Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/OqtJcNmb1J50tLIWF6D7y01VxA4.roa
File: OqtJcNmb1J50tLIWF6D7y01VxA4.roa (raw, json)
Hash identifier: 1ov/KhQ3AFXvHLspCojYHQyYdAVdY1WazSh2AhXG8Y8=
Subject key identifier: 3A:AB:49:70:D9:9B:D4:9E:74:B4:B2:16:17:A0:FB:CB:4D:55:C4:0E
Certificate issuer: /CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Certificate serial: 0198CE5EED07B8B475A6174242A081B1B02F
Authority key identifier: FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/OqtJcNmb1J50tLIWF6D7y01VxA4.roa
Signing time: Thu 21 Aug 2025 20:43:04 +0000
ROA not before: Thu 21 Aug 2025 20:43:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 176.67.80.0/23 maxlen: 23
185.91.122.0/23 maxlen: 23
2a05:e9c0:5600::/40 maxlen: 40
2a05:e9c0:6200::/40 maxlen: 40
2a05:e9c0:6220::/43 maxlen: 43
2a05:e9c0:6240::/43 maxlen: 43
2a05:e9c0:6260::/43 maxlen: 43
2a05:e9c0:6280::/43 maxlen: 43
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ce:5e:ed:07:b8:b4:75:a6:17:42:42:a0:81:b1:b0:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Validity
Not Before: Aug 21 20:43:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3aab4970d99bd49e74b4b21617a0fbcb4d55c40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c3:cd:9b:e8:b0:e2:24:02:75:ce:96:f0:cc:
0c:97:9d:e9:62:71:85:2b:1e:77:a9:4f:94:33:91:
11:23:35:e1:3b:6f:9b:fb:85:ea:51:6b:79:38:f6:
c8:1e:33:d2:af:e0:3d:6c:f7:c7:f8:24:7a:dc:8e:
fa:ef:7b:f8:a3:a2:bd:b6:34:94:da:fd:37:89:aa:
4d:7f:97:e4:9b:24:f1:b1:16:d9:44:52:b2:5a:23:
a9:93:23:81:7a:70:16:f4:71:7d:18:05:06:90:1a:
8b:35:18:d7:82:72:b7:c2:c6:8e:aa:ed:92:21:61:
1f:1a:bd:73:a0:0f:b1:01:ba:95:23:72:d3:26:6f:
c9:69:0a:b4:91:77:80:00:bc:a3:48:76:9b:66:ad:
06:a8:61:a2:88:c4:84:23:87:fb:85:81:3c:d6:06:
fc:41:be:af:ca:ee:af:23:51:d7:83:3e:56:9a:18:
cb:66:20:32:4b:1e:1b:38:e1:b2:f5:00:f3:66:6b:
06:c3:a6:d5:76:f6:8a:03:43:15:08:0b:fb:fa:74:
8c:15:3e:ee:1e:f0:20:bd:d6:57:e9:49:c0:e1:8b:
0e:25:5b:c0:a8:e6:af:0b:1d:11:37:8e:72:39:dc:
b5:54:f8:f7:8c:a8:c4:1d:c9:e8:ef:c1:c1:5a:38:
61:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AB:49:70:D9:9B:D4:9E:74:B4:B2:16:17:A0:FB:CB:4D:55:C4:0E
X509v3 Authority Key Identifier:
keyid:FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/OqtJcNmb1J50tLIWF6D7y01VxA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.67.80.0/23
185.91.122.0/23
IPv6:
2a05:e9c0:5600::/40
2a05:e9c0:6200::/40
Signature Algorithm: sha256WithRSAEncryption
1c:98:01:cc:20:cf:61:a2:6b:b5:1c:0b:46:ec:b5:11:17:26:
bd:8d:ae:60:df:27:7c:4c:b7:28:22:e0:b4:08:f4:03:b5:87:
cc:fc:a5:ec:0c:05:ec:75:f6:a9:6c:5a:46:5c:40:dc:9a:7f:
be:1c:59:47:cd:4b:cb:56:cc:55:66:d0:ab:d4:27:0d:1c:73:
b2:8b:a1:d9:b8:3d:f4:a9:c0:36:e8:1f:de:b0:f2:3e:36:88:
2c:50:41:1d:da:26:31:b5:4a:9c:1d:46:37:2b:19:cf:df:61:
48:11:10:07:08:8b:80:5f:f2:3a:b6:49:d0:2e:cc:65:ae:88:
60:f5:7e:65:59:50:f1:8b:52:8e:13:92:1e:05:e0:85:95:94:
88:82:87:fa:a5:ec:2a:e1:1f:27:47:db:7e:cf:15:de:73:fe:
fe:56:e5:eb:c8:2e:10:09:c7:be:ff:75:8f:01:02:be:c2:b3:
8b:94:8c:0d:9a:cf:74:f4:0c:c8:1c:28:32:3e:17:5b:51:0f:
0b:4f:5b:78:e2:14:16:a5:cb:04:d1:5d:68:99:28:c5:c6:41:
ae:db:ec:97:ac:ad:16:5a:e0:9b:8a:06:26:90:56:5a:f8:06:
de:a2:7a:8f:f6:05:b7:eb:3b:35:be:02:5c:53:53:77:a1:46:
cc:4a:25:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:18:27 2025 by rpki-client