Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/_oaImSL8yQUz7sSolsQ6h1C9hxI.roa
File: _oaImSL8yQUz7sSolsQ6h1C9hxI.roa (raw, json)
Hash identifier: MY6fAwo61gC56U+DvGD1k1/jTW6ufE4wkkyXYvcNP3c=
Subject key identifier: FE:86:88:99:22:FC:C9:05:33:EE:C4:A8:96:C4:3A:87:50:BD:87:12
Certificate issuer: /CN=96d66966ffda0a5d0e131d134a79d93205c8c550
Certificate serial: 0197637F5231EE33078DCF9F7804DDF77113
Authority key identifier: 96:D6:69:66:FF:DA:0A:5D:0E:13:1D:13:4A:79:D9:32:05:C8:C5:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/_oaImSL8yQUz7sSolsQ6h1C9hxI.roa
Signing time: Thu 12 Jun 2025 09:36:17 +0000
ROA not before: Thu 12 Jun 2025 09:36:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210545
IP address blocks: 91.233.8.0/22 maxlen: 22
176.102.168.0/21 maxlen: 21
193.25.170.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 04:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:7f:52:31:ee:33:07:8d:cf:9f:78:04:dd:f7:71:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d66966ffda0a5d0e131d134a79d93205c8c550
Validity
Not Before: Jun 12 09:36:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe86889922fcc90533eec4a896c43a8750bd8712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:58:86:e7:ff:42:3f:10:a5:80:de:0d:08:ad:
43:2e:0c:19:33:94:c4:57:12:b9:46:ee:fa:8e:e0:
1d:1d:64:1a:86:19:6f:8d:8a:75:54:1b:16:e8:46:
71:2e:16:29:53:25:d1:5f:9e:94:78:a1:c8:cd:f8:
4b:3e:a5:f9:c4:47:31:b0:88:11:5e:8c:6c:0c:b5:
52:ea:6d:d7:57:74:79:d3:b2:d2:c3:bd:40:9f:62:
98:ab:4f:e8:e6:cb:a7:a6:d3:29:d7:e3:d7:77:40:
9b:ce:36:66:0b:b4:90:42:a9:e6:32:1a:c6:85:86:
cf:5b:36:18:ad:63:b8:3e:93:a0:6f:96:69:cf:36:
7a:af:71:84:33:8c:08:ff:80:96:35:51:23:a9:6a:
c7:a5:84:29:4f:ac:d3:d7:5a:c5:c9:57:4a:4d:b4:
e7:2b:41:da:f9:04:41:30:88:22:b1:d5:f6:3d:12:
9b:bd:c0:d3:d3:17:ce:ae:a1:be:6f:9b:5e:8b:d3:
33:9e:42:78:44:40:43:89:6a:dd:cd:a7:52:d9:f9:
f2:b9:3b:53:e8:23:3c:62:68:4b:77:c3:e6:b8:3c:
fc:b3:0f:f9:0a:be:33:f8:02:bf:90:27:b7:56:0c:
7a:73:25:b1:d6:d4:59:ec:cd:a7:0e:00:f3:ff:a0:
b1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:86:88:99:22:FC:C9:05:33:EE:C4:A8:96:C4:3A:87:50:BD:87:12
X509v3 Authority Key Identifier:
keyid:96:D6:69:66:FF:DA:0A:5D:0E:13:1D:13:4A:79:D9:32:05:C8:C5:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltZpZv_aCl0OEx0TSnnZMgXIxVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/_oaImSL8yQUz7sSolsQ6h1C9hxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5b4426-a266-43ce-a9e6-b0e6058d4dd7/1/ltZpZv_aCl0OEx0TSnnZMgXIxVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.8.0/22
176.102.168.0/21
193.25.170.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:cf:d6:f3:fb:49:6a:fc:5d:ba:46:65:a1:61:13:e8:fd:be:
8c:55:8f:d5:62:c3:5f:d1:20:1d:38:c8:8b:e7:90:52:4e:33:
c5:66:69:0d:33:a1:b0:94:ee:4e:19:36:a0:9e:52:86:1c:05:
1f:20:dd:bc:c0:a0:b3:0d:e8:99:9d:cb:4e:3f:2e:ea:5e:b1:
62:16:5a:80:51:f0:43:b2:54:ac:74:4e:1f:b2:3b:89:23:24:
a1:08:8d:00:bb:16:d1:ba:b2:fa:d9:26:c9:a3:1b:61:19:4a:
9e:64:bf:be:1e:57:a6:c5:b0:c4:bb:5d:78:3d:21:5e:e1:cd:
03:d3:d8:b1:89:3b:2d:41:70:5e:bc:85:f4:33:8b:8f:39:11:
06:e9:4e:71:b6:cf:74:2f:b5:db:b9:ae:29:69:35:a4:38:73:
35:17:ec:a4:e1:b3:59:d4:80:ec:f7:df:9e:f7:0b:57:3c:93:
eb:74:53:cc:b4:c6:eb:3d:4f:c3:f6:23:38:29:f8:6b:cd:3e:
26:c0:9b:40:28:96:31:d6:c8:dd:8c:cd:00:e4:d8:ff:bf:6e:
81:49:c7:7f:9b:32:12:e7:65:b3:1b:bb:b9:68:55:bb:2b:e2:
35:7f:7b:ac:d1:1e:ae:5a:77:96:a6:a7:fa:c0:aa:03:8a:91:
75:f5:24:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 10:35:21 2025 by rpki-client