Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OgyiXVDEOgt88AxW40Ti9ZaNtaQ.roa
File: OgyiXVDEOgt88AxW40Ti9ZaNtaQ.roa (raw, json)
Hash identifier: dxP4GSuI/EjRb0utluxkHVBwzAvmtAGM8/HYV1BYAm8=
Subject key identifier: 3A:0C:A2:5D:50:C4:3A:0B:7C:F0:0C:56:E3:44:E2:F5:96:8D:B5:A4
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 01984054068C35463FF831707B4C61FF5FB2
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OgyiXVDEOgt88AxW40Ti9ZaNtaQ.roa
Signing time: Fri 25 Jul 2025 06:45:05 +0000
ROA not before: Fri 25 Jul 2025 06:45:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25186
IP address blocks: 81.80.17.0/24 maxlen: 24
81.80.72.0/24 maxlen: 24
194.2.39.0/27 maxlen: 27
194.2.78.0/27 maxlen: 27
194.2.78.32/27 maxlen: 27
194.3.255.0/24 maxlen: 24
195.6.9.0/24 maxlen: 24
195.6.20.0/24 maxlen: 24
195.6.66.0/24 maxlen: 24
195.6.67.0/24 maxlen: 24
195.6.171.0/24 maxlen: 24
195.6.174.0/24 maxlen: 24
195.6.230.0/24 maxlen: 24
217.167.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:54:06:8c:35:46:3f:f8:31:70:7b:4c:61:ff:5f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jul 25 06:45:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a0ca25d50c43a0b7cf00c56e344e2f5968db5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0b:ce:11:7e:98:1a:75:50:9e:d1:27:5f:67:
67:59:98:c8:5e:d8:b2:98:27:59:4f:06:de:16:a0:
58:70:e2:74:3d:7f:07:69:1e:b7:14:7b:00:46:e9:
c8:e2:60:39:b4:0a:f5:74:0e:77:2f:67:0c:1a:87:
35:10:88:e1:f1:d1:79:79:2c:41:06:70:6f:f6:d3:
8a:8c:a5:2f:a5:52:9d:0a:52:41:38:0f:91:58:30:
46:9f:3d:1a:4a:4f:89:a1:df:be:fe:13:b1:31:2b:
fc:4e:86:cd:a8:7c:10:9a:c9:bc:78:31:a6:65:a5:
a1:5f:24:ce:59:8a:b1:4c:12:21:51:7a:d7:33:81:
07:7c:53:0a:7a:8b:da:43:fa:f5:37:e2:ef:82:7c:
f5:53:84:99:c4:5b:e9:f3:3d:a5:ef:90:64:08:bd:
f5:13:2a:55:aa:71:06:ea:bb:e6:c7:a3:27:b6:81:
39:34:68:98:85:96:13:2a:10:e1:06:d6:f6:86:1c:
60:4e:8c:49:05:12:09:2e:bc:c1:bf:a0:a0:d4:a2:
29:48:f0:9d:4b:1e:e2:bf:f8:2a:fe:08:73:9c:da:
be:43:df:bc:8b:0b:27:ed:1c:ba:14:34:df:4b:f3:
58:2f:3c:93:8b:83:48:8e:4c:c5:e4:cd:48:2e:4d:
e7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0C:A2:5D:50:C4:3A:0B:7C:F0:0C:56:E3:44:E2:F5:96:8D:B5:A4
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OgyiXVDEOgt88AxW40Ti9ZaNtaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.80.17.0/24
81.80.72.0/24
194.2.39.0/27
194.2.78.0/26
194.3.255.0/24
195.6.9.0/24
195.6.20.0/24
195.6.66.0/23
195.6.171.0/24
195.6.174.0/24
195.6.230.0/24
217.167.104.0/24
Signature Algorithm: sha256WithRSAEncryption
06:96:94:5b:c1:43:73:41:4f:f3:2a:93:5a:dc:bb:60:ce:57:
37:b4:18:c8:04:c8:37:17:53:a6:6b:30:43:ef:cc:df:9e:26:
0b:51:74:52:5f:22:a1:a3:57:ff:72:b5:07:38:5b:90:1e:89:
7a:57:fb:49:23:85:f9:63:a1:1c:d6:16:65:a3:8e:77:7a:12:
ab:56:f8:e5:75:af:82:a4:2f:e5:c8:b3:c1:07:43:b6:bd:8d:
04:1b:2a:7a:f0:7a:a3:cf:31:3f:cd:7d:19:d7:74:f2:f4:47:
55:47:79:9d:e1:46:e7:62:d9:57:75:67:04:97:8f:ae:08:2d:
d6:c6:64:58:e9:8d:68:fa:bc:10:6b:7c:1a:33:ce:70:86:5d:
54:cb:5f:3d:88:27:6e:19:66:9a:5a:c7:74:8a:9f:7d:9f:95:
ad:2d:83:77:45:17:88:98:bd:dc:14:27:dd:90:99:61:f0:9e:
ac:7e:5c:35:57:1b:31:10:bf:cb:90:88:e6:fc:b7:9c:f3:db:
7a:fe:a1:ec:cd:0d:43:a8:a6:cb:18:fc:0c:e0:49:24:92:3d:
41:5b:00:30:c4:78:24:8b:80:25:e8:6d:b9:ae:ca:43:4c:95:
c4:e4:d3:b1:95:52:bf:0e:33:88:61:16:9e:f4:14:6d:16:2e:
93:24:4b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:43:48 2025 by rpki-client