Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/Ovnkzgu3GObRw7FEQRBgXQjx5M4.roa
File: Ovnkzgu3GObRw7FEQRBgXQjx5M4.roa (raw, json)
Hash identifier: nJnymsSFWBg9H1fUFjESgx2imNhbNeKcWoh7uta0L5c=
Subject key identifier: 3A:F9:E4:CE:0B:B7:18:E6:D1:C3:B1:44:41:10:60:5D:08:F1:E4:CE
Certificate issuer: /CN=09b4bf37f39eec62982c4b63709fab5d146c7373
Certificate serial: 0197700000FA647E5B5835D7293E70EBD402
Authority key identifier: 09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/Ovnkzgu3GObRw7FEQRBgXQjx5M4.roa
Signing time: Sat 14 Jun 2025 19:52:17 +0000
ROA not before: Sat 14 Jun 2025 19:52:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34177
IP address blocks: 84.246.224.0/21 maxlen: 24
89.44.110.0/23 maxlen: 24
92.39.240.0/20 maxlen: 24
94.247.24.0/21 maxlen: 24
185.111.228.0/22 maxlen: 24
185.158.44.0/22 maxlen: 24
188.208.198.0/23 maxlen: 24
2a02:23e0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 07:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:00:00:fa:64:7e:5b:58:35:d7:29:3e:70:eb:d4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b4bf37f39eec62982c4b63709fab5d146c7373
Validity
Not Before: Jun 14 19:52:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3af9e4ce0bb718e6d1c3b1444110605d08f1e4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:76:47:8f:91:9e:1a:8f:35:30:67:b9:4f:78:
fc:31:75:4d:f6:c0:92:f9:9a:2d:89:d2:65:ac:9e:
21:80:bc:a3:bc:11:77:07:c2:e9:57:bd:5a:c9:a4:
f7:fb:45:c0:9a:1d:87:5c:0e:da:6d:bc:bd:0c:8f:
a2:da:fd:c4:5f:cf:95:79:f5:2f:37:c3:59:70:41:
63:74:72:04:d6:47:66:d2:1d:3e:67:df:35:11:df:
95:37:35:6e:4a:1e:64:eb:ec:bd:55:81:d7:e4:07:
4d:0f:20:c9:28:e6:a7:85:a7:90:b2:bc:3b:2b:ec:
24:36:df:21:be:e3:eb:6b:36:23:f9:ea:c5:e6:27:
2f:44:d4:9e:8c:84:9d:9c:e2:26:ab:88:49:94:df:
fa:b9:aa:99:17:87:90:f7:a1:34:66:f5:88:e4:6c:
37:b1:44:a6:f1:ef:a7:84:13:4f:67:b4:5b:0c:2e:
7d:93:14:da:3b:63:79:5b:06:13:6a:7f:da:10:67:
7d:a9:03:9b:da:fb:29:9c:a9:7e:dd:50:13:0b:89:
6d:0e:72:43:cf:33:41:8c:d7:9a:86:15:bc:8e:46:
33:86:b3:80:32:30:57:27:36:c1:9b:c3:88:be:8f:
5e:9f:55:7d:f4:b1:5c:33:8e:00:9b:7c:07:34:fa:
ec:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F9:E4:CE:0B:B7:18:E6:D1:C3:B1:44:41:10:60:5D:08:F1:E4:CE
X509v3 Authority Key Identifier:
keyid:09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/Ovnkzgu3GObRw7FEQRBgXQjx5M4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.224.0/21
89.44.110.0/23
92.39.240.0/20
94.247.24.0/21
185.111.228.0/22
185.158.44.0/22
188.208.198.0/23
IPv6:
2a02:23e0::/32
Signature Algorithm: sha256WithRSAEncryption
22:cf:37:8e:61:46:93:97:0f:93:a2:8f:8e:8a:1b:96:c6:5c:
76:2f:ca:5d:51:6d:15:a0:df:37:0e:42:a7:31:98:f6:5e:c1:
9a:2e:4a:69:7a:38:61:fa:12:8e:e9:29:0d:8f:1e:49:e4:ee:
5c:f3:b3:47:3d:72:cd:7d:69:f1:07:0c:f5:1a:93:0f:fe:cb:
a7:5c:77:51:51:d2:36:d2:35:f7:71:dd:9a:21:34:87:43:d4:
7e:40:9c:d2:ed:a0:a0:e8:d8:3f:33:30:27:7f:9d:21:4d:fa:
a9:e7:eb:8b:9c:04:ae:0e:9e:76:1a:00:f3:10:24:89:af:8d:
a8:6e:dc:4f:0c:c2:d7:da:0f:23:dd:a0:9e:a5:86:ab:67:cf:
84:91:a0:cb:74:5f:67:80:ba:e4:0a:dc:89:32:be:29:c4:e1:
d1:09:de:2d:58:62:79:d5:85:83:c0:a7:f0:e1:b3:58:df:c1:
dd:8c:f5:9a:d7:d8:c2:ea:58:6f:ad:88:df:d9:9a:3d:ac:1c:
6a:fa:70:ed:9f:1d:54:4a:da:cf:62:e6:bb:07:0a:d5:56:11:
15:d7:14:b7:36:d5:7e:33:23:3a:27:96:bd:11:b3:49:ef:03:
24:a5:6a:1f:81:19:a1:f3:cb:44:cc:0e:66:d7:b8:9e:97:da:
9f:82:64:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 14:45:13 2025 by rpki-client