6:c9:69:98:
96:23:a7:45:15:bd:bf:84:28:24:88:ed:f9:23:49:
89:15:ae:91:90:c8:92:39:6d:ae:48:20:42:0f:98:
8d:04:f6:a3:ee:b8:a1:11:05:bf:b6:5f:7b:df:20:
4b:04:90:e9:93:6b:db:b3:b9:55:56:f8:32:c9:47:
f5:0a:3b:bf:19:ef:42:07:3e:6d:52:f5:e9:84:c3:
de:64:7e:2c:cd:0c:6a:95:cd:17:0e:f1:a2:62:44:
ec:66:72:f2:2b:06:03:ce:c2:b0:be:a2:5b:de:8e:
21:3f:6c:5d:07:61:23:3e:fd:c4:a3:5d:62:e7:af:
54:09:25:f1:1d:81:8e:b2:72:42:25:24:b9:c7:5c:
a6:79:39:09:99:b2:d1:02:71:4d:62:67:6b:c8:2a:
d4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3D:56:D2:00:3F:82:9D:A8:D2:4B:09:58:C9:12:B8:F6:C8:DE:48
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/Oz1W0gA_gp2o0ksJWMkSuPbI3kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.48.0/20
94.74.128.0/18
109.203.176.0/21
176.46.134.0/24
176.46.139.0/24
176.46.144.0/24
176.46.147.0-176.46.149.255
176.46.153.0-176.46.157.255
Signature Algorithm: sha256WithRSAEncryption
94:c9:21:77:95:3c:cf:e4:09:f1:f6:b3:1d:59:da:68:fe:c7:
1f:e2:33:ec:99:aa:d0:ce:87:97:0b:e5:24:ac:5c:59:85:4f:
ba:7d:eb:3e:66:20:3e:a6:dc:43:33:8d:92:83:59:ae:8e:32:
8b:12:1d:1c:b9:84:ee:ef:d4:40:f8:6b:24:3f:16:39:d0:17:
0e:f6:fc:4b:fe:56:4c:ce:7a:9b:4c:f5:8f:31:fc:db:fb:65:
75:4b:1f:4d:3c:98:62:40:4b:55:49:fb:95:69:bd:8c:f8:6a:
f2:66:8a:3a:d0:aa:ae:29:87:4a:13:ba:89:db:bf:0a:c3:48:
94:60:6d:fa:87:67:32:fc:35:71:60:03:74:05:a8:6b:4c:d1:
b2:c8:47:4b:cf:22:1e:95:de:06:26:3f:5b:25:c2:bc:47:10:
48:70:2c:31:2f:1a:52:8d:15:c0:c6:41:14:2b:6b:8f:08:36:
f3:e8:03:fd:f4:56:3c:82:92:ca:ba:9d:a0:2f:ed:b4:ef:a5:
46:8e:70:36:77:4c:fd:82:56:02:91:41:74:17:0f:14:1a:e8:
2a:f9:d1:ff:2c:d4:c6:39:df:1f:ba:99:c4:e3:01:c4:85:4f:
0b:e1:4a:6d:9d:60:c5:b2:9a:d0:57:02:9e:6d:af:e1:02:78:
0b:7c:7a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:29:02 2025 by rpki-client