Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/O29Zxmmx6-HgpfQCaZNYO-hkBL0.roa
File: O29Zxmmx6-HgpfQCaZNYO-hkBL0.roa (raw, json)
Hash identifier: AJ99xUwGr6nteSCZy2ZqWhrEmfyvYWpbIQR3DNjRUos=
Subject key identifier: 3B:6F:59:C6:69:B1:EB:E1:E0:A5:F4:02:69:93:58:3B:E8:64:04:BD
Certificate issuer: /CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Certificate serial: 019A4F2CBBCADD0342177273EE034C9FCDD8
Authority key identifier: 03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/O29Zxmmx6-HgpfQCaZNYO-hkBL0.roa
Signing time: Tue 04 Nov 2025 14:02:03 +0000
ROA not before: Tue 04 Nov 2025 14:02:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44486
IP address blocks: 176.118.193.0/24 maxlen: 24
185.53.249.0/24 maxlen: 24
185.115.205.0/24 maxlen: 24
192.35.206.0/24 maxlen: 24
198.135.220.0/24 maxlen: 24
212.11.93.0/24 maxlen: 24
212.104.211.0/24 maxlen: 24
2a0c:a300::/29 maxlen: 29
2a12:ea80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2c:bb:ca:dd:03:42:17:72:73:ee:03:4c:9f:cd:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Validity
Not Before: Nov 4 14:02:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b6f59c669b1ebe1e0a5f4026993583be86404bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:95:6d:de:50:50:7b:26:d5:2c:f8:35:c4:ad:
41:76:5b:57:ad:13:90:da:91:11:9f:63:4d:6c:fa:
1f:a9:a0:a2:5b:de:97:20:e0:46:d9:19:77:92:a8:
be:e7:af:c7:cc:97:eb:a8:b6:49:25:76:22:e3:01:
f0:1a:b1:b5:de:40:6d:70:17:07:a7:79:7e:9e:90:
68:ec:37:6a:a6:82:17:48:be:0f:32:58:da:ab:23:
a2:af:02:e3:61:c1:54:de:52:40:22:0d:cc:75:d9:
3e:b4:3e:c9:e3:b8:6f:49:55:65:dd:e5:c5:32:f9:
d3:a6:ef:b3:a0:d5:ca:c6:ee:ba:20:ca:cb:6d:3f:
8f:7f:e4:b3:1e:74:a8:21:0e:94:d7:d6:fd:e7:a3:
d5:17:31:5a:bd:0b:58:ac:91:b2:d8:24:66:b4:34:
7f:cc:b3:51:78:15:ab:c4:21:9c:90:ed:bf:ce:8c:
ff:c4:dd:15:f1:6a:3e:61:1d:4f:9d:4a:7b:a8:26:
11:b7:19:4a:e8:03:c6:d1:50:2c:d6:1d:3e:a0:cf:
4b:33:a7:9b:18:25:77:3f:17:7a:00:40:7c:ee:33:
7a:bf:1c:08:80:98:4b:29:2f:11:53:c2:5b:55:d9:
db:bd:e5:af:cd:db:3f:96:d5:41:18:a4:6f:17:34:
ee:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6F:59:C6:69:B1:EB:E1:E0:A5:F4:02:69:93:58:3B:E8:64:04:BD
X509v3 Authority Key Identifier:
keyid:03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/O29Zxmmx6-HgpfQCaZNYO-hkBL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.193.0/24
185.53.249.0/24
185.115.205.0/24
192.35.206.0/24
198.135.220.0/24
212.11.93.0/24
212.104.211.0/24
IPv6:
2a0c:a300::/29
2a12:ea80::/29
Signature Algorithm: sha256WithRSAEncryption
5d:05:ec:05:f3:76:f9:dc:b8:89:c6:15:b0:7d:c9:dc:48:fb:
3e:4e:ab:35:95:77:b8:86:d8:58:c5:5f:c3:92:b2:d1:30:eb:
87:2f:38:0c:20:c6:21:51:76:9c:74:10:dd:cf:af:3b:18:dd:
ad:1f:8d:ea:4d:55:31:af:c3:06:d3:d5:a6:c6:78:61:03:21:
00:df:d5:39:d8:e4:f0:90:d2:c9:69:e0:4e:f2:49:39:b7:fe:
e9:dd:97:74:f3:bd:54:6e:7a:01:69:ae:f7:70:36:39:b6:1a:
ca:21:64:b9:8f:14:6c:81:9f:0a:2e:c5:7a:a3:4d:25:4e:d0:
2d:5c:7c:2f:27:92:2b:f1:9e:7b:2e:65:91:7f:e4:2f:0e:ba:
60:b2:35:48:17:2a:43:ca:6a:d8:d4:b7:49:eb:1d:5e:f7:a8:
9d:7f:65:5a:1b:79:47:0b:50:0f:2a:40:ac:53:86:96:4b:50:
8a:e3:a5:89:79:c1:33:15:76:87:54:c5:f0:6e:9c:ae:ad:9b:
2e:5d:12:df:15:d2:16:70:cc:70:7a:3e:22:48:73:14:3f:06:
e6:d6:cc:ef:12:13:24:bb:8c:a7:71:50:c6:27:98:3b:f6:e8:
bb:15:93:fa:dd:a9:11:6c:83:1c:dd:2f:1e:b6:25:ea:96:46:
df:42:25:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:38:52 2025 by rpki-client