Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/oQ5fumIcVB85Uy2dYh229j_WaHg.roa
File: oQ5fumIcVB85Uy2dYh229j_WaHg.roa (raw, json)
Hash identifier: vl4buX4gY0bD8VM1N3aDm+YQLtmBqcCMCCyk6V68GNc=
Subject key identifier: A1:0E:5F:BA:62:1C:54:1F:39:53:2D:9D:62:1D:B6:F6:3F:D6:68:78
Certificate issuer: /CN=afe662b2e97fd2bda91f32b2cce9e745cba58602
Certificate serial: 01987F558B724F7A7DE75A62C99E6CF23062
Authority key identifier: AF:E6:62:B2:E9:7F:D2:BD:A9:1F:32:B2:CC:E9:E7:45:CB:A5:86:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Zisul_0r2pHzKyzOnnRculhgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/oQ5fumIcVB85Uy2dYh229j_WaHg.roa
Signing time: Wed 06 Aug 2025 12:22:49 +0000
ROA not before: Wed 06 Aug 2025 12:22:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202561
IP address blocks: 164.138.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-Zisul_0r2pHzKyzOnnRculhgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:55:8b:72:4f:7a:7d:e7:5a:62:c9:9e:6c:f2:30:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe662b2e97fd2bda91f32b2cce9e745cba58602
Validity
Not Before: Aug 6 12:22:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a10e5fba621c541f39532d9d621db6f63fd66878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:64:9d:bf:7c:ba:94:8d:a8:a3:fc:c3:af:33:
48:22:2d:0d:2e:17:aa:d5:fd:05:63:ed:28:54:0b:
0c:37:95:9a:41:83:48:b6:44:e2:a5:7a:13:92:01:
9e:62:f6:e4:08:84:54:fc:97:f4:ec:77:4f:6a:1b:
ea:0d:ab:57:6c:ec:e1:1e:0a:88:0f:2d:2a:c2:c8:
5b:7d:b7:76:a6:2f:c8:e0:00:e9:c1:27:b7:6f:fb:
13:61:dd:49:16:b8:5b:0d:b4:9e:09:19:e5:d7:f5:
75:27:5e:5e:a0:0a:cd:d0:a9:19:05:3b:93:f7:f4:
43:77:d6:85:8e:bf:77:f7:5f:b6:d6:88:1e:0b:35:
ab:bc:9b:98:d4:eb:50:e2:21:37:88:d1:84:65:7e:
4d:fa:d5:1f:1b:54:20:a4:bc:25:b4:b4:3b:9b:88:
2b:6e:07:d4:40:85:fb:2c:b0:d2:db:fa:db:8f:0b:
ce:f8:02:ce:92:52:f2:d1:9f:d9:0f:78:a1:64:a0:
5a:3f:c8:29:44:f0:d7:8b:88:8e:59:5d:17:b9:c1:
29:df:1f:a0:91:79:ed:ac:59:28:c0:ae:36:f2:3c:
63:c6:82:1f:7e:44:92:56:11:a6:62:6f:b7:99:2b:
71:2d:30:d7:fb:75:dd:b4:d8:ce:18:12:bd:a4:5a:
e3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0E:5F:BA:62:1C:54:1F:39:53:2D:9D:62:1D:B6:F6:3F:D6:68:78
X509v3 Authority Key Identifier:
keyid:AF:E6:62:B2:E9:7F:D2:BD:A9:1F:32:B2:CC:E9:E7:45:CB:A5:86:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Zisul_0r2pHzKyzOnnRculhgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/oQ5fumIcVB85Uy2dYh229j_WaHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.138.207.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:a1:a2:a1:f3:2b:7c:b3:03:c2:87:c6:9c:ec:6b:30:66:b2:
