Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/O6xvWCBUga7-FqiTkcbjjkERn3M.roa
File: O6xvWCBUga7-FqiTkcbjjkERn3M.roa (raw, json)
Hash identifier: Ex9I/KCofpGYJuPcYtZo8RdLUREkSkzCY/zq/L57QkE=
Subject key identifier: 3B:AC:6F:58:20:54:81:AE:FE:16:A8:93:91:C6:E3:8E:41:11:9F:73
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 01997C87936C7BF74917138098BD257DDE2F
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/O6xvWCBUga7-FqiTkcbjjkERn3M.roa
Signing time: Wed 24 Sep 2025 16:21:23 +0000
ROA not before: Wed 24 Sep 2025 16:21:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41798
IP address blocks: 170.168.33.0/24 maxlen: 24
170.168.34.0/24 maxlen: 24
170.168.100.0/24 maxlen: 24
170.168.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7c:87:93:6c:7b:f7:49:17:13:80:98:bd:25:7d:de:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Sep 24 16:21:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3bac6f58205481aefe16a89391c6e38e41119f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2a:99:59:39:a3:c0:af:4b:b4:6b:9a:53:b4:
a6:40:3e:71:4c:04:b5:33:d4:39:78:4e:a8:dd:85:
d4:bf:c7:dc:38:64:31:35:e6:08:2a:2e:b6:d5:ea:
a9:8e:9e:16:a7:98:16:f2:ae:ed:ce:a0:fe:68:4c:
50:f0:3f:5b:a5:d8:d4:15:6f:a8:f2:50:24:45:5f:
a9:ae:97:44:3b:c3:da:3e:48:25:02:0e:e3:07:be:
00:4b:f9:97:09:ca:f2:93:9a:b5:4e:df:94:03:b0:
1b:6e:eb:03:51:27:95:62:48:6f:92:0e:ad:93:c8:
9d:15:31:4e:84:7f:74:3a:47:dc:67:2f:af:61:a7:
cf:26:66:9d:40:02:44:ee:2c:1c:0c:de:fa:7d:0c:
34:9b:73:64:18:2f:fd:66:e0:f3:24:83:7f:18:e5:
19:6d:d8:24:88:2f:6c:27:f3:25:d7:45:b7:5e:bf:
9e:15:8f:dd:a1:f1:be:89:68:ca:d4:cd:a8:a4:e3:
a1:11:34:57:19:f8:34:56:6d:09:85:d2:c6:82:f3:
5c:1a:07:01:f8:d4:52:77:c4:bb:00:9e:15:60:a4:
cd:16:c9:46:36:c7:ac:4a:84:48:a1:e4:c7:44:49:
59:7d:82:6a:32:dd:c5:73:b0:97:e9:bf:d7:33:e2:
5e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AC:6F:58:20:54:81:AE:FE:16:A8:93:91:C6:E3:8E:41:11:9F:73
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/O6xvWCBUga7-FqiTkcbjjkERn3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.33.0-170.168.34.255
170.168.100.0/23
Signature Algorithm: sha256WithRSAEncryption
84:6a:5f:f6:c9:a3:31:05:11:65:5f:83:37:c1:b6:d4:02:89:
65:49:2a:b1:81:f1:99:45:12:85:b6:ec:3c:05:c1:93:7b:2a:
fa:82:65:ff:06:82:bb:aa:e5:e4:f2:94:58:b7:46:2f:0e:9a:
19:39:19:fe:71:39:a3:33:51:27:ab:83:77:23:bc:15:3d:83:
62:1c:56:31:e0:8f:11:f4:18:8d:de:bc:57:64:d3:2d:a9:05:
48:16:11:ff:ce:97:f3:e3:f8:bd:cb:ad:5a:b5:e2:9d:61:c8:
ec:d7:bd:1f:f4:29:88:08:b4:d3:0d:89:9f:08:92:c0:64:10:
08:b8:3b:59:a7:c5:45:8c:ed:55:54:b6:3b:a5:a2:a5:43:aa:
42:79:ce:26:4b:93:01:dd:e6:76:dd:21:5c:a9:58:06:46:36:
b2:3d:d3:71:38:33:37:c6:b2:25:65:33:5d:2c:f7:33:4f:8c:
a9:cd:06:fe:8e:3d:6b:57:67:50:55:18:3e:ab:82:b5:23:a1:
bb:34:49:c8:00:0c:ce:ca:7a:2e:e6:2d:36:15:97:3d:4f:92:
87:67:47:23:38:37:10:7c:fc:26:14:bd:65:e7:9c:8b:c0:8c:
51:ea:06:f7:1e:92:a8:4f:f9:14:d3:23:9b:fe:73:43:18:1e:
61:18:4d:38
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:09:53 2025 by rpki-client