Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Oz8vbubbgxjeaVUkVescThMrRPk.roa
File: Oz8vbubbgxjeaVUkVescThMrRPk.roa (raw, json)
Hash identifier: Yn9SaaAwkw1GrPQnNalr7kMsgjukfIVd9vEA/Z8ToEM=
Subject key identifier: 3B:3F:2F:6E:E6:DB:83:18:DE:69:55:24:55:EB:1C:4E:13:2B:44:F9
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019A4F6A13566F9EFE5E0DDFD5535B037B9F
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Oz8vbubbgxjeaVUkVescThMrRPk.roa
Signing time: Tue 04 Nov 2025 15:09:03 +0000
ROA not before: Tue 04 Nov 2025 15:09:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30058
IP address blocks: 62.192.98.0/23 maxlen: 23
62.192.104.0/23 maxlen: 23
62.192.116.0/23 maxlen: 23
62.192.118.0/23 maxlen: 23
213.169.216.0/23 maxlen: 23
213.169.250.0/23 maxlen: 23
213.169.252.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:6a:13:56:6f:9e:fe:5e:0d:df:d5:53:5b:03:7b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Nov 4 15:09:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b3f2f6ee6db8318de69552455eb1c4e132b44f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5d:fa:e0:e9:4f:4d:e2:dc:c4:fd:9d:9a:ad:
f1:fc:b6:c7:2d:3b:bc:31:78:11:5d:ef:41:1a:e8:
fd:ed:cd:47:92:6a:fb:a8:a5:76:e5:af:c5:c4:45:
a0:a2:0d:17:0c:22:da:f3:27:79:89:ce:68:30:6e:
2c:47:03:04:38:f9:b4:3c:18:d4:7d:a7:68:15:17:
28:a7:28:46:c0:fc:05:d6:47:91:78:ef:25:07:1f:
ca:ff:d5:43:7a:bf:d3:71:85:a9:15:d0:cc:1c:3b:
f9:b4:c0:1c:49:0a:f8:07:94:ff:18:e6:0d:00:ef:
8b:2f:65:5e:98:54:5b:97:3e:b4:64:03:54:de:24:
2d:9f:2f:38:c5:d4:72:85:96:56:cb:5c:b6:0c:ee:
6f:c8:3c:9c:5d:0d:ba:96:f0:dd:c6:a3:89:6c:7e:
28:6e:db:ca:f1:74:49:fe:3e:34:c3:9a:59:89:1c:
0a:dd:06:51:29:40:ab:4f:5a:3c:10:0a:1a:4c:3e:
a7:96:c6:cc:cd:6a:3c:8e:fe:15:ab:3c:dd:fb:25:
a9:b7:d2:84:4e:51:0d:dc:1b:f0:8b:41:a7:76:bf:
31:18:f9:9e:af:1c:20:14:09:c2:5b:e8:76:02:cf:
d5:92:05:14:13:7e:1a:19:c0:c6:4f:2c:84:8c:71:
62:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3F:2F:6E:E6:DB:83:18:DE:69:55:24:55:EB:1C:4E:13:2B:44:F9
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Oz8vbubbgxjeaVUkVescThMrRPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.98.0/23
62.192.104.0/23
62.192.116.0/22
213.169.216.0/23
213.169.250.0-213.169.253.255
Signature Algorithm: sha256WithRSAEncryption
df:82:14:1f:ae:d4:94:e4:b2:19:b8:c5:db:86:74:29:26:32:
94:b3:f3:32:5e:cf:e8:60:7a:5e:9e:cf:1b:cb:28:fb:40:13:
8c:e3:4c:0c:cc:7b:d0:44:2b:bf:44:4d:21:11:11:07:76:9c:
1d:4a:97:14:1b:b9:c3:7c:ac:fd:82:91:7a:8e:82:00:5c:e6:
f2:79:62:c1:a0:ad:78:8d:c5:47:28:d7:17:5d:10:22:60:41:
56:ef:b0:09:8d:78:86:91:3e:65:b1:f6:7b:56:7d:93:a3:0f:
7a:8c:5e:7b:eb:0b:b5:12:46:6e:6f:7f:44:1e:6f:4a:12:71:
53:d6:4a:dc:ea:5b:74:a5:4d:d5:ce:bd:bb:70:05:a6:d0:f1:
6e:0e:fc:e9:2e:39:f4:d1:80:51:e4:b1:cb:24:7f:2b:ab:c0:
9d:5c:ad:09:4b:fc:ef:57:72:51:88:03:19:a8:19:c9:df:54:
d8:ce:f3:0f:19:9a:a7:be:ec:17:60:77:28:16:cc:f0:83:95:
ed:bd:d9:d8:2a:39:2f:a8:84:81:69:64:7d:c8:2c:1e:17:7b:
d7:4e:6f:6e:14:d4:33:a6:21:07:e4:b5:70:c6:ae:99:60:5a:
d8:27:9c:40:21:7a:de:7c:87:6b:4d:27:8a:54:10:86:d2:5f:
b3:ee:af:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:23:07 2025 by rpki-client