Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/oxJHCUyfUdzBPumLPvgBptPxw7c.roa
File: oxJHCUyfUdzBPumLPvgBptPxw7c.roa (raw, json)
Hash identifier: qFqZ06uVAWLf4xiUdta/ot3JkbRtO7iQ5FyDbtRBuKE=
Subject key identifier: A3:12:47:09:4C:9F:51:DC:C1:3E:E9:8B:3E:F8:01:A6:D3:F1:C3:B7
Certificate issuer: /CN=c276a8ba874c3fbddad344d03258b3e2c04d7bcb
Certificate serial: 019977DA1053471B14E1593B37574B636B3B
Authority key identifier: C2:76:A8:BA:87:4C:3F:BD:DA:D3:44:D0:32:58:B3:E2:C0:4D:7B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnaouodMP73a00TQMliz4sBNe8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/oxJHCUyfUdzBPumLPvgBptPxw7c.roa
Signing time: Tue 23 Sep 2025 18:33:23 +0000
ROA not before: Tue 23 Sep 2025 18:33:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200799
IP address blocks: 45.93.204.0/22 maxlen: 22
45.93.204.0/24 maxlen: 24
45.93.205.0/24 maxlen: 24
45.93.206.0/24 maxlen: 24
45.93.207.0/24 maxlen: 24
130.193.1.0/24 maxlen: 24
185.95.36.0/22 maxlen: 22
185.95.36.0/24 maxlen: 24
185.95.37.0/24 maxlen: 24
185.95.38.0/24 maxlen: 24
185.95.39.0/24 maxlen: 24
185.188.24.0/22 maxlen: 22
185.188.24.0/24 maxlen: 24
185.188.25.0/24 maxlen: 24
185.188.26.0/24 maxlen: 24
185.188.27.0/24 maxlen: 24
212.237.252.0/24 maxlen: 24
217.61.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnaouodMP73a00TQMliz4sBNe8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:77:da:10:53:47:1b:14:e1:59:3b:37:57:4b:63:6b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c276a8ba874c3fbddad344d03258b3e2c04d7bcb
Validity
Not Before: Sep 23 18:33:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a31247094c9f51dcc13ee98b3ef801a6d3f1c3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2a:21:85:55:ad:43:8b:10:54:ce:af:a1:cc:
86:19:a5:7d:09:18:ac:1a:f6:5e:b9:14:23:cb:b5:
67:86:89:9e:1e:df:45:b2:6b:7d:c8:54:e4:4a:34:
dc:bf:00:f0:6d:9b:16:34:c0:c2:c9:4c:72:c5:6e:
42:ed:02:df:62:72:c9:2d:13:f0:cc:02:d0:ec:00:
b1:52:93:0e:b7:85:4b:fd:d6:57:44:b2:d3:99:10:
3e:f5:49:67:6d:d3:5c:50:5a:fa:44:4f:01:e9:cf:
c7:cc:2f:cd:a7:71:4f:c7:81:03:9c:5b:6b:ac:9e:
39:8e:79:1c:27:af:dd:b4:08:ef:84:8c:a5:1e:64:
13:e5:b8:bc:3f:6b:ee:cc:a4:ac:d3:d2:33:ea:45:
42:4a:14:14:1f:75:66:21:78:2a:a9:32:83:55:00:
e2:8a:4e:31:03:95:e6:17:ad:53:36:bd:30:05:81:
bc:49:d7:35:f4:3d:8a:54:2c:90:44:6a:c2:97:a7:
36:09:0f:e3:02:70:fc:c0:d4:70:a1:b7:b8:d2:57:
77:15:8e:7a:93:6d:a0:da:52:14:be:ec:f3:ec:c9:
91:19:b6:be:46:39:b5:95:ea:ed:56:ca:0a:e0:7c:
14:51:f4:0d:cf:17:bd:06:92:ef:88:91:04:af:28:
b2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:12:47:09:4C:9F:51:DC:C1:3E:E9:8B:3E:F8:01:A6:D3:F1:C3:B7
X509v3 Authority Key Identifier:
keyid:C2:76:A8:BA:87:4C:3F:BD:DA:D3:44:D0:32:58:B3:E2:C0:4D:7B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnaouodMP73a00TQMliz4sBNe8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/oxJHCUyfUdzBPumLPvgBptPxw7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.204.0/22
130.193.1.0/24
185.95.36.0/22
185.188.24.0/22
212.237.252.0/24
217.61.254.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:a2:15:9d:a6:94:56:39:f0:6c:da:6f:16:b4:be:1f:5d:45:
b1:67:f2:54:67:cb:f4:6f:c7:eb:f8:c1:e5:d9:53:b2:b6:5f:
03:8f:d7:9b:69:60:ae:9e:9f:b6:56:ae:c0:ff:2b:42:5e:1c:
02:22:fd:8f:c5:1b:41:11:10:33:32:4b:b7:30:eb:e8:6c:47:
5b:d6:51:85:4d:20:ca:d8:ac:6d:f0:de:c2:56:67:03:8a:f4:
b2:05:fd:23:4c:0f:7d:38:9e:a3:3a:f2:2a:8d:4d:27:c9:c8:
7e:6d:41:aa:05:9a:58:82:83:46:69:1d:17:3f:d5:f9:28:65:
c6:64:b1:9d:8e:00:1a:5b:96:16:83:fa:16:e8:2f:f7:10:46:
45:8a:2b:79:c5:ac:dc:a1:ca:68:37:bb:43:d4:d6:1a:50:68:
53:8c:20:db:e8:d6:f3:f5:a7:88:56:41:9c:a0:8d:06:1a:5d:
c5:20:9c:ac:f6:e1:47:e4:53:3f:e5:20:82:e9:41:ca:0d:7b:
f7:3e:31:ed:54:13:08:96:63:4d:cd:a4:b5:b2:bc:81:1e:6b:
0b:94:56:b4:a6:17:fb:5f:a1:f3:e1:64:9a:01:99:2e:80:61:
a3:26:7e:f3:a5:b1:5f:27:4c:54:bf:80:19:43:25:5f:37:1f:
6c:72:d1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:25 2025 by rpki-client