Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/OSAriSpR9u8b37ghAQvH4U2-nSk.roa
File: OSAriSpR9u8b37ghAQvH4U2-nSk.roa (raw, json)
Hash identifier: LdkChach9boB8yIFLBj1mGu9wEQuIevuCxfpIyhuz2w=
Subject key identifier: 39:20:2B:89:2A:51:F6:EF:1B:DF:B8:21:01:0B:C7:E1:4D:BE:9D:29
Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Certificate serial: 0199E8FF24755A80878D5652CF95B6A3247A
Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/OSAriSpR9u8b37ghAQvH4U2-nSk.roa
Signing time: Wed 15 Oct 2025 17:50:59 +0000
ROA not before: Wed 15 Oct 2025 17:50:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138888
IP address blocks: 212.11.16.0/23 maxlen: 23
212.11.20.0/22 maxlen: 22
212.11.24.0/23 maxlen: 23
212.11.32.0/21 maxlen: 21
212.11.42.0/23 maxlen: 23
212.11.60.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e8:ff:24:75:5a:80:87:8d:56:52:cf:95:b6:a3:24:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Validity
Not Before: Oct 15 17:50:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39202b892a51f6ef1bdfb821010bc7e14dbe9d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:21:52:b6:52:0d:76:33:a7:2c:31:22:18:73:
7b:ee:51:1c:23:6e:f5:31:cf:39:66:3d:43:46:94:
11:09:60:37:ed:d8:65:24:fa:91:58:02:ce:e0:48:
c7:5d:ec:ab:c1:48:5d:c5:f0:90:6a:f7:33:c3:c5:
42:63:0e:c8:a6:98:d0:5c:1f:cc:13:79:2b:6c:85:
85:7f:fa:6c:31:e2:9c:a8:b8:13:15:3c:cc:dd:b5:
cd:d3:eb:73:af:e1:eb:34:b1:39:7d:89:f2:9e:e5:
6f:85:0d:69:d4:36:73:41:38:c3:d6:cf:13:0a:7a:
44:e7:d9:6a:d9:ec:e2:4d:12:b1:3e:d2:46:29:31:
f0:7b:cc:82:03:b3:66:93:f2:60:8f:ba:60:84:8c:
67:3f:f5:c5:05:d7:22:ce:97:f7:10:10:ca:68:b0:
87:c1:c1:3b:65:f2:3e:74:3e:81:9c:64:f2:0d:9f:
a7:a9:42:04:7c:f0:a9:51:8c:c7:1c:63:67:71:0d:
20:9e:ee:a5:89:1c:37:af:71:59:c4:4f:d1:3f:4e:
46:e1:dc:15:f8:7c:eb:9b:0a:d2:2d:c3:8b:8b:38:
7f:31:d7:19:26:3e:29:37:88:7f:e7:4b:55:9f:6c:
ef:dd:15:a5:ad:ae:b0:dc:51:57:f1:5c:ef:9b:82:
a0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:20:2B:89:2A:51:F6:EF:1B:DF:B8:21:01:0B:C7:E1:4D:BE:9D:29
X509v3 Authority Key Identifier:
keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/OSAriSpR9u8b37ghAQvH4U2-nSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.11.16.0/23
212.11.20.0-212.11.25.255
212.11.32.0/21
212.11.42.0/23
212.11.60.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:b1:e2:b4:13:3d:d8:b0:06:ae:c8:d9:9c:e1:da:d7:3b:af:
ec:d3:9c:7c:a5:e0:50:74:09:e6:00:19:2f:bc:67:0d:ef:9d:
6c:1d:e1:a5:a6:33:08:c8:7b:f5:6e:01:3b:7c:e7:0d:04:07:
21:78:52:d2:93:ab:5c:6c:9b:ed:d8:9b:c0:c0:e4:f2:9d:fd:
8c:0b:fa:54:8d:a2:8c:d9:d2:60:6c:46:09:bc:fd:3c:9b:b3:
94:94:73:17:2f:b2:46:ee:36:1a:97:38:a9:34:83:36:81:3f:
5b:b1:49:53:78:68:c0:85:85:a1:15:c6:59:2e:29:92:32:63:
3b:bd:a9:e8:b2:ca:38:fa:d8:f2:f1:ec:36:cd:c5:4c:b0:1b:
67:42:2c:9b:18:c3:36:91:f5:87:27:cf:4f:1b:1b:44:20:88:
68:17:b1:86:d0:1c:a9:b3:15:f3:5a:e9:6e:11:b8:20:28:38:
93:09:a4:68:2f:67:d6:21:a5:3a:2b:31:7f:7f:af:f2:06:6f:
fb:0d:34:6d:82:d0:c1:93:5c:4f:15:1c:08:b8:c7:cf:35:2b:
80:2a:b2:b8:43:aa:df:4b:62:7c:b5:d1:64:f8:3b:84:f8:f2:
38:e1:2c:75:fd:49:0e:20:cf:91:87:80:c2:aa:c0:ec:60:12:
3e:6a:36:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:15 2025 by rpki-client