Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/AoOUpojCmpvkqxXoBxLTxPJVbII.roa
File: AoOUpojCmpvkqxXoBxLTxPJVbII.roa (raw, json)
Hash identifier: nfN6f2JBBy6Ilff6SdDJp07xscaBVneoCMixBzek8+Q=
Subject key identifier: 02:83:94:A6:88:C2:9A:9B:E4:AB:15:E8:07:12:D3:C4:F2:55:6C:82
Certificate issuer: /CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Certificate serial: 019840EA2B8BCA5530604EFCB6B07A4514D7
Authority key identifier: A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/AoOUpojCmpvkqxXoBxLTxPJVbII.roa
Signing time: Fri 25 Jul 2025 09:29:05 +0000
ROA not before: Fri 25 Jul 2025 09:29:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 46.236.252.0/23 maxlen: 23
46.236.254.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.mft
rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:25:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:ea:2b:8b:ca:55:30:60:4e:fc:b6:b0:7a:45:14:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Validity
Not Before: Jul 25 09:29:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=028394a688c29a9be4ab15e80712d3c4f2556c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:87:17:08:d9:13:d5:4f:15:60:05:40:a2:b4:
ff:3e:b9:6d:b8:6c:3a:e6:4e:75:eb:cc:4b:bb:b2:
e2:18:d5:bd:57:a7:a3:93:6c:db:9f:ce:55:40:f2:
75:c6:eb:02:1c:2c:13:5c:b0:99:cf:6e:4e:e2:f8:
79:be:3c:d4:9b:7b:0b:64:cf:d5:ee:4f:48:d9:9a:
1f:6f:5c:2a:b1:e2:8c:22:39:04:06:90:64:79:11:
5b:79:c1:a6:53:ea:8b:e9:4c:9c:c2:54:82:16:c0:
25:a8:72:60:2e:4f:47:8f:b2:2d:2a:db:73:61:ce:
f6:f8:0a:84:1f:b4:70:54:20:09:03:68:2a:6d:6e:
4c:07:90:16:3d:52:36:66:f1:17:16:88:67:2d:b1:
df:f9:fe:31:16:45:01:99:67:91:ce:46:ce:8e:78:
bb:8a:45:cc:7f:01:21:2e:61:7a:f2:ad:ad:dd:7e:
d3:ce:61:ca:87:f7:b4:ca:99:40:5e:83:b7:25:65:
fe:d0:84:32:29:4a:3b:7e:26:4d:4c:c9:d4:4c:69:
4e:c1:fe:46:d7:d1:e4:90:39:fc:01:d8:47:c9:2a:
f5:c8:61:a9:72:7a:a2:4f:d5:8b:e5:6f:7f:ce:f5:
79:cf:55:97:d5:31:32:26:eb:ec:ab:0c:6d:b9:58:
e3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:83:94:A6:88:C2:9A:9B:E4:AB:15:E8:07:12:D3:C4:F2:55:6C:82
X509v3 Authority Key Identifier:
keyid:A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/AoOUpojCmpvkqxXoBxLTxPJVbII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.252.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:fd:76:5f:18:e8:ab:a0:be:c1:f5:1a:aa:cf:ec:4f:f2:23:
f8:d1:30:a3:75:f7:1f:0a:53:b8:a9:fd:a2:72:09:ae:fc:63:
d4:12:e4:5a:37:69:b5:1f:0a:92:e2:1a:9d:8f:3f:9f:68:dc:
5b:92:f1:70:08:b6:c2:7c:99:9f:2e:88:a6:94:64:cd:c6:2a:
2b:81:f6:9b:ca:6f:36:7d:2a:b6:9b:d0:c5:be:4f:60:be:18:
3b:5f:f5:ae:5b:d5:5e:89:69:9f:49:f2:d8:2c:f1:8b:cf:58:
19:32:44:0e:79:ae:61:ff:89:92:ad:36:2a:84:07:e6:52:c2:
74:c3:1d:0a:4a:2b:76:70:01:9c:b8:ec:2e:ad:62:00:b1:94:
1f:99:78:87:d5:9f:ec:3b:04:e7:35:8f:f3:f6:2d:16:98:34:
85:9d:08:a3:35:d0:a8:53:0e:4c:ad:89:20:4e:7c:77:c0:d4:
d1:b1:b2:db:94:db:bf:cd:51:07:16:a3:8b:72:09:c7:fe:2e:
94:ad:b1:bb:2e:61:c7:a8:3d:5d:da:45:05:f5:9d:ab:69:13:
c4:7a:51:d9:44:66:a7:6e:0a:53:6e:40:c8:1b:58:30:62:5d:
d9:85:08:83:a4:5a:6f:e0:cb:cf:40:57:35:2b:34:5c:da:4d:
b6:32:6f:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZhA6iuLylUwYE78trB6RRTXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyYjEyZThkZjNhYmQ1NTU5ZjljZjk2ODBhZjY1ZGQxNjU4
OWRlODYwHhcNMjUwNzI1MDkyOTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjgzOTRhNjg4YzI5YTliZTRhYjE1ZTgwNzEyZDNjNGYyNTU2YzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4cXCNkT1U8VYAVAorT/PrltuGw6
5k5168xLu7LiGNW9V6ejk2zbn85VQPJ1xusCHCwTXLCZz25O4vh5vjzUm3sLZM/V
7k9I2Zofb1wqseKMIjkEBpBkeRFbecGmU+qL6UycwlSCFsAlqHJgLk9Hj7ItKttz
Yc72+AqEH7RwVCAJA2gqbW5MB5AWPVI2ZvEXFohnLbHf+f4xFkUBmWeRzkbOjni7
ikXMfwEhLmF68q2t3X7TzmHKh/e0yplAXoO3JWX+0IQyKUo7fiZNTMnUTGlOwf5G
19HkkDn8AdhHySr1yGGpcnqiT9WL5W9/zvV5z1WX1TEyJuvsqwxtuVjjcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAKDlKaIwpqb5KsV6AcS08TyVWyCMB8GA1UdIwQY
MBaAFKKxLo3zq9VVn5z5aAr2XdFlid6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3JFdWpmT3IxVldmblBsb0N2WmQwV1dKM29ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lYzQ0ZWEtZWY0My00YjNhLWE2OWEt
YjRjYjYzN2RhOGMzLzEvQW9PVXBvakNtcHZrcXhYb0J4TFR4UEpWYklJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9lYzQ0ZWEtZWY0My00YjNhLWE2OWEtYjRjYjYzN2RhOGMz
LzEvb3JFdWpmT3IxVldmblBsb0N2WmQwV1dKM29ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLuz8MA0G
CSqGSIb3DQEBCwUAA4IBAQCq/XZfGOiroL7B9Rqqz+xP8iP40TCjdfcfClO4qf2i
cgmu/GPUEuRaN2m1HwqS4hqdjz+faNxbkvFwCLbCfJmfLoimlGTNxiorgfabym82
fSq2m9DFvk9gvhg7X/WuW9VeiWmfSfLYLPGLz1gZMkQOea5h/4mSrTYqhAfmUsJ0
wx0KSit2cAGcuOwurWIAsZQfmXiH1Z/sOwTnNY/z9i0WmDSFnQijNdCoUw5MrYkg
Tnx3wNTRsbLblNu/zVEHFqOLcgnH/i6UrbG7LmHHqD1d2kUF9Z2raRPEelHZRGan
bgpTbkDIG1gwYl3ZhQiDpFpv4MvPQFc1KzRc2k22Mm9r
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:07:10 2025 by rpki-client