Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/oSAUpgLA_DW69Ycvvg1dPitZILk.roa
File: oSAUpgLA_DW69Ycvvg1dPitZILk.roa (raw, json)
Hash identifier: vo5sp8Ty3OKAjRutAl+RadiKOa0t6niwbqCy39mCPP8=
Subject key identifier: A1:20:14:A6:02:C0:FC:35:BA:F5:87:2F:BE:0D:5D:3E:2B:59:20:B9
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019812A0ED7874F7705F55FDF41EF614692D
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/oSAUpgLA_DW69Ycvvg1dPitZILk.roa
Signing time: Wed 16 Jul 2025 09:46:33 +0000
ROA not before: Wed 16 Jul 2025 09:46:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25369
IP address blocks: 194.231.196.0/22 maxlen: 22
194.231.200.0/22 maxlen: 22
194.231.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:12:a0:ed:78:74:f7:70:5f:55:fd:f4:1e:f6:14:69:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 16 09:46:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a12014a602c0fc35baf5872fbe0d5d3e2b5920b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:dc:fa:4d:dc:d8:d7:d8:16:a4:e1:f9:65:74:
5b:39:d8:1d:23:8a:af:00:85:17:1c:20:14:41:88:
71:b5:5d:48:07:70:06:b9:b8:fd:6b:fd:88:30:6d:
dc:33:93:6c:61:2b:36:3d:68:07:54:90:df:27:a7:
7c:61:70:96:0c:94:05:be:5b:f7:55:8c:51:c6:d2:
1b:f5:3f:6e:27:14:b2:e6:6b:d3:c5:c6:16:66:d4:
01:a2:68:12:f6:4a:78:bf:ca:1c:d9:09:3b:b8:25:
32:60:0f:04:b9:cd:99:7e:00:8e:49:35:a3:93:8e:
e0:69:60:13:2b:9e:c8:93:ea:f1:2b:46:9f:78:73:
ca:3b:96:60:25:8b:d5:18:64:99:cc:a2:12:dc:c8:
e4:95:91:34:a0:6e:97:fe:2d:f2:20:1f:86:d9:41:
3d:4f:c2:34:5f:03:d0:b0:49:32:89:f9:53:b7:c6:
f6:47:87:02:ed:0e:9e:b1:ce:9b:1c:7d:96:f2:50:
ba:5c:90:17:84:40:f4:24:69:19:6f:de:1d:21:67:
95:eb:04:a8:f1:fb:ee:68:f7:f4:bf:41:b7:14:c2:
d6:a8:d8:3e:d1:fb:c5:ee:f8:62:93:3e:2d:8a:1d:
9c:30:2e:3b:ff:37:a9:d6:3e:a7:c0:00:10:39:3e:
08:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:20:14:A6:02:C0:FC:35:BA:F5:87:2F:BE:0D:5D:3E:2B:59:20:B9
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/oSAUpgLA_DW69Ycvvg1dPitZILk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.196.0-194.231.203.255
194.231.208.0/22
Signature Algorithm: sha256WithRSAEncryption
d3:e4:1c:ea:00:b5:1a:d7:83:0c:46:70:ea:95:e1:e3:6e:b4:
ad:00:87:29:84:5c:c9:c0:2b:10:0b:5c:d3:aa:5c:03:c3:ec:
0f:4b:57:c0:95:26:cf:19:30:3b:57:29:fe:97:a3:c2:39:2d:
4d:34:ff:52:75:0e:66:fd:cd:30:01:a4:9d:f4:cf:48:1e:f0:
8c:2f:ab:f1:ae:a0:d0:43:ac:2e:32:24:1b:84:f8:d5:a2:15:
f2:cc:22:6a:d9:2e:ab:00:54:26:ad:a3:74:e2:b6:25:1c:05:
c9:e8:79:3a:d1:48:9d:e2:ef:2e:9c:61:9b:aa:0c:f1:4b:ad:
37:b2:34:6d:c9:75:40:8f:4d:ef:05:7b:60:47:64:70:48:86:
0b:62:33:88:3c:dd:43:c9:96:fa:a2:91:35:80:16:42:34:5c:
9c:cd:d3:fc:40:97:a3:94:46:d7:f1:94:80:c5:90:a2:7b:2f:
1c:59:51:1d:5d:1c:76:94:83:49:67:a1:56:a6:4a:c8:21:f6:
fb:b1:61:20:dc:fc:df:13:fb:60:6e:5f:ac:f2:4c:ce:32:7c:
fb:e0:fa:d3:42:fd:4d:94:8e:f9:3b:46:44:6d:74:1a:3c:2e:
96:8e:f7:b3:c5:d7:a1:7f:fb:ac:09:84:33:41:65:71:ba:9a:
cb:08:b8:1b
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZgSoO14dPdwX1X99B72FGktMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjUwNzE2MDk0NjMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTIwMTRhNjAyYzBmYzM1YmFmNTg3MmZiZTBkNWQzZTJiNTkyMGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tz6TdzY19gWpOH5ZXRbOdgdI4qv
AIUXHCAUQYhxtV1IB3AGubj9a/2IMG3cM5NsYSs2PWgHVJDfJ6d8YXCWDJQFvlv3
VYxRxtIb9T9uJxSy5mvTxcYWZtQBomgS9kp4v8oc2Qk7uCUyYA8Euc2ZfgCOSTWj
k47gaWATK57Ik+rxK0afeHPKO5ZgJYvVGGSZzKIS3MjklZE0oG6X/i3yIB+G2UE9
T8I0XwPQsEkyiflTt8b2R4cC7Q6esc6bHH2W8lC6XJAXhED0JGkZb94dIWeV6wSo
8fvuaPf0v0G3FMLWqNg+0fvF7vhikz4tih2cMC47/zep1j6nwAAQOT4IrwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFKEgFKYCwPw1uvWHL74NXT4rWSC5MB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvb1NBVXBnTEFfRFc2OVljdnZnMWRQaXRaSUxrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBALC58QD
BