Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/oASD19FfafZ9Bk1cWcQplzT_eGk.roa
File: oASD19FfafZ9Bk1cWcQplzT_eGk.roa (raw, json)
Hash identifier: 5KCTISkJIdPY0yxRXHdtjkMOZNoEuDC1m+xGq1kXxdY=
Subject key identifier: A0:04:83:D7:D1:5F:69:F6:7D:06:4D:5C:59:C4:29:97:34:FF:78:69
Certificate issuer: /CN=5afd8667cce95be0ae96058c4550d7088035312f
Certificate serial: 01984B2EA6AD6D39BC8350319381831E9D42
Authority key identifier: 5A:FD:86:67:CC:E9:5B:E0:AE:96:05:8C:45:50:D7:08:80:35:31:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/oASD19FfafZ9Bk1cWcQplzT_eGk.roa
Signing time: Sun 27 Jul 2025 09:20:05 +0000
ROA not before: Sun 27 Jul 2025 09:20:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212406
IP address blocks: 195.246.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:2e:a6:ad:6d:39:bc:83:50:31:93:81:83:1e:9d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5afd8667cce95be0ae96058c4550d7088035312f
Validity
Not Before: Jul 27 09:20:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a00483d7d15f69f67d064d5c59c4299734ff7869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ba:b4:fc:4e:a9:15:1f:29:72:1e:fb:65:2b:
1b:87:24:2b:4c:f3:a1:20:84:87:2d:b3:97:0a:63:
93:af:ce:cd:16:fa:9f:94:3e:ea:3f:33:3d:7f:4b:
b7:b7:0a:d5:af:9e:81:88:20:a0:1b:c8:e2:a2:e2:
60:89:b9:0d:1a:6d:6e:bf:d8:3f:07:64:70:bb:0f:
d7:19:17:f6:52:66:a6:09:ba:6f:01:c1:4e:78:0b:
e4:b8:c5:6c:b7:27:a8:a2:25:09:3b:65:12:41:c0:
78:56:a2:f9:55:06:ea:03:b8:81:78:f3:fe:b1:a1:
ce:f1:5f:fb:42:71:05:77:c8:3a:94:6f:e9:3d:6e:
9b:e6:c1:2a:cd:01:65:2c:e8:02:84:63:cb:7b:01:
e6:af:ee:00:9e:30:62:8d:f8:53:c0:ef:90:86:b2:
0c:56:1d:e8:c2:a2:78:2e:f6:be:7e:e5:37:22:97:
0b:78:c8:5d:44:0c:68:99:f7:14:12:6a:37:61:18:
5c:a9:5c:60:5e:1f:fe:e0:bd:e6:5f:36:08:bc:6b:
87:05:e1:52:9d:a8:19:db:63:fd:a7:c8:82:3c:99:
42:4a:25:a0:3f:cc:d5:f3:a0:d3:b0:f3:ec:52:fb:
0b:f5:2f:14:f0:66:95:a5:98:ef:75:a3:0b:c5:c2:
e4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:04:83:D7:D1:5F:69:F6:7D:06:4D:5C:59:C4:29:97:34:FF:78:69
X509v3 Authority Key Identifier:
keyid:5A:FD:86:67:CC:E9:5B:E0:AE:96:05:8C:45:50:D7:08:80:35:31:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/oASD19FfafZ9Bk1cWcQplzT_eGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.246.99.0/24
Signature Algorithm: sha256WithRSAEncryption
20:b5:0f:9d:59:cf:69:5b:94:7c:c5:31:61:94:8d:bb:24:d0:
9a:de:52:c5:df:bd:6d:e6:fa:e0:ce:fe:d2:6b:66:1f:61:95:
de:9e:d9:11:05:c4:4a:96:17:a5:71:ae:96:30:fa:a7:23:7b:
81:3a:22:1c:38:8b:bf:2f:64:37:b3:67:0b:04:b9:c6:9d:0d:
bf:de:9b:27:b1:4e:4c:27:4b:88:50:11:c6:9f:87:4e:4e:04:
61:52:9a:fc:5b:79:1a:0d:c1:2c:ee:dc:f8:5e:82:98:02:5c:
53:ba:6a:2e:f1:b7:ca:0b:5a:8c:d5:61:de:54:66:85:6a:55:
79:5c:2d:bb:26:78:d6:59:60:9c:99:95:3a:d8:89:15:49:81:
dc:38:5b:68:ca:92:2d:cf:47:4d:fc:e6:45:06:53:ab:80:a0:
91:78:3a:be:ba:1d:ca:1c:75:1b:57:36:9b:93:7a:5d:4a:91:
47:c7:e2:60:87:60:b5:17:ca:51:62:9e:c6:b7:ec:64:63:e4:
94:ba:9c:ee:3b:88:da:76:13:05:58:88:69:2a:95:2d:92:71:
f2:39:ff:cb:1f:0d:0c:b1:cc:2b:61:16:49:96:89:8b:5e:72:
2e:69:a6:36:f7:15:a4:ec:63:a5:13:e1:67:2d:f6:e2:99:dc:
c4:d7:7b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:45:17 2025 by rpki-client