Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/OJTYVCe6Nl2AMokqA_ZhaYOcXsg.roa
File: OJTYVCe6Nl2AMokqA_ZhaYOcXsg.roa (raw, json)
Hash identifier: L52uPLShR43RNNFlhE29oNP/bVVxexGxpYNZAJRAog8=
Subject key identifier: 38:94:D8:54:27:BA:36:5D:80:32:89:2A:03:F6:61:69:83:9C:5E:C8
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 0199C059D9F96C32CAB3D836E3D0E12922A5
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/OJTYVCe6Nl2AMokqA_ZhaYOcXsg.roa
Signing time: Tue 07 Oct 2025 20:25:38 +0000
ROA not before: Tue 07 Oct 2025 20:25:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202656
IP address blocks: 103.147.170.0/24 maxlen: 24
103.148.141.0/24 maxlen: 24
103.149.85.0/24 maxlen: 24
103.152.175.0/24 maxlen: 24
130.49.5.0/24 maxlen: 24
130.49.14.0/24 maxlen: 24
130.49.17.0/24 maxlen: 24
130.49.22.0/24 maxlen: 24
130.49.24.0/24 maxlen: 24
130.49.31.0/24 maxlen: 24
130.49.32.0/24 maxlen: 24
130.49.39.0/24 maxlen: 24
130.49.42.0/24 maxlen: 24
130.49.47.0/24 maxlen: 24
130.49.51.0/24 maxlen: 24
130.49.55.0/24 maxlen: 24
130.49.60.0/24 maxlen: 24
130.49.62.0/24 maxlen: 24
130.49.68.0/24 maxlen: 24
130.49.70.0/24 maxlen: 24
130.49.81.0/24 maxlen: 24
130.49.84.0/24 maxlen: 24
130.49.89.0/24 maxlen: 24
130.49.92.0/24 maxlen: 24
130.49.96.0/24 maxlen: 24
130.49.101.0/24 maxlen: 24
130.49.104.0/24 maxlen: 24
130.49.110.0/24 maxlen: 24
130.49.111.0/24 maxlen: 24
130.49.122.0/24 maxlen: 24
130.49.125.0/24 maxlen: 24
155.212.34.0/24 maxlen: 24
155.212.44.0/24 maxlen: 24
155.212.46.0/24 maxlen: 24
155.212.53.0/24 maxlen: 24
155.212.55.0/24 maxlen: 24
155.212.60.0/24 maxlen: 24
155.212.63.0/24 maxlen: 24
155.212.67.0/24 maxlen: 24
155.212.74.0/24 maxlen: 24
155.212.75.0/24 maxlen: 24
155.212.81.0/24 maxlen: 24
155.212.82.0/24 maxlen: 24
155.212.89.0/24 maxlen: 24
155.212.92.0/24 maxlen: 24
155.212.96.0/24 maxlen: 24
155.212.101.0/24 maxlen: 24
155.212.104.0/24 maxlen: 24
155.212.115.0/24 maxlen: 24
155.212.117.0/24 maxlen: 24
155.212.122.0/24 maxlen: 24
155.212.126.0/24 maxlen: 24
170.168.207.0/24 maxlen: 24
170.168.212.0/24 maxlen: 24
170.168.223.0/24 maxlen: 24
170.168.228.0/24 maxlen: 24
170.168.238.0/24 maxlen: 24
170.168.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c0:59:d9:f9:6c:32:ca:b3:d8:36:e3:d0:e1:29:22:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Oct 7 20:25:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3894d85427ba365d8032892a03f66169839c5ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d9:6b:f5:97:57:9d:0f:61:0d:02:e4:6e:b9:
20:b8:0e:d8:ec:72:69:a4:46:cf:e6:96:b6:97:4a:
45:76:ad:7d:e8:f2:ce:aa:9b:ca:3e:9a:a3:14:5c:
cb:6c:30:a5:22:e5:f0:13:12:eb:1e:7b:c3:5e:fa:
