Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/oKTTmFz2VZLi967tcSvZmIIs2AY.roa
File: oKTTmFz2VZLi967tcSvZmIIs2AY.roa (raw, json)
Hash identifier: SfR3zp3XTbq1jCi7MDggmywX++xqnyV6ropCvUGTIV0=
Subject key identifier: A0:A4:D3:98:5C:F6:55:92:E2:F7:AE:ED:71:2B:D9:98:82:2C:D8:06
Certificate issuer: /CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Certificate serial: 01994E7CF2F941222D763A3719744D86208F
Authority key identifier: C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/oKTTmFz2VZLi967tcSvZmIIs2AY.roa
Signing time: Mon 15 Sep 2025 17:47:15 +0000
ROA not before: Mon 15 Sep 2025 17:47:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210895
IP address blocks: 45.66.11.0/24 maxlen: 24
81.91.177.0/24 maxlen: 24
185.224.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4e:7c:f2:f9:41:22:2d:76:3a:37:19:74:4d:86:20:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Validity
Not Before: Sep 15 17:47:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0a4d3985cf65592e2f7aeed712bd998822cd806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a3:1d:56:89:9c:69:ff:35:f5:0b:a0:67:55:
54:37:6b:91:ef:77:d3:31:aa:77:1b:84:65:a9:92:
24:90:57:0c:78:67:43:d5:55:bf:d0:e5:e6:43:15:
01:a6:2c:21:20:e1:11:e0:bd:63:56:67:04:a0:4d:
06:10:f6:b7:db:e1:a4:08:b5:41:7e:b4:fb:a0:cd:
e2:b1:0f:36:d9:04:31:77:df:90:a9:ea:3a:f3:5c:
a6:b6:d8:2c:d8:c8:19:37:cd:a0:ea:52:9e:27:e4:
76:5e:62:5d:62:43:7c:65:60:47:6a:c1:c1:a7:ea:
b2:98:35:30:80:2e:77:72:ef:08:05:0c:59:ec:74:
4d:d7:40:4b:f0:2b:a4:b7:a9:62:d2:67:77:a5:a5:
60:ce:d0:66:31:58:80:46:95:cc:39:ed:45:6d:c1:
67:f8:4d:25:f0:90:2f:2e:65:b8:72:07:8e:fc:77:
20:96:5b:19:95:9d:73:4d:64:7a:7d:42:68:fa:54:
9a:a9:38:59:6c:9a:22:e1:7e:b9:97:d1:5d:46:c2:
57:a2:e8:e1:a9:c9:fd:23:9e:4f:96:35:31:8f:44:
ab:e9:9f:d6:e6:a4:21:f0:17:55:5c:9d:14:57:23:
a4:51:63:54:fc:4d:1d:e6:d0:9d:2c:4b:84:ad:3a:
c2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A4:D3:98:5C:F6:55:92:E2:F7:AE:ED:71:2B:D9:98:82:2C:D8:06
X509v3 Authority Key Identifier:
keyid:C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/oKTTmFz2VZLi967tcSvZmIIs2AY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.11.0/24
81.91.177.0/24
185.224.132.0/24
Signature Algorithm: sha256WithRSAEncryption
17:fd:3c:4d:68:1c:07:b3:f6:bc:c8:6e:a8:7b:6e:85:de:32:
a5:a3:94:36:37:bb:32:92:7a:c3:8d:b4:d0:e0:80:25:dd:70:
cf:5c:4c:c5:4e:2b:47:13:28:7e:62:5b:7b:34:12:65:5a:84:
75:f3:48:81:9c:f6:e2:f5:8a:72:d7:79:05:62:91:95:ba:78:
8d:d4:51:2e:ec:eb:af:42:1a:45:f2:7f:50:e8:84:83:5a:43:
fe:6a:b0:4d:a5:33:50:4f:5b:03:9f:5d:f2:bf:33:cf:72:93:
41:69:fa:f7:ab:e5:58:9f:56:78:7f:0d:bc:61:c6:48:4d:17:
cd:5f:30:90:da:2a:d2:bf:10:ac:cc:1e:5f:ea:06:08:e8:3d:
36:3e:dc:bf:8a:a0:61:32:c9:65:ce:05:e6:2b:9a:1b:26:0c:
4f:29:ce:fc:8a:18:95:48:8f:ea:e6:d2:89:8c:c1:db:bf:98:
6f:d4:54:25:f0:17:3a:12:c4:c5:4a:cd:b6:7a:df:9a:b4:29:
84:ec:ac:2d:1f:d0:f9:cc:3e:c9:82:30:ef:9a:53:f9:2a:70:
31:55:85:16:78:d3:25:89:c6:3a:a0:a5:2e:dc:eb:d4:b9:d3:
c7:aa:d8:99:80:c5:5a:5b:3a:4b:f8:91:e3:03:e2:ef:45:0a:
f1:70:bd:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:09:04 2025 by rpki-client