Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/OWpwpyh1mzp7VRLchsqWjA7Bd6c.roa
File: OWpwpyh1mzp7VRLchsqWjA7Bd6c.roa (raw, json)
Hash identifier: oss82o3LFtVmuDKRa45drAtMghVcyPl5JboekWr/Lf4=
Subject key identifier: 39:6A:70:A7:28:75:9B:3A:7B:55:12:DC:86:CA:96:8C:0E:C1:77:A7
Certificate issuer: /CN=abbad3de831da94222c1add104caf4c3247689ac
Certificate serial: 01989F6C31D1CDBE0E1D434C895E92E5D462
Authority key identifier: AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/OWpwpyh1mzp7VRLchsqWjA7Bd6c.roa
Signing time: Tue 12 Aug 2025 17:55:24 +0000
ROA not before: Tue 12 Aug 2025 17:55:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12548
IP address blocks: 212.68.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:6c:31:d1:cd:be:0e:1d:43:4c:89:5e:92:e5:d4:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbad3de831da94222c1add104caf4c3247689ac
Validity
Not Before: Aug 12 17:55:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=396a70a728759b3a7b5512dc86ca968c0ec177a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e4:54:3c:c2:46:7f:87:e4:6b:99:80:80:b0:
df:36:3a:de:7e:5a:78:0d:4e:84:36:9a:a6:12:1d:
5a:3e:c1:19:ce:38:1d:dd:46:64:61:05:77:a3:ae:
eb:7a:6f:d2:23:d4:eb:0a:b3:01:15:d1:00:f6:dc:
21:04:93:dc:ad:44:36:67:1d:2c:56:91:2f:98:56:
bd:bc:52:34:58:ee:7b:78:93:92:e7:da:dc:1a:1b:
c2:a7:d4:f9:6d:19:2d:57:ba:36:94:46:cf:48:a3:
b2:15:d4:69:e6:8b:74:3e:95:92:f2:7d:69:8e:35:
4e:8d:ed:ec:3b:3b:8a:f0:f0:13:79:27:7d:79:43:
d2:62:82:64:1b:3b:f0:52:92:96:dd:d1:22:e6:ed:
69:58:d3:35:5a:55:87:49:28:a3:f4:49:3e:91:6d:
9d:25:da:82:e6:9d:42:df:88:7a:e6:7c:1b:2f:d6:
a6:62:19:d7:53:b8:60:65:cf:00:d2:fc:a5:df:b9:
45:79:d9:e1:7e:d3:3c:99:1b:44:67:0d:85:38:bf:
22:af:4b:1b:04:4c:dc:cb:6d:a8:8e:da:14:42:4d:
ba:8e:9e:3c:04:67:cb:4f:91:be:ab:d3:71:07:a8:
e3:c6:71:c9:5c:c4:63:ce:01:aa:94:e4:d5:26:18:
da:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6A:70:A7:28:75:9B:3A:7B:55:12:DC:86:CA:96:8C:0E:C1:77:A7
X509v3 Authority Key Identifier:
keyid:AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/OWpwpyh1mzp7VRLchsqWjA7Bd6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.68.160.0/22
Signature Algorithm: sha256WithRSAEncryption
20:b7:c8:94:c4:ca:0c:61:b7:4e:f9:ea:76:1f:98:97:44:54:
cb:12:72:35:f7:5a:c2:a7:b1:15:8d:0a:7d:78:88:43:0e:45:
a0:fd:77:3e:f6:16:c9:c1:71:7f:bb:68:77:47:1a:57:f7:08:
a4:00:a5:bf:93:14:34:6e:31:bf:e3:d3:ba:b8:ac:df:6a:49:
45:12:69:46:67:7a:38:2d:3d:24:62:d9:18:06:12:b2:f7:d9:
8b:47:79:5c:42:1c:ad:44:85:c0:2e:bf:3e:4b:c1:a3:1f:22:
45:86:1a:25:e5:5f:8d:2d:2d:38:44:54:69:40:a8:4d:8b:61:
ef:ee:5b:e2:1b:ae:9a:6e:5a:4e:f2:5e:f4:2e:50:c8:b6:9a:
f1:38:20:cd:e4:59:0c:8a:c6:70:30:6a:20:bd:4a:aa:5c:ef:
ab:8c:79:77:3c:22:90:d7:74:84:a6:98:ef:60:76:5c:06:f4:
fc:cd:7a:b6:3a:6f:69:c2:e1:3a:e6:30:dc:0c:55:40:64:07:
cb:cd:29:76:a8:3a:e5:35:fd:9f:79:a3:6a:1d:13:9f:fa:cd:
d4:e4:ef:ae:f1:e3:f9:fd:53:e1:eb:63:f1:89:b5:7d:50:88:
a9:23:1d:8e:7c:14:f0:f2:76:59:1c:6d:d6:e1:7e:9c:1a:cf:
d5:98:a8:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZifbDHRzb4OHUNMiV6S5dRiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYmFkM2RlODMxZGE5NDIyMmMxYWRkMTA0Y2FmNGMzMjQ3
Njg5YWMwHhcNMjUwODEyMTc1NTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTZhNzBhNzI4NzU5YjNhN2I1NTEyZGM4NmNhOTY4YzBlYzE3N2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiORUPMJGf4fka5mAgLDfNjreflp4
DU6ENpqmEh1aPsEZzjgd3UZkYQV3o67rem/SI9TrCrMBFdEA9twhBJPcrUQ2Zx0s
VpEvmFa9vFI0WO57eJOS59rcGhvCp9T5bRktV7o2lEbPSKOyFdRp5ot0PpWS8n1p
jjVOje3sOzuK8PATeSd9eUPSYoJkGzvwUpKW3dEi5u1pWNM1WlWHSSij9Ek+kW2d
JdqC5p1C34h65nwbL9amYhnXU7hgZc8A0vyl37lFednhftM8mRtEZw2FOL8ir0sb
BEzcy22ojtoUQk26jp48BGfLT5G+q9NxB6jjxnHJXMRjzgGqlOTVJhjaPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDlqcKcodZs6e1US3IbKlowOwXenMB8GA1UdIwQY
MBaAFKu6096DHalCIsGt0QTK9MMkdomsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTdyVDNvTWRxVUlpd2EzUkJNcjB3eVIyaWF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZTgxNDktZDUzYy00OTkyLWJkMDct
NTVjNDM0ZWVjOTZjLzEvT1dwd3B5aDFtenA3VlJMY2hzcVdqQTdCZDZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZTgxNDktZDUzYy00OTkyLWJkMDctNTVjNDM0ZWVjOTZj
LzEvcTdyVDNvTWRxVUlpd2EzUkJNcjB3eVIyaWF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1ESgMA0G
CSqGSIb3DQEBCwUAA4IBAQAgt8iUxMoMYbdO+ep2H5iXRFTLEnI191rCp7EVjQp9
eIhDDkWg/Xc+9hbJwXF/u2h3RxpX9wikAKW/kxQ0bjG/49O6uKzfaklFEmlGZ3o4
LT0kYtkYBhKy99mLR3lcQhytRIXALr8+S8GjHyJFhhol5V+NLS04RFRpQKhNi2Hv
7lviG66ablpO8l70LlDItprxOCDN5FkMisZwMGogvUqqXO+rjHl3PCKQ13SEppjv
YHZcBvT8zXq2Om9pwuE65jDcDFVAZAfLzSl2qDrlNf2feaNqHROf+s3U5O+u8eP5
/VPh62PxibV9UIipIx2OfBTw8nZZHG3W4X6cGs/VmKg8
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:44:23 2025 by rpki-client