Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/O-CPCy5R-X4CqRzRCL68iCg2qIo.roa
File: O-CPCy5R-X4CqRzRCL68iCg2qIo.roa (raw, json)
Hash identifier: 5IkM6Xgnkpr6tx8qTdIcHavNjNBYNmWiY+nYFzamHuI=
Subject key identifier: 3B:E0:8F:0B:2E:51:F9:7E:02:A9:1C:D1:08:BE:BC:88:28:36:A8:8A
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0198610BA32AE871574E5978D86A8C1C5865
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/O-CPCy5R-X4CqRzRCL68iCg2qIo.roa
Signing time: Thu 31 Jul 2025 15:13:29 +0000
ROA not before: Thu 31 Jul 2025 15:13:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63023
IP address blocks: 194.231.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:61:0b:a3:2a:e8:71:57:4e:59:78:d8:6a:8c:1c:58:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 31 15:13:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3be08f0b2e51f97e02a91cd108bebc882836a88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cd:c2:51:a2:02:da:af:b7:1e:36:83:7a:57:
65:18:9a:0e:6b:92:95:08:aa:b5:3b:be:f8:d3:2d:
61:1a:a4:ac:d8:88:6c:5d:63:e8:b6:19:1b:c1:6d:
67:ae:23:b5:07:73:17:73:c9:88:07:07:13:2c:41:
a2:7c:49:82:9c:16:92:f2:65:0d:eb:41:e8:d4:21:
0e:46:fc:35:ed:01:07:52:cc:a0:ee:f1:c2:b7:5f:
30:c9:29:bc:c1:10:1f:e3:96:1b:8f:09:cc:56:e3:
e6:71:6c:aa:ab:08:ca:f6:4f:dc:58:3d:fc:b2:f6:
60:7c:9e:f0:e6:3d:79:44:cd:c4:c0:78:d7:c0:4e:
f8:90:da:13:7b:e7:92:96:09:2c:89:36:2e:f6:0c:
87:55:ed:d6:4d:a8:b6:d9:6c:44:5a:c2:ed:62:53:
33:83:61:fe:ca:73:83:4c:57:10:f3:04:e2:74:0b:
cc:9c:78:81:d0:28:2b:11:f1:05:12:37:e7:b9:0a:
9d:52:b3:b5:5d:f1:65:2a:37:cb:53:1d:17:f3:67:
4e:01:a7:0c:f3:7e:a2:1d:bc:34:ef:79:20:ab:9d:
8d:0e:af:26:a4:88:76:57:7a:76:48:56:59:78:aa:
7d:31:11:5c:60:bb:b5:39:54:1b:6a:4d:a9:66:4f:
c4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E0:8F:0B:2E:51:F9:7E:02:A9:1C:D1:08:BE:BC:88:28:36:A8:8A
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/O-CPCy5R-X4CqRzRCL68iCg2qIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.140.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:a8:2f:ed:ed:f3:42:e8:13:c3:80:23:e8:5e:f6:aa:e6:4f:
d2:f4:cf:25:19:90:33:6d:c4:a8:ef:e2:2d:43:50:68:f2:e1:
1c:ff:41:b4:47:c8:af:3a:88:31:43:7f:d8:15:6b:59:76:49:
17:6c:d6:2f:48:1b:b6:d2:54:8b:be:72:2b:13:57:48:2c:41:
85:2d:ab:37:af:4a:0f:17:8d:80:94:79:44:82:1b:75:2f:60:
bf:77:6f:9b:1d:bb:1a:e5:90:ed:ec:d7:f2:32:b0:d5:35:93:
4f:ee:2f:12:bd:5c:7a:04:5f:4e:bc:62:ef:be:5d:12:24:bd:
b9:3d:b8:a6:17:61:d8:46:34:f6:5e:07:2c:f9:72:ea:64:ab:
81:fd:30:75:0c:82:58:80:48:3f:67:70:7e:8c:f8:c3:f7:b1:
5a:80:81:b2:93:56:41:64:0b:9f:63:4b:fb:07:42:a5:41:ae:
c8:d2:ec:04:b8:4d:0f:dc:c2:18:b7:ee:dd:7a:02:a0:28:cf:
9b:34:57:40:a1:65:03:0c:ad:b1:33:33:83:e0:42:11:7a:1e:
39:7d:0a:d8:89:4c:d1:c9:7f:6f:1c:c8:99:c9:eb:e7:05:1a:
77:96:14:15:6b:67:6b:03:26:0f:ba:c1:32:07:dc:1a:5b:d4:
b5:86:a7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:47:46 2025 by rpki-client