39:82:48:5a:c9:7d:03:14:63:e4:d1:50:a9:3e:ce:
7d:b3:ee:4d:20:5c:43:ab:e4:b8:35:51:3b:91:9b:
01:2f:76:e9:cc:18:7b:b8:9f:86:ca:86:38:15:35:
e8:0f:13:9e:a0:fa:7e:1b:34:40:90:18:d7:a5:3a:
27:32:7d:5d:1b:c9:ab:14:1e:b4:5c:e1:f5:52:79:
7d:e9:6a:10:01:da:12:5e:7d:5e:16:4d:cf:a3:fa:
27:91:ef:87:38:86:e3:80:39:03:18:0a:4f:ef:33:
51:47:7a:d6:b0:ab:d2:1e:8c:4d:a9:04:5b:34:92:
08:9b:08:2c:d0:61:7e:54:17:75:ac:aa:80:08:2a:
2d:c4:72:63:53:0e:a5:3a:dc:08:b2:42:e6:40:10:
ce:59:f0:84:ec:6c:93:45:e1:ce:63:9e:16:5a:43:
d5:50:b1:34:6f:32:8b:51:d8:ce:e2:19:97:bc:03:
0e:61:30:6b:07:b7:e3:a9:2e:47:8f:3f:3a:60:7f:
87:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:94:D8:54:27:BA:36:5D:80:32:89:2A:03:F6:61:69:83:9C:5E:C8
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/OJTYVCe6Nl2AMokqA_ZhaYOcXsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.147.170.0/24
103.148.141.0/24
103.149.85.0/24
103.152.175.0/24
130.49.5.0/24
130.49.14.0/24
130.49.17.0/24
130.49.22.0/24
130.49.24.0/24
130.49.31.0-130.49.32.255
130.49.39.0/24
130.49.42.0/24
130.49.47.0/24
130.49.51.0/24
130.49.55.0/24
130.49.60.0/24
130.49.62.0/24
130.49.68.0/24
130.49.70.0/24
130.49.81.0/24
130.49.84.0/24
130.49.89.0/24
130.49.92.0/24
130.49.96.0/24
130.49.101.0/24
130.49.104.0/24
130.49.110.0/23
130.49.122.0/24
130.49.125.0/24
155.212.34.0/24
155.212.44.0/24
155.212.46.0/24
155.212.53.0/24
155.212.55.0/24
155.212.60.0/24
155.212.63.0/24
155.212.67.0/24
155.212.74.0/23
155.212.81.0-155.212.82.255
155.212.89.0/24
155.212.92.0/24
155.212.96.0/24
155.212.101.0/24
155.212.104.0/24
155.212.115.0/24
155.212.117.0/24
155.212.122.0/24
155.212.126.0/24
170.168.207.0/24
170.168.212.0/24
170.168.223.0/24
170.168.228.0/24
170.168.238.0/24
170.168.248.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:37:6a:49:1a:ec:e1:c5:84:5b:1b:34:8c:1c:e3:0c:36:42:
69:47:96:a8:36:08:0b:a0:b2:d0:15:d1:4f:6d:74:b7:b2:d9:
6e:5e:18:c8:22:58:5e:c2:55:1b:2f:34:23:08:50:cf:27:c5:
e7:26:17:f3:69:57:f6:19:47:ec:82:d8:51:2e:33:25:39:1b:
26:da:c7:0c:27:b2:83:1c:20:b3:ec:a5:e1:98:f3:5c:13:ff:
8d:40:0b:1d:b0:da:9e:b1:df:9c:3d:ab:a5:e0:f4:7d:ba:57:
28:37:75:16:b0:98:34:ed:ca:6d:12:8e:58:96:6a:8c:2c:4b:
52:e4:ef:e5:1d:35:4f:6a:ae:93:c3:0b:68:6a:74:38:dc:b3:
5f:05:29:01:c8:db:e0:d9:25:59:d9:c6:4d:6d:f8:a2:8f:f2:
b8:b6:bd:9a:ed:a8:31:a1:5c:84:73:86:45:08:6f:8d:88:ba:
c8:19:14:64:e7:87:c6:94:e9:68:bd:d8:e4:d5:6b:84:6c:cd:
84:ee:41:a4:08:96:df:eb:12:fb:d9:e0:c7:a2:27:07:e0:c5:
21:16:0b:ea:d6:67:61:c0:5e:1d:39:6f:8a:88:98:88:1a:6a:
a3:b6:6e:2c:b5:9d:f2:e5:18:f2:4c:f1:49:56:9a:ae:a6:2d:
07:10:42:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:10:02 2025 by rpki-client