9c:e0:c9:a9:51:fb:21:7e:76:cf:73:1a:c2:57:fe:5b:9f:fe:
b1:13:af:70:8b:ce:eb:dd:d9:21:c4:ef:f5:c2:e9:8f:c3:e5:
5d:f8:bf:7d:68:b0:6c:3f:d5:d8:65:b8:4e:70:57:19:c5:8f:
1e:05:2d:42:f5:28:0a:89:2a:c7:1d:d9:bd:b9:c8:74:41:e8:
9e:72:ba:5d:d3:61:e3:fe:cf:b1:12:3e:e5:73:6b:6a:8e:23:
cc:cb:52:c0:c0:31:2f:a2:83:39:ad:3f:72:7c:a7:70:c8:84:
e6:6c:e1:bb:9f:bd:9a:aa:45:cf:c0:16:2e:a2:d7:89:fd:a6:
64:85:bf:35:f3:5d:ac:05:88:f3:c0:3b:52:f5:31:6b:08:3e:
20:76:74:6e:f3:24:d8:5a:69:af:70:b9:49:f9:0a:f7:af:4b:
7e:81:b4:4c:a5:5c:eb:5e:d0:80:31:f2:f8:0a:27:dc:bb:e9:
cb:b4:3a:83:fd:ca:91:15:9e:88:ad:e2:16:db:e9:2a:d0:3c:
dc:ec:03:f2:96:6e:20:35:16:b8:1f:fb:84:c3:f3:30:80:b6:
65:2c:9d:8b:94:2b:04:23:9c:7c:52:96:c1:f6:d0:1d:9b:36:
27:5c:06:b5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZh/VYtyT3p951piyZ5s8jBiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZTY2MmIyZTk3ZmQyYmRhOTFmMzJiMmNjZTllNzQ1Y2Jh
NTg2MDIwHhcNMjUwODA2MTIyMjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTBlNWZiYTYyMWM1NDFmMzk1MzJkOWQ2MjFkYjZmNjNmZDY2ODc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mSdv3y6lI2oo/zDrzNIIi0NLheq
1f0FY+0oVAsMN5WaQYNItkTipXoTkgGeYvbkCIRU/Jf07HdPahvqDatXbOzhHgqI
Dy0qwshbfbd2pi/I4ADpwSe3b/sTYd1JFrhbDbSeCRnl1/V1J15eoArN0KkZBTuT
9/RDd9aFjr9391+21ogeCzWrvJuY1OtQ4iE3iNGEZX5N+tUfG1QgpLwltLQ7m4gr
bgfUQIX7LLDS2/rbjwvO+ALOklLy0Z/ZD3ihZKBaP8gpRPDXi4iOWV0XucEp3x+g
kXntrFkowK428jxjxoIffkSSVhGmYm+3mStxLTDX+3XdtNjOGBK9pFrjVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKEOX7piHFQfOVMtnWIdtvY/1mh4MB8GA1UdIwQY
MBaAFK/mYrLpf9K9qR8ysszp50XLpYYCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvci1aaXN1bF8wcjJwSHpLeXpPbm5SY3VsaGdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9jOTA4Y2EtODJjMy00NmMzLThiMjkt
MzRkMGMwZTRjMTEzLzEvb1E1ZnVtSWNWQjg1VXkyZFloMjI5al9XYUhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9jOTA4Y2EtODJjMy00NmMzLThiMjktMzRkMGMwZTRjMTEz
LzEvci1aaXN1bF8wcjJwSHpLeXpPbm5SY3VsaGdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApIrPMA0G
CSqGSIb3DQEBCwUAA4IBAQDNoaKh8yt8swPCh8ac7GswZrKc4MmpUfshfnbPcxrC
V/5bn/6xE69wi87r3dkhxO/1wumPw+Vd+L99aLBsP9XYZbhOcFcZxY8eBS1C9SgK
iSrHHdm9uch0Qeiecrpd02Hj/s+xEj7lc2tqjiPMy1LAwDEvooM5rT9yfKdwyITm
bOG7n72aqkXPwBYuoteJ/aZkhb81812sBYjzwDtS9TFrCD4gdnRu8yTYWmmvcLlJ
+Qr3r0t+gbRMpVzrXtCAMfL4Cifcu+nLtDqD/cqRFZ6IreIW2+kq0Dzc7APylm4g
NRa4H/uEw/MwgLZlLJ2LlCsEI5x8UpbB9tAdmzYnXAa1
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:20:59 2025 by rpki-client