Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/oswo9YKLg0u3JC1IbA7Gj8m0msI.roa
File: oswo9YKLg0u3JC1IbA7Gj8m0msI.roa (raw, json)
Hash identifier: iMLKS98/HXnStabev/m1xnD9F47lNw2WEBo8S/dBQpA=
Subject key identifier: A2:CC:28:F5:82:8B:83:4B:B7:24:2D:48:6C:0E:C6:8F:C9:B4:9A:C2
Certificate issuer: /CN=12a657f3424c8dd55215af853b93307c366c538a
Certificate serial: 0199F6752F41FDD7FB95D6ACFAB39E1F6BDB
Authority key identifier: 12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/oswo9YKLg0u3JC1IbA7Gj8m0msI.roa
Signing time: Sat 18 Oct 2025 08:34:58 +0000
ROA not before: Sat 18 Oct 2025 08:34:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211995
IP address blocks: 46.22.225.0/24 maxlen: 24
46.22.226.0/24 maxlen: 24
46.22.227.0/24 maxlen: 24
46.22.228.0/24 maxlen: 24
46.22.229.0/24 maxlen: 24
46.22.230.0/24 maxlen: 24
46.22.231.0/24 maxlen: 24
46.22.232.0/24 maxlen: 24
46.22.233.0/24 maxlen: 24
46.22.234.0/24 maxlen: 24
46.22.235.0/24 maxlen: 24
46.22.236.0/24 maxlen: 24
46.22.237.0/24 maxlen: 24
46.22.238.0/24 maxlen: 24
46.22.239.0/24 maxlen: 24
46.28.237.0/24 maxlen: 24
93.114.130.0/24 maxlen: 24
109.237.112.0/20 maxlen: 20
109.237.112.0/24 maxlen: 24
109.237.113.0/24 maxlen: 24
109.237.114.0/24 maxlen: 24
109.237.115.0/24 maxlen: 24
109.237.116.0/24 maxlen: 24
109.237.117.0/24 maxlen: 24
109.237.118.0/24 maxlen: 24
109.237.119.0/24 maxlen: 24
109.237.120.0/24 maxlen: 24
109.237.121.0/24 maxlen: 24
109.237.122.0/24 maxlen: 24
109.237.123.0/24 maxlen: 24
185.55.36.0/22 maxlen: 22
185.55.36.0/24 maxlen: 24
185.55.37.0/24 maxlen: 24
185.55.38.0/24 maxlen: 24
185.55.39.0/24 maxlen: 24
185.77.3.0/24 maxlen: 24
185.136.207.0/24 maxlen: 24
185.233.35.0/24 maxlen: 24
194.164.222.0/24 maxlen: 24
213.142.158.0/24 maxlen: 24
2a10:d880::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f6:75:2f:41:fd:d7:fb:95:d6:ac:fa:b3:9e:1f:6b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12a657f3424c8dd55215af853b93307c366c538a
Validity
Not Before: Oct 18 08:34:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2cc28f5828b834bb7242d486c0ec68fc9b49ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8e:0c:96:58:43:d8:83:69:a4:98:50:cf:06:
59:f2:40:96:9a:9d:e3:a3:0e:e8:53:8b:ce:ca:28:
83:42:fb:02:48:b2:f8:c0:60:46:51:60:84:1a:63:
aa:32:62:72:3c:4e:26:38:67:c4:79:da:3c:97:66:
74:d9:26:40:c0:a8:53:20:88:66:51:a8:b1:a3:fa:
0b:a1:65:fc:f6:41:61:8e:60:e9:f3:74:ad:e6:c7:
ac:df:6c:1b:1a:56:1b:97:d2:83:3e:c2:ea:c4:ae:
28:1c:13:38:42:72:01:49:99:d3:a2:68:7b:82:ad:
27:6b:3f:1b:e1:60:2e:fb:02:35:d6:cc:b1:e7:aa:
4b:a6:f2:c7:39:56:d0:a9:7f:47:a9:eb:25:40:32:
d3:6e:95:a9:55:7f:e8:e9:2b:e5:a2:e5:78:40:9d:
3c:5c:37:31:dd:90:16:de:2c:fd:73:c5:ca:79:f9:
6b:02:e4:5b:ba:f9:98:c5:70:07:d8:e9:6f:95:05:
7b:59:53:21:f9:ff:da:c0:4f:90:b0:95:23:6c:59:
5c:de:5e:aa:6a:73:f2:95:3d:9e:67:30:02:8e:7a:
8b:ff:8c:63:60:ee:19:aa:ac:40:8a:28:b2:cd:20:
15:37:f4:1a:bc:83:6d:f6:48:93:3c:c0:28:74:14:
c5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CC:28:F5:82:8B:83:4B:B7:24:2D:48:6C:0E:C6:8F:C9:B4:9A:C2
X509v3 Authority Key Identifier:
keyid:12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/oswo9YKLg0u3JC1IbA7Gj8m0msI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.22.225.0-46.22.239.255
46.28.237.0/24
93.114.130.0/24
109.237.112.0/20
185.55.36.0/22
185.77.3.0/24
185.136.207.0/24
185.233.35.0/24
194.164.222.0/24
213.142.158.0/24
IPv6:
2a10:d880::/29
Signature Algorithm: sha256WithRSAEncryption
69:14:98:e7:e0:05:4b:cf:ec:3d:f2:b5:ef:68:d8:88:c8:ff:
fe:6c:c6:19:ee:70:2c:dc:9c:03:41:06:4f:18:26:99:02:8f:
1d:db:fa:0b:a1:45:2a:1a:56:44:e5:57:91:39:7b:cd:17:59:
00:81:77:d1:79:91:93:a7:57:2d:f0:65:34:e1:5f:cd:78:8c:
93:a2:45:c6:17:cc:70:f3:2a:b0:55:34:04:f9:c0:15:dd:cb:
d6:b0:73:45:db:48:58:bd:93:5d:ed:5a:ea:e2:6d:48:11:aa:
e6:b1:b1:20:ae:82:ce:1d:30:f2:86:76:92:92:38:00:eb:9f:
52:5b:bc:88:ae:cd:fd:c6:9e:5b:38:29:0c:40:37:6a:ba:75:
60:8c:3f:c6:ae:e2:a1:6a:fd:d3:04:f1:64:4d:d0:d2:62:73:
42:32:79:5d:cb:1b:9f:77:c6:0e:2f:aa:f6:2f:54:a3:c2:a7:
ae:2d:ce:0f:c1:6a:6d:15:fc:a8:31:3b:b0:91:36:b6:e4:95:
dc:27:38:c7:74:09:c7:d6:cd:df:6e:7a:91:39:1d:3c:f9:bb:
6e:9f:24:32:15:ee:9b:15:88:8d:de:ba:a1:13:f6:78:75:c4:
f1:9f:cd:e1:a5:23:9b:b5:73:0a:95:61:45:91:1e:9e:2b:37:
2a:38:10:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:05:01 2025 by rpki-client