Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/oUkdx3aM2sWDa8gVcmp9BXY3y6Y.roa
File: oUkdx3aM2sWDa8gVcmp9BXY3y6Y.roa (raw, json)
Hash identifier: cnOYmJAa+uOx0J484NL29cWeGahwzJ9b+N/udhFQRhU=
Subject key identifier: A1:49:1D:C7:76:8C:DA:C5:83:6B:C8:15:72:6A:7D:05:76:37:CB:A6
Certificate issuer: /CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Certificate serial: 01989D67D5AFC8CB3C1326F81B07FE6422E6
Authority key identifier: 5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/oUkdx3aM2sWDa8gVcmp9BXY3y6Y.roa
Signing time: Tue 12 Aug 2025 08:31:24 +0000
ROA not before: Tue 12 Aug 2025 08:31:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214875
IP address blocks: 37.97.0.0/20 maxlen: 20
45.13.240.0/22 maxlen: 22
2a00:fd01::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:67:d5:af:c8:cb:3c:13:26:f8:1b:07:fe:64:22:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Validity
Not Before: Aug 12 08:31:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1491dc7768cdac5836bc815726a7d057637cba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:75:13:dc:3d:64:ac:f5:ad:48:c8:86:75:af:
c4:9f:ba:0c:c6:76:87:81:6a:04:ba:50:e3:fb:f1:
8c:e4:1d:2b:25:8f:e7:5c:9e:29:9f:02:b7:58:80:
61:31:b8:fe:44:68:f2:a0:fe:44:71:1d:69:f4:fb:
e5:fd:be:95:aa:8c:6d:b0:b6:a5:05:8e:45:d4:5e:
8f:34:65:98:18:bc:28:03:92:3a:57:78:60:79:f9:
49:d8:09:09:68:a4:be:24:00:3a:8d:bb:aa:c0:8f:
98:7f:66:e1:a0:b4:51:b0:7a:e2:f1:06:4b:a1:a1:
db:2b:a2:71:24:b9:a8:27:85:bf:58:08:49:f2:b3:
88:11:ca:2d:e2:c5:73:ff:a0:e4:31:da:b5:63:59:
ea:3b:65:d9:08:61:20:df:47:69:da:de:61:c2:eb:
6a:a0:70:74:2c:1b:7f:4c:1f:ce:cb:ec:77:51:e5:
7e:7d:e1:ef:a0:43:d7:72:1c:4a:27:67:4a:75:6b:
a5:d7:fe:e9:86:1a:93:20:a8:6a:73:da:0e:19:62:
c2:df:15:4b:41:f3:c5:5c:74:2c:67:a7:cf:9e:d2:
b6:ea:23:f7:37:d7:0b:5a:1c:c0:23:8b:3f:a3:16:
44:c6:49:65:f4:a9:5f:f7:cb:a7:26:0e:22:27:3f:
14:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:49:1D:C7:76:8C:DA:C5:83:6B:C8:15:72:6A:7D:05:76:37:CB:A6
X509v3 Authority Key Identifier:
keyid:5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/oUkdx3aM2sWDa8gVcmp9BXY3y6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.97.0.0/20
45.13.240.0/22
IPv6:
2a00:fd01::/32
Signature Algorithm: sha256WithRSAEncryption
54:ca:d5:8f:c8:68:e5:d0:f7:3f:93:7e:84:f6:a2:9c:e2:19:
10:ee:1f:82:e7:2e:69:3c:32:80:88:5d:4b:9a:91:12:65:44:
ec:88:99:ea:fc:96:85:2b:d8:6f:96:16:ad:d3:88:fb:a0:fc:
20:a5:dd:27:af:c3:58:72:59:b5:6c:e3:32:bb:11:99:74:34:
60:3c:00:35:83:83:67:55:1b:c4:c3:0a:6c:ca:9a:8d:57:3b:
68:a4:38:30:6d:21:8e:8e:2a:19:f6:72:4d:db:63:b4:16:45:
81:86:86:7e:ca:0c:d5:00:68:52:2e:37:48:37:cb:32:38:0e:
82:92:5b:04:62:1c:bb:1f:8c:50:69:0f:fb:ce:d0:2a:13:e4:
bf:f0:02:f8:8b:f4:50:e4:2c:87:45:5c:55:36:a6:a6:40:d6:
c3:5b:ff:ba:91:bb:90:b0:5a:eb:87:31:ef:7c:46:c1:88:58:
72:89:43:45:67:0e:fe:08:82:67:77:17:93:0a:3f:ef:c5:0b:
51:82:b3:5f:d4:56:b6:d4:a0:e4:94:e5:c0:0c:12:16:70:30:
21:58:f4:c0:8d:3b:7b:4e:84:36:40:41:7f:2b:a4:08:07:be:
9d:d2:3f:1d:1e:25:70:70:fa:b5:a8:46:60:90:d0:f6:d5:de:
e5:c6:2f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:32:22 2025 by rpki-client