Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Oz3HsNbB7oKzUdq8JIrSV26X4kc.roa
File: Oz3HsNbB7oKzUdq8JIrSV26X4kc.roa (raw, json)
Hash identifier: 0ebpmFJ3WNSrxh1xBKmknuB8WyQ6cVG8amjKotUdrfk=
Subject key identifier: 3B:3D:C7:B0:D6:C1:EE:82:B3:51:DA:BC:24:8A:D2:57:6E:97:E2:47
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01977E414BCB158BAA381251EAC4EBE36393
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Oz3HsNbB7oKzUdq8JIrSV26X4kc.roa
Signing time: Tue 17 Jun 2025 14:18:17 +0000
ROA not before: Tue 17 Jun 2025 14:18:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395047
IP address blocks: 82.115.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 17:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:41:4b:cb:15:8b:aa:38:12:51:ea:c4:eb:e3:63:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jun 17 14:18:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b3dc7b0d6c1ee82b351dabc248ad2576e97e247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:37:bf:c4:74:53:ac:a6:82:21:64:e0:49:5e:
40:15:0e:e3:2a:36:f7:4a:66:8b:d3:43:7e:e6:f3:
bd:9c:f1:58:1c:8d:18:53:d5:3c:57:d7:19:29:39:
70:77:26:dd:7f:b5:07:73:33:da:1a:cb:ac:2d:0b:
1b:87:c3:a5:91:8d:67:d8:17:7b:ae:cc:a6:8b:83:
b9:bc:1a:ee:86:13:3e:8f:af:16:a2:1f:ce:d4:91:
f4:e7:4a:21:be:ae:53:ff:b5:e4:a6:dd:35:e5:6b:
e9:02:c1:09:69:71:e8:80:6a:8b:5d:6a:77:72:c8:
e1:3f:66:0b:33:ef:30:87:71:93:13:93:a4:ed:8b:
41:ff:79:a3:82:ae:f3:d2:1f:f3:e5:99:16:06:a1:
07:15:62:5f:c1:90:91:22:14:4f:34:b8:a9:42:71:
07:01:6a:c9:ff:a0:97:fa:56:41:29:a0:ad:45:3b:
ab:c6:aa:e5:7d:95:11:64:94:63:81:ec:24:98:13:
d4:6b:1f:73:18:fa:9a:9d:de:8d:5c:48:0a:b2:bd:
37:25:96:4b:92:87:6f:f8:12:30:29:af:f2:6b:ba:
18:8d:e0:93:1c:47:27:f9:57:4f:4a:b8:ba:26:61:
14:2c:fc:ac:1d:c6:7e:87:69:aa:a4:53:bc:60:ac:
0a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3D:C7:B0:D6:C1:EE:82:B3:51:DA:BC:24:8A:D2:57:6E:97:E2:47
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Oz3HsNbB7oKzUdq8JIrSV26X4kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.9.0/24
Signature Algorithm: sha256WithRSAEncryption
56:7b:6a:2f:e2:fe:b9:1b:e8:0b:64:30:2c:97:f7:75:e2:c9:
84:90:c3:9a:d3:01:5e:96:67:ce:c5:c0:39:80:7a:6a:f5:c5:
4a:f5:0a:ed:61:4b:c0:c3:59:d4:07:9b:d0:ab:ff:01:c7:53:
c6:ee:be:7f:3e:79:ec:85:91:44:7b:c6:4b:1b:7f:37:3e:9b:
1b:79:90:7b:78:43:1f:66:74:51:8d:ca:00:b2:8a:24:c4:3d:
43:82:3a:84:f0:70:d9:85:84:38:79:62:8c:55:d6:d7:46:26:
cc:40:aa:1e:e2:c8:83:cb:68:e3:35:81:33:bf:58:d6:fc:95:
54:f0:a6:ea:0e:3c:bd:82:cc:54:83:5c:05:1a:bf:5b:e6:f2:
21:03:63:72:b5:e9:2e:22:45:6e:38:40:92:75:d8:85:28:76:
22:d1:34:b6:ee:b6:6c:53:87:52:31:67:f7:a1:88:a1:6d:76:
bf:fc:f9:d1:e3:40:c1:b8:d5:70:64:e7:64:eb:7b:bc:77:fe:
c8:a5:ea:a6:1d:76:a2:08:f6:8a:c7:dc:b5:ab:d4:f7:05:06:
e4:e5:8b:ac:45:54:60:fb:79:11:7e:4b:50:d4:2e:b4:3e:39:
ea:ba:74:27:06:52:2c:1f:5b:dc:6e:e7:f3:72:be:5e:f5:45:
c8:04:c8:a1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZd+QUvLFYuqOBJR6sTr42OTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjUwNjE3MTQxODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjNkYzdiMGQ2YzFlZTgyYjM1MWRhYmMyNDhhZDI1NzZlOTdlMjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjze/xHRTrKaCIWTgSV5AFQ7jKjb3
SmaL00N+5vO9nPFYHI0YU9U8V9cZKTlwdybdf7UHczPaGsusLQsbh8OlkY1n2Bd7
rsymi4O5vBruhhM+j68Woh/O1JH050ohvq5T/7Xkpt015WvpAsEJaXHogGqLXWp3
csjhP2YLM+8wh3GTE5Ok7YtB/3mjgq7z0h/z5ZkWBqEHFWJfwZCRIhRPNLipQnEH
AWrJ/6CX+lZBKaCtRTurxqrlfZURZJRjgewkmBPUax9zGPqand6NXEgKsr03JZZL
kodv+BIwKa/ya7oYjeCTHEcn+VdPSri6JmEULPysHcZ+h2mqpFO8YKwKWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDs9x7DWwe6Cs1HavCSK0ldul+JHMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvT3ozSHNOYkI3b0t6VWRxOEpJclNWMjZYNGtjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUnMJMA0G
CSqGSIb3DQEBCwUAA4IBAQBWe2ov4v65G+gLZDAsl/d14smEkMOa0wFelmfOxcA5
gHpq9cVK9QrtYUvAw1nUB5vQq/8Bx1PG7r5/PnnshZFEe8ZLG383PpsbeZB7eEMf
ZnRRjcoAsookxD1DgjqE8HDZhYQ4eWKMVdbXRibMQKoe4siDy2jjNYEzv1jW/JVU
8KbqDjy9gsxUg1wFGr9b5vIhA2NytekuIkVuOECSddiFKHYi0TS27rZsU4dSMWf3
oYihbXa//PnR40DBuNVwZOdk63u8d/7IpeqmHXaiCPaKx9y1q9T3BQbk5YusRVRg
+3kRfktQ1C60PjnqunQnBlIsH1vcbufzcr5e9UXIBMih
-----END CERTIFICATE-----
Generated at Thu Jul 3 03:03:28 2025 by rpki-client