Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/ODe-si4o2NeEMrjJt-yos-mYsdA.roa
File: ODe-si4o2NeEMrjJt-yos-mYsdA.roa (raw, json)
Hash identifier: 9SIcybriqERXEkNXTZbEEpNeoZYJSTz3U3cpSm3Fpeg=
Subject key identifier: 38:37:BE:B2:2E:28:D8:D7:84:32:B8:C9:B7:EC:A8:B3:E9:98:B1:D0
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 0198883BEA064459903774AEDE944EF5A7B5
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/ODe-si4o2NeEMrjJt-yos-mYsdA.roa
Signing time: Fri 08 Aug 2025 05:51:24 +0000
ROA not before: Fri 08 Aug 2025 05:51:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14445
IP address blocks: 109.122.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:3b:ea:06:44:59:90:37:74:ae:de:94:4e:f5:a7:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Aug 8 05:51:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3837beb22e28d8d78432b8c9b7eca8b3e998b1d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5e:8f:50:ea:a7:37:70:bf:0f:9e:5a:27:5e:
d5:59:cf:9d:1c:d0:e3:e7:49:19:87:92:d0:fc:b9:
70:f3:22:9e:30:1f:75:4d:03:be:7d:43:3d:6c:ad:
ca:80:f2:b3:2c:45:6d:c2:df:9e:a1:b1:dc:9a:97:
0f:f6:68:ad:69:64:cb:8d:57:5f:15:fa:d1:06:d0:
87:ad:88:ab:f5:9b:bd:8b:4e:17:ec:d7:7d:f3:db:
2f:16:cf:4d:af:93:37:83:20:fd:7c:1b:56:fe:a0:
1d:4d:02:fa:ea:2b:9e:a1:20:e2:01:6c:0a:5a:a0:
2f:8c:10:6a:ae:81:dd:84:16:79:51:78:b4:f6:4c:
4a:41:20:70:8e:a5:12:cc:fe:e0:17:f5:30:fc:3b:
55:87:03:17:38:7c:9e:fc:da:17:15:48:4c:9a:e6:
75:f0:4f:61:7d:cd:3f:db:80:58:ce:88:50:db:6d:
9c:04:94:d3:1b:81:54:99:f4:91:20:2e:a4:b9:1e:
2d:7e:58:31:5f:25:8b:9e:25:86:3f:12:aa:ff:a5:
11:fa:6f:aa:16:fe:ca:71:46:ac:44:7a:17:4c:1d:
44:58:87:90:83:75:88:80:a5:ea:bb:e0:c1:24:ed:
aa:ea:20:62:68:10:f1:c7:2b:85:fc:d3:63:a0:fb:
de:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:37:BE:B2:2E:28:D8:D7:84:32:B8:C9:B7:EC:A8:B3:E9:98:B1:D0
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/ODe-si4o2NeEMrjJt-yos-mYsdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.36.0/24
Signature Algorithm: sha256WithRSAEncryption
28:d1:00:3b:45:87:a2:eb:c0:21:86:17:98:16:57:97:0e:75:
bf:6d:dc:7e:ec:05:60:cc:ce:22:fd:c1:5c:53:a6:ab:7f:f1:
75:ef:bb:77:4e:5f:45:01:06:88:5d:c9:4a:cb:c5:85:b2:bb:
f6:35:13:71:a8:39:2c:54:c5:d7:db:58:1a:b8:a8:15:ad:70:
f2:3d:f8:66:ba:d3:9f:45:7d:66:85:35:62:9e:fa:1b:2e:ed:
42:11:33:7d:ab:93:26:24:b1:6d:44:32:39:0c:b4:e4:12:d7:
a7:6b:90:f0:06:50:a6:c1:82:9b:fe:d6:1d:b6:cc:0e:2a:ec:
cb:2b:a3:88:4f:89:fc:09:27:46:77:35:2f:30:b5:86:a5:e3:
30:40:62:d3:bb:55:fc:c7:5c:50:bc:45:ff:62:5e:59:b2:3b:
77:be:e8:06:ea:2c:99:28:9c:d4:aa:a7:00:f9:8b:bb:b5:93:
b4:1f:25:98:d1:99:01:6a:31:cc:a7:e2:64:a6:05:b3:9a:b3:
39:00:6a:29:69:04:2b:3f:24:36:df:dd:04:f8:0b:2b:ca:27:
02:e8:5f:3d:ff:23:80:6b:74:47:36:4b:ad:df:39:48:1c:52:
4d:65:7f:52:a3:46:17:ab:ff:a8:51:b2:78:bc:af:92:cb:12:
33:ee:bb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:46 2025 by rpki-client