Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/oWQjZS65WCcLUp_rizKZHEXxja8.roa
File: oWQjZS65WCcLUp_rizKZHEXxja8.roa (raw, json)
Hash identifier: ppbU5PBHwS7A+yU9U50SRApQ+OcnfPk2nBS7g+bHUiE=
Subject key identifier: A1:64:23:65:2E:B9:58:27:0B:52:9F:EB:8B:32:99:1C:45:F1:8D:AF
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0198A8C7D1A12984EA76469135632F857031
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/oWQjZS65WCcLUp_rizKZHEXxja8.roa
Signing time: Thu 14 Aug 2025 13:32:04 +0000
ROA not before: Thu 14 Aug 2025 13:32:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2856
IP address blocks: 213.209.146.0/24 maxlen: 24
213.209.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a8:c7:d1:a1:29:84:ea:76:46:91:35:63:2f:85:70:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Aug 14 13:32:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a16423652eb958270b529feb8b32991c45f18daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0f:b4:d5:66:32:83:04:29:59:e1:fa:51:e4:
f6:bf:47:1b:7d:77:3a:64:37:65:88:49:39:c8:50:
8a:a8:3f:a9:83:b5:5b:58:33:9e:c8:e9:6e:cb:14:
d4:5a:38:ed:9c:67:45:02:4a:ec:0f:c3:af:71:d9:
31:a7:72:ff:67:4c:65:03:1b:8e:5e:80:e6:fe:8d:
85:c3:f6:e8:c5:e3:92:82:99:47:fd:1e:be:27:c0:
0a:44:6b:47:83:87:00:62:3d:d8:29:38:a4:1d:f5:
b0:c9:e7:0b:f5:2c:ff:c1:8e:71:cf:11:86:c4:ff:
be:b8:6c:31:88:b0:d2:91:6e:dc:ad:55:48:2a:94:
10:a1:92:0e:19:57:7a:36:f8:c8:67:c6:13:78:99:
e5:0d:59:c9:34:3e:a1:b1:ef:e8:4c:dd:08:dc:54:
8b:2d:e0:dd:30:69:83:6a:6a:07:f7:fa:77:39:c2:
ce:e6:32:e6:66:8b:00:46:f9:88:fe:52:19:13:04:
cc:bd:7b:39:c1:e6:53:d4:30:35:d2:a4:c6:8f:4e:
e7:ff:ae:33:39:3a:7d:f0:1e:52:a1:31:9d:cf:b1:
73:6f:eb:33:7f:54:25:dd:30:23:fd:d6:5a:b7:0c:
68:70:ac:77:21:1e:7f:61:19:21:e5:80:dd:44:9a:
cf:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:64:23:65:2E:B9:58:27:0B:52:9F:EB:8B:32:99:1C:45:F1:8D:AF
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/oWQjZS65WCcLUp_rizKZHEXxja8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.209.146.0/24
213.209.149.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:86:15:55:af:d2:88:72:62:17:a7:57:3b:22:a2:f0:c1:bd:
bc:00:86:d9:73:c1:ad:4f:fb:e7:5d:6a:fa:13:e1:35:a2:74:
11:bf:b1:b7:c8:0e:f6:52:e1:08:df:9f:06:23:df:de:34:c3:
12:db:63:81:c8:de:06:ac:4f:af:20:85:d4:97:62:84:13:e1:
a6:24:ae:cb:a6:89:bb:c5:01:d0:e6:db:b5:71:ae:2b:4d:08:
36:d5:7a:e7:b0:dc:33:69:af:d5:f9:44:20:08:6f:ac:af:09:
72:f9:2a:15:42:f8:08:0b:de:43:97:27:17:27:32:1e:be:3a:
21:a3:ea:87:78:e0:aa:9a:3d:57:77:b8:7a:86:f9:66:27:3e:
34:b3:d1:cf:b9:49:0d:b2:41:1d:1a:4b:17:34:ed:f6:55:5d:
2e:e4:57:80:99:22:f5:6f:85:cf:12:d5:0d:a7:df:41:8c:1f:
5e:87:ad:7d:28:94:9e:6a:5f:16:fe:20:2e:e5:ec:cf:7d:b9:
e4:c1:46:49:35:b6:05:9e:ed:fe:d5:fc:ae:4a:33:ad:67:b8:
1e:cd:4a:ab:72:67:85:b6:74:ae:c6:51:a2:42:5d:49:3c:7d:
91:a6:02:d6:96:9e:af:da:e4:10:58:ba:dc:6d:31:3e:56:70:
08:ce:80:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:51:38 2025 by rpki-client