Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/oZpDJ_Q54xZFfYvPkdiLybGkAl0.roa
File: oZpDJ_Q54xZFfYvPkdiLybGkAl0.roa (raw, json)
Hash identifier: c5w/mLqxKI0gk2/whiKZU+GKzBDjBPJjStGxZYx9Pag=
Subject key identifier: A1:9A:43:27:F4:39:E3:16:45:7D:8B:CF:91:D8:8B:C9:B1:A4:02:5D
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019A2AA00C009E41E488C411379FEF7611A2
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/oZpDJ_Q54xZFfYvPkdiLybGkAl0.roa
Signing time: Tue 28 Oct 2025 11:42:03 +0000
ROA not before: Tue 28 Oct 2025 11:42:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59711
IP address blocks: 62.192.96.0/23 maxlen: 23
213.169.244.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:a0:0c:00:9e:41:e4:88:c4:11:37:9f:ef:76:11:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 28 11:42:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a19a4327f439e316457d8bcf91d88bc9b1a4025d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:73:ee:b7:89:95:3b:d1:08:e5:05:62:f5:a9:
99:9c:51:67:d1:46:08:92:4c:91:df:38:f8:92:c3:
c2:8f:3f:c1:3e:c1:a0:47:cd:7e:7b:76:2f:ed:07:
8b:01:b3:8b:e5:2c:ea:5e:52:8b:10:89:61:9a:75:
ad:5b:4e:97:d7:ce:c3:8a:32:5c:79:c6:f2:af:b4:
c1:d4:d7:27:74:29:db:b4:ff:9e:2c:0f:2a:ea:f1:
11:20:1a:ea:ff:2b:ae:68:3f:4b:e7:ee:96:77:67:
8a:4e:f0:dc:ea:10:b9:1b:be:af:b3:47:8f:05:fc:
de:08:f5:32:f2:c6:a2:05:d7:f2:da:dd:30:9e:83:
e7:81:55:68:f5:ab:22:2f:e8:71:a1:22:93:b9:8a:
04:ec:a3:28:e2:95:51:fe:35:95:8b:ef:4a:dc:14:
92:53:f3:06:80:41:b0:80:d2:9f:51:c2:77:d6:34:
60:f6:74:c7:c1:97:dc:a7:25:b8:0f:92:04:21:6f:
3b:9a:35:55:7a:e0:23:cc:33:29:04:6a:a3:50:71:
1b:11:15:97:d5:81:21:70:22:8a:3e:38:44:df:ef:
d9:c7:5d:ee:81:70:ab:69:c8:94:eb:82:84:2f:44:
35:9d:a5:46:7b:f9:92:3c:35:af:20:6e:c2:cd:49:
95:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9A:43:27:F4:39:E3:16:45:7D:8B:CF:91:D8:8B:C9:B1:A4:02:5D
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/oZpDJ_Q54xZFfYvPkdiLybGkAl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.96.0/23
213.169.244.0/23
Signature Algorithm: sha256WithRSAEncryption
29:75:79:e7:25:55:ea:cd:b2:06:a2:82:01:52:89:82:9d:b0:
74:f3:01:ab:ef:ee:c5:21:b5:fb:99:37:f3:63:00:df:24:0f:
e9:fd:10:e9:6e:22:75:3b:7b:e9:b1:cf:ff:1a:01:ea:96:d6:
63:ea:70:62:ec:f5:47:3b:3f:77:2f:bd:f1:24:15:ed:8c:bd:
03:38:62:eb:17:fd:30:08:de:34:5c:6f:f2:a2:65:66:87:a6:
36:10:6c:16:bd:db:8c:a7:b3:68:47:1c:95:30:7d:08:d3:16:
98:eb:97:d1:46:a6:c3:af:05:3e:aa:78:b9:e1:63:b6:d7:01:
78:27:38:59:d5:1d:9a:e3:4b:a0:d6:42:b5:34:98:5f:74:14:
1d:43:0f:2d:b4:ce:b9:48:03:13:2c:9a:ac:17:dd:2b:bd:ff:
81:96:3f:06:11:02:c5:9a:92:4f:ca:4c:66:eb:5d:9b:86:85:
a0:84:8e:ee:23:31:7d:8e:d3:9f:2b:59:a5:32:ba:36:51:e1:
c9:f8:ee:d7:31:9a:9b:83:0e:7b:e6:55:be:3d:4a:1a:5e:12:
bb:92:09:cf:1a:3c:a8:09:3c:8c:1f:ef:45:3a:fc:d8:8c:f9:
b6:fc:ae:18:58:97:98:c7:14:4d:27:97:03:35:70:b5:7d:7f:
58:d1:0f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:22:25 2025 by rpki-client