Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/oZF03SCszKU2cMFKPHn0SejT3WE.roa
File: oZF03SCszKU2cMFKPHn0SejT3WE.roa (raw, json)
Hash identifier: MKtFJeKMbxiX1UyJd+qjchXyf2ETcu1hFYsMiuf1WXA=
Subject key identifier: A1:91:74:DD:20:AC:CC:A5:36:70:C1:4A:3C:79:F4:49:E8:D3:DD:61
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0198A2824C60DD3A0AF182106DDA0F5A5D14
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/oZF03SCszKU2cMFKPHn0SejT3WE.roa
Signing time: Wed 13 Aug 2025 08:18:24 +0000
ROA not before: Wed 13 Aug 2025 08:18:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401838
IP address blocks: 109.121.36.0/24 maxlen: 24
109.121.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a2:82:4c:60:dd:3a:0a:f1:82:10:6d:da:0f:5a:5d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Aug 13 08:18:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a19174dd20accca53670c14a3c79f449e8d3dd61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:32:97:ac:5f:d7:bc:42:91:38:45:bb:99:ca:
d1:fd:bb:40:37:f8:9a:24:9c:0c:ba:a9:23:d5:4a:
53:89:47:12:37:db:52:30:d9:ab:ba:40:b4:6d:c0:
71:1f:30:31:2f:a0:db:f8:73:9a:40:ee:06:ef:8f:
fd:74:bd:22:30:bf:7b:81:18:10:3b:0b:14:dd:3f:
2c:9e:95:5d:a6:df:d4:bb:c2:70:2a:86:ce:0f:62:
ee:93:72:92:38:c5:24:57:b3:b3:5d:ab:3d:ad:51:
48:cc:0c:86:8d:22:3e:4c:a6:7b:72:a2:7e:bb:c8:
84:c0:8e:9f:70:90:94:4b:af:19:1d:f2:d9:bd:80:
00:a1:0f:4a:a1:69:0c:9f:f5:78:99:6b:6e:3e:37:
02:ac:45:79:8b:22:85:db:d3:d0:de:37:01:64:ec:
1d:d1:44:d5:61:34:77:66:46:3f:46:df:52:6c:23:
61:5b:56:bb:b1:46:81:de:13:a3:25:6d:ca:de:b3:
c6:45:da:23:e8:d8:25:a0:d0:b7:ed:66:e0:b4:3a:
b0:1b:69:a8:96:80:74:50:15:df:e0:05:32:3d:40:
a0:ed:3c:b1:d5:c1:72:5e:df:30:f5:be:ea:30:71:
39:5a:86:eb:d9:1b:8e:ce:8d:85:25:de:cf:d9:f5:
10:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:91:74:DD:20:AC:CC:A5:36:70:C1:4A:3C:79:F4:49:E8:D3:DD:61
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/oZF03SCszKU2cMFKPHn0SejT3WE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.36.0/24
109.121.38.0/24
Signature Algorithm: sha256WithRSAEncryption
39:af:68:40:f3:3b:af:5e:6d:34:5e:47:25:e3:63:dd:ce:33:
87:0f:03:ae:fb:ef:e1:d3:fd:6f:f5:52:45:e3:e2:23:48:f4:
66:df:eb:ec:b6:ff:a0:05:2b:45:3c:4a:a6:79:65:80:25:ae:
d0:bc:08:71:b0:10:92:66:4b:05:d3:ae:7e:2d:31:8b:f0:c5:
0d:56:b4:46:8e:01:99:83:1c:2f:8c:05:95:e5:00:8d:38:86:
cc:a1:f9:46:df:f8:60:67:b0:5e:43:0a:e0:a2:43:1d:b0:27:
5b:8a:46:71:58:9c:a6:d9:a4:5b:93:64:a6:1c:37:9d:e6:15:
43:d5:fe:55:7b:ca:6c:2c:75:8e:40:a3:00:d1:d5:10:0f:a9:
f6:3b:a5:c8:86:b8:f6:30:64:3d:73:73:46:63:2c:cb:c4:3f:
fc:f9:86:18:15:cd:e7:8a:bc:aa:37:0c:bc:1d:c6:b0:7a:d6:
db:cb:40:b5:fb:56:a5:1a:57:fd:1b:04:4b:23:dd:c3:2c:14:
47:ad:f5:67:35:06:f7:fb:86:59:63:88:6d:01:0b:63:7e:86:
94:82:b8:8a:86:88:44:48:2d:06:01:9c:bb:8e:f0:f4:26:1b:
8f:c6:35:1b:57:f3:4b:6f:93:2e:1c:54:65:b0:4c:c1:c7:65:
c1:86:06:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:42:04 2025 by rpki-client