Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/oEuyAAJZN4XAHoWmGWmvPb4FubQ.roa
File: oEuyAAJZN4XAHoWmGWmvPb4FubQ.roa (raw, json)
Hash identifier: esXNrVEA5MkO3OsllRSKIYSvaqpShmC/xd9y//cEJ8g=
Subject key identifier: A0:4B:B2:00:02:59:37:85:C0:1E:85:A6:19:69:AF:3D:BE:05:B9:B4
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 0198841AB5BA9614EE0D2668DCB9FA31C641
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/oEuyAAJZN4XAHoWmGWmvPb4FubQ.roa
Signing time: Thu 07 Aug 2025 10:36:39 +0000
ROA not before: Thu 07 Aug 2025 10:36:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 2.59.180.0/24 maxlen: 24
45.156.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:1a:b5:ba:96:14:ee:0d:26:68:dc:b9:fa:31:c6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Aug 7 10:36:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a04bb20002593785c01e85a61969af3dbe05b9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f3:83:4b:3b:20:cc:15:da:b4:47:cb:9a:91:
ad:7b:5a:5c:c4:3a:fb:1c:11:7f:9b:90:ae:37:f0:
0f:de:54:80:74:22:bc:1e:6c:02:af:27:37:d8:ba:
2c:ee:a3:7d:c6:b9:3b:dc:68:54:4a:c5:a6:b5:c3:
48:df:82:da:79:ac:b4:f2:88:0e:49:24:91:fd:b4:
73:09:a3:eb:96:08:e1:d0:66:17:2f:71:46:b2:08:
7a:57:b8:c9:0c:64:df:13:b9:57:bd:f9:d2:9a:81:
df:ab:28:72:75:9f:6c:e6:6d:6e:dc:81:9c:65:94:
f7:40:13:ae:6f:1d:c5:59:24:a6:15:04:da:fb:3b:
95:ed:f0:de:38:d0:e9:5b:e4:dc:70:9c:0d:58:49:
cb:ab:bf:53:48:fa:b2:1d:4f:b1:12:ab:09:21:88:
59:45:5c:a5:60:02:25:a1:91:64:b1:ba:1a:54:81:
dc:72:ce:25:81:a3:0e:1d:5c:19:53:f3:63:f5:ce:
2f:c0:05:17:e8:f3:f6:65:f7:3c:d9:76:64:bf:24:
1c:b5:c3:cd:3e:01:a0:db:29:5f:29:23:1e:6b:cf:
60:d0:cd:dd:aa:03:d8:68:e6:44:cd:5c:30:78:fe:
d7:c6:7d:c1:02:e8:31:39:a6:fe:aa:93:b7:2b:e4:
b2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4B:B2:00:02:59:37:85:C0:1E:85:A6:19:69:AF:3D:BE:05:B9:B4
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/oEuyAAJZN4XAHoWmGWmvPb4FubQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.180.0/24
45.156.144.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:83:ff:de:ca:2d:ae:2e:e3:76:3e:e1:01:a7:7d:99:66:a5:
b3:e3:77:32:d5:af:9f:54:9d:ce:25:4d:b5:0f:b0:ed:a1:4b:
6a:17:71:2c:94:d7:0a:a3:29:db:df:b1:38:1e:44:6f:e3:c2:
06:70:7f:fe:c3:22:cc:4c:0d:7e:95:d0:59:03:78:fa:7e:f4:
7f:cb:16:a0:8f:9e:0b:19:97:fc:b2:d8:d3:ec:83:46:8a:d3:
6e:19:c2:1d:94:54:ee:69:3b:6b:38:f7:ad:3a:ef:bc:21:89:
4f:93:23:8e:bc:f5:54:e9:83:b2:2a:a9:f0:ba:cb:f3:fa:02:
1c:57:85:42:8a:97:04:2a:7c:af:4f:cc:b3:fc:4f:44:b7:54:
df:27:5d:12:a3:5e:aa:18:f0:0b:a0:a6:61:8a:cb:b8:4a:ed:
cf:9e:7f:a2:c7:6a:41:d9:a2:74:3a:c9:50:ba:60:70:ac:3b:
81:99:03:64:e9:7e:90:85:a6:f2:bb:86:e9:2b:26:55:24:bb:
87:ce:88:e6:70:ab:ac:99:44:68:98:70:e5:e6:e0:a7:45:63:
b9:f8:d2:b3:e5:93:91:95:ea:43:bd:12:2c:47:b8:e0:87:ac:
2a:6e:81:12:c4:ae:8f:51:5c:e8:68:17:f5:ae:9c:a1:1f:84:
0d:c5:a1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:20:16 2025 by rpki-client