
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/ozZE4V4pu8CXUMtiu4vEAUI5W90.roa
File: ozZE4V4pu8CXUMtiu4vEAUI5W90.roa (raw, json)
Hash identifier: p9IVNQ9TpNobGFhvkATSVt/+JVYF+c2vrdj6oFs4kB4=
Subject key identifier: A3:36:44:E1:5E:29:BB:C0:97:50:CB:62:BB:8B:C4:01:42:39:5B:DD
Certificate issuer: /CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Certificate serial: 019888F5C4445B5FC48363A836139C0AC6AC
Authority key identifier: F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/ozZE4V4pu8CXUMtiu4vEAUI5W90.roa
Signing time: Fri 08 Aug 2025 09:14:24 +0000
ROA not before: Fri 08 Aug 2025 09:14:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207190
IP address blocks: 45.141.68.0/22 maxlen: 22
45.141.68.0/24 maxlen: 24
45.141.69.0/24 maxlen: 24
45.141.70.0/24 maxlen: 24
45.141.71.0/24 maxlen: 24
178.236.40.0/21 maxlen: 21
178.236.40.0/23 maxlen: 23
178.236.40.0/24 maxlen: 24
178.236.41.0/24 maxlen: 24
178.236.42.0/23 maxlen: 23
178.236.42.0/24 maxlen: 24
178.236.43.0/24 maxlen: 24
178.236.44.0/22 maxlen: 22
178.236.44.0/24 maxlen: 24
178.236.45.0/24 maxlen: 24
178.236.46.0/24 maxlen: 24
178.236.47.0/24 maxlen: 24
193.218.38.0/23 maxlen: 23
193.218.38.0/24 maxlen: 24
193.218.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 00:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:f5:c4:44:5b:5f:c4:83:63:a8:36:13:9c:0a:c6:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Validity
Not Before: Aug 8 09:14:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a33644e15e29bbc09750cb62bb8bc40142395bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:96:32:bf:5c:1f:5b:ab:32:e4:09:d6:cf:ec:
51:42:1d:a1:99:aa:24:56:fd:c6:ef:b2:42:4e:5b:
3b:5c:a5:df:f5:61:c8:1d:aa:64:aa:41:c3:b5:65:
29:c3:b1:70:24:79:a2:39:66:07:d1:95:89:b4:4d:
9e:ba:a9:e4:95:14:64:96:a6:03:03:7c:19:ca:5f:
d8:9d:e5:bc:fa:9a:46:89:67:b9:0e:27:05:d1:38:
88:27:01:95:27:ad:af:a9:3e:dc:80:ab:1e:7d:89:
4c:17:23:ea:a8:ad:4f:d1:44:40:da:f6:b1:c2:a6:
a1:ce:f6:95:b0:ca:18:4e:58:36:fc:ac:a8:b0:22:
20:ce:28:db:a5:5c:0d:01:1d:90:96:e5:49:b1:52:
6c:2d:ed:3b:71:4a:ac:6f:db:08:64:a7:5a:13:e5:
14:65:a0:40:36:dc:49:6e:11:79:1d:59:42:22:a1:
61:c1:e2:01:7c:b1:ff:f7:5e:1e:47:dc:4b:48:00:
e3:89:d2:6a:2d:a4:d8:d3:81:18:5c:5f:24:4a:0e:
0a:fd:75:62:bc:cf:57:d5:7f:92:bd:3b:27:c3:a4:
fc:17:a6:eb:44:88:05:44:84:06:86:20:c9:48:9d:
2a:dd:f5:20:0b:ae:b1:d0:61:16:b2:d7:87:81:a1:
b6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:36:44:E1:5E:29:BB:C0:97:50:CB:62:BB:8B:C4:01:42:39:5B:DD
X509v3 Authority Key Identifier:
keyid:F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/ozZE4V4pu8CXUMtiu4vEAUI5W90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.68.0/22
178.236.40.0/21
193.218.38.0/23
Signature Algorithm: sha256WithRSAEncryption
53:c7:8e:ad:36:67:ac:09:a0:0c:c3:a5:77:b3:0f:60:bf:1f:
3a:f0:6b:ae:3c:aa:e1:f7:be:79:7c:0d:99:02:81:c0:6a:af:
59:8a:c1:78:c8:66:0a:90:a0:f8:43:d8:3e:ae:ea:c8:19:55:
17:cb:e9:c3:6f:e5:1f:a9:5d:af:ef:ef:6a:c0:f2:6c:d7:00:
1c:54:b4:43:6c:a1:6e:a3:15:9c:d6:29:d3:d3:37:36:32:d5:
ee:4c:3d:e3:d6:23:58:17:89:45:64:c0:18:89:c0:34:25:ab:
d5:cb:44:4e:3c:47:16:6a:c8:25:0c:89:27:0a:ab:81:2c:3f:
55:9f:b0:2b:17:9a:28:31:91:86:8d:fb:75:06:a8:d6:f2:13:
2a:6d:9c:cf:93:49:92:e8:02:ee:81:98:31:e7:0c:2d:b7:35:
f7:03:f4:f5:37:94:02:e1:6c:27:03:e0:91:03:4d:21:26:0e:
e5:53:8a:2c:bd:64:12:4f:59:19:01:fa:22:27:73:bf:b0:3b:
3a:f1:7f:fa:13:c1:02:cf:cc:6c:91:a0:81:aa:e8:e8:a7:f5:
cc:31:37:a8:71:d6:5a:5b:41:f2:c1:68:ab:52:c5:95:d5:f7:
fb:f8:b0:3a:5c:61:75:41:95:84:1a:42:04:b5:50:d9:25:2b:
af:f7:b9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 08:44:05 2025 by rpki-client