Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/oWc3B6RGO7S9pWcq4HKnbJyfKDk.roa
File: oWc3B6RGO7S9pWcq4HKnbJyfKDk.roa (raw, json)
Hash identifier: dicu1vprnt1mxmGFnS2f3yDtWezJRT6KC1umgv5QkRo=
Subject key identifier: A1:67:37:07:A4:46:3B:B4:BD:A5:67:2A:E0:72:A7:6C:9C:9F:28:39
Certificate issuer: /CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Certificate serial: 01999A420847783AB495C520B202C1A4F2F2
Authority key identifier: 6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/oWc3B6RGO7S9pWcq4HKnbJyfKDk.roa
Signing time: Tue 30 Sep 2025 10:54:02 +0000
ROA not before: Tue 30 Sep 2025 10:54:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8881
IP address blocks: 92.116.0.0/15 maxlen: 20
109.250.0.0/16 maxlen: 20
185.235.232.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9a:42:08:47:78:3a:b4:95:c5:20:b2:02:c1:a4:f2:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Validity
Not Before: Sep 30 10:54:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1673707a4463bb4bda5672ae072a76c9c9f2839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:70:34:c2:47:ae:67:55:3d:d2:a2:2e:d2:a1:
22:ca:b5:a7:4d:b5:c9:5f:87:74:c5:c0:21:bc:6d:
45:da:ec:6c:08:aa:7a:b9:04:4d:19:b1:1f:89:28:
ed:e5:89:b4:63:75:b2:87:f5:d8:89:6d:5a:84:bb:
2c:7b:c4:66:f1:ed:1e:2f:6e:df:38:a4:4f:34:c1:
88:62:b5:25:eb:75:6b:cc:1e:61:ab:73:c8:8a:6f:
ed:b7:bb:f1:24:2c:a6:26:d5:ef:13:f5:e2:d0:ee:
d9:61:1d:57:f3:4a:cc:e0:24:a8:fe:18:17:4b:ee:
bd:40:12:25:20:af:86:be:d0:ee:2e:9b:06:5e:e8:
15:e7:be:3a:21:c0:f6:c9:74:96:b5:d8:b8:39:eb:
41:e0:42:db:3a:25:cc:17:1c:d1:6b:26:1d:10:b2:
26:f7:0c:0a:8d:10:29:34:4f:8c:92:3c:77:d0:fc:
2f:22:42:ef:1a:37:f3:b7:9b:78:44:91:75:ec:89:
4c:dd:0d:b4:c3:8b:29:4e:35:6c:12:e3:39:16:6e:
4a:6a:dd:26:4f:f8:3a:c7:99:33:af:64:36:68:ea:
f1:92:0c:9f:6f:7e:35:51:09:bf:41:fe:8b:9b:65:
4f:ef:54:f5:ce:29:60:0e:14:69:27:7b:18:36:d3:
46:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:67:37:07:A4:46:3B:B4:BD:A5:67:2A:E0:72:A7:6C:9C:9F:28:39
X509v3 Authority Key Identifier:
keyid:6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/oWc3B6RGO7S9pWcq4HKnbJyfKDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.116.0.0/15
109.250.0.0/16
185.235.232.0/22
Signature Algorithm: sha256WithRSAEncryption
98:a6:47:a3:d6:4e:31:fb:c8:44:a0:43:0d:9a:45:4a:bb:4e:
a5:04:46:7a:54:d3:6e:b5:11:75:1c:70:76:60:8b:7a:42:16:
c9:21:e5:62:39:c4:89:6d:65:7c:1e:b2:b9:63:80:27:00:10:
b6:5e:b1:47:f4:e6:af:54:d8:f1:15:d9:c5:06:d3:18:69:f9:
70:4d:78:6f:66:75:56:12:18:29:0b:6f:0c:af:80:72:94:c6:
de:af:f7:3b:b6:92:76:a9:6f:f9:c5:3d:63:22:21:52:bf:b8:
a2:67:92:41:fc:1d:b8:e9:1f:f6:22:dc:49:1f:76:ec:c3:8d:
84:e0:3a:d9:7a:c5:cb:c4:08:55:1e:cb:b1:e2:4b:8c:a1:31:
f2:15:24:47:53:58:f6:66:d0:04:dd:c4:dd:62:8e:8b:18:48:
b0:f2:61:ba:a1:81:52:ff:52:88:8a:2d:d6:56:de:33:d1:e7:
95:56:fb:25:20:3a:58:03:48:c3:0a:b9:4c:f4:43:40:ae:be:
57:36:3a:3d:f3:fb:7d:37:04:23:e4:5d:00:aa:18:f8:cb:fb:
ff:b8:aa:9d:b7:bf:45:b3:6e:5c:9f:46:bf:f0:b5:63:f5:08:
b0:f3:6d:d1:c1:78:ac:0f:45:33:9e:41:38:38:c1:8a:21:3f:
50:c7:fc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:28 2025 by rpki-client