Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/OzNkZE0A4KGqWopF7O0_V6_HHEY.roa
File: OzNkZE0A4KGqWopF7O0_V6_HHEY.roa (raw, json)
Hash identifier: b47j+LkzmnAZlUl5ybz1R4hMbe7uAMS3B95OiKd0FIg=
Subject key identifier: 3B:33:64:64:4D:00:E0:A1:AA:5A:8A:45:EC:ED:3F:57:AF:C7:1C:46
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 019A0D7B6A778BB0781480B41A707FAE7EB2
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/OzNkZE0A4KGqWopF7O0_V6_HHEY.roa
Signing time: Wed 22 Oct 2025 19:53:03 +0000
ROA not before: Wed 22 Oct 2025 19:53:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33667
IP address blocks: 9.142.32.0/19 maxlen: 19
9.142.48.0/20 maxlen: 20
9.142.64.0/18 maxlen: 18
9.142.96.0/19 maxlen: 19
9.142.192.0/19 maxlen: 19
138.226.48.0/21 maxlen: 21
138.226.64.0/20 maxlen: 20
138.226.112.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0d:7b:6a:77:8b:b0:78:14:80:b4:1a:70:7f:ae:7e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Oct 22 19:53:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b3364644d00e0a1aa5a8a45eced3f57afc71c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:41:88:bf:14:ce:8d:6d:88:c7:b1:9b:0c:52:
89:91:37:13:5a:7c:55:f2:b1:4a:50:3b:c9:07:8a:
5f:12:3c:9c:1e:a9:ba:c2:8a:4f:c6:27:b3:80:ce:
ea:33:39:18:74:97:06:91:22:ca:79:e2:5f:14:9f:
d9:58:82:b6:d5:ea:ba:71:6e:09:41:74:d6:9b:9d:
67:58:35:d0:59:a9:59:57:e3:7d:01:9a:c5:79:fa:
a3:8f:65:ba:97:42:ec:be:e4:4e:b9:2e:2b:b2:49:
56:71:02:21:5d:6b:4c:f9:c3:30:c6:11:1c:a3:67:
a3:a9:b9:03:0e:ce:d7:f0:b8:d2:1b:ec:60:f2:ce:
ec:dd:d3:2b:ad:f9:a4:6c:46:c9:f4:4b:03:50:8d:
2b:f4:a2:1a:3b:d2:d2:30:a5:8a:04:35:53:41:d2:
74:c9:08:fe:c9:89:61:85:59:84:a0:8c:03:90:af:
70:d8:5b:a5:91:79:45:8e:39:e4:ef:2a:60:72:2e:
b3:e8:75:b8:0a:2c:75:a0:b8:c1:03:12:b1:4c:59:
d9:56:76:b2:2e:d2:cc:f7:a7:cb:3f:1e:11:c0:51:
45:93:87:89:94:16:07:b2:97:4b:8d:bb:80:0b:e7:
63:ca:c4:38:3b:f7:36:a3:52:4f:f5:78:07:6d:8d:
1b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:33:64:64:4D:00:E0:A1:AA:5A:8A:45:EC:ED:3F:57:AF:C7:1C:46
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/OzNkZE0A4KGqWopF7O0_V6_HHEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.142.32.0-9.142.127.255
9.142.192.0/19
138.226.48.0/21
138.226.64.0/20
138.226.112.0/21
Signature Algorithm: sha256WithRSAEncryption
87:08:7a:2f:d4:bb:b7:a9:d4:d7:9d:b8:af:30:be:54:f2:d4:
90:fd:a7:c9:f5:28:e2:61:5d:98:44:55:2d:82:4b:15:51:c2:
ca:b3:c1:2e:26:65:f8:76:57:c0:01:c9:08:f3:bf:16:42:ee:
28:90:99:30:74:84:85:c5:50:88:50:63:fa:4f:5f:cc:e9:97:
a4:32:10:41:0f:a0:df:75:43:37:3b:d7:bf:b0:19:60:8a:32:
5e:68:90:5a:d1:30:fb:3e:cf:e5:1e:0e:a8:fe:9f:ca:d5:e6:
e5:7c:61:f0:32:7e:d9:40:ab:8f:23:37:e0:2a:7e:e6:d5:e5:
ea:23:c6:9f:73:0e:99:80:d5:81:36:62:8c:2b:8b:33:44:ea:
e0:4b:7b:15:93:f6:03:ad:2c:ed:73:21:b7:59:7b:9c:91:54:
88:9b:9d:3d:a9:4f:a4:ff:0b:ef:a7:65:78:7c:dd:50:cb:78:
92:f3:3e:34:d0:f7:2b:46:3d:93:fb:21:2b:1c:76:0f:15:52:
aa:9e:f7:3f:2b:1b:6f:cb:fc:ee:23:33:b9:56:f2:f8:30:26:
c0:e3:6f:2f:22:4b:75:50:df:f0:23:f9:9c:00:1a:1b:1f:f5:
01:1b:b2:7d:77:84:12:74:c1:4e:b0:a4:ff:8e:cd:62:c5:7a:
b0:2a:c3:10
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZoNe2p3i7B4FIC0GnB/rn6yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0M2U0NDdlZGI4YTVlMGUxYjFkN2Y1Y2RjMjg3YzM2NGE1
ZmIwYjUwHhcNMjUxMDIyMTk1MzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjMzNjQ2NDRkMDBlMGExYWE1YThhNDVlY2VkM2Y1N2FmYzcxYzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkGIvxTOjW2Ix7GbDFKJkTcTWnxV
8rFKUDvJB4pfEjycHqm6wopPxiezgM7qMzkYdJcGkSLKeeJfFJ/ZWIK21eq6cW4J
QXTWm51nWDXQWalZV+N9AZrFefqjj2W6l0LsvuROuS4rsklWcQIhXWtM+cMwxhEc
o2ejqbkDDs7X8LjSG+xg8s7s3dMrrfmkbEbJ9EsDUI0r9KIaO9LSMKWKBDVTQdJ0
yQj+yYlhhVmEoIwDkK9w2FulkXlFjjnk7ypgci6z6HW4Cix1oLjBAxKxTFnZVnay
LtLM96fLPx4RwFFFk4eJlBYHspdLjbuAC+djysQ4O/c2o1JP9XgHbY0bgwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFDszZGRNAOChqlqKReztP1evxxxGMB8GA1UdIwQY
MBaAFHQ+RH7bil4OGx1/XNwofDZKX7C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDct
NWUwZjRhYjgwOWJiLzEvT3pOa1pFMEE0S0dxV29wRjdPMF9WNl9ISEVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDctNWUwZjRhYjgwOWJi
LzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBAUJjiAD
BAcJjgADBAUJjsADBAOK4jADBASK4kADBAOK4nAwDQYJKoZIhvcNAQELBQADggEB
AIcIei/Uu7ep1NeduK8wvlTy1JD9p8n1KOJhXZhEVS2CSxVRwsqzwS4mZfh2V8AB
yQjzvxZC7iiQmTB0hIXFUIhQY/pPX8zpl6QyEEEPoN91Qzc717+wGWCKMl5okFrR
MPs+z+UeDqj+n8rV5uV8YfAyftlAq48jN+AqfubV5eojxp9zDpmA1YE2YowrizNE
6uBLexWT9gOtLO1zIbdZe5yRVIibnT2pT6T/C++nZXh83VDLeJLzPjTQ9ytGPZP7
ISscdg8VUqqe9z8rG2/L/O4jM7lW8vgwJsDjby8iS3VQ3/Aj+ZwAGhsf9QEbsn13
hBJ0wU6wpP+OzWLFerAqwxA=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:00:07 2025 by rpki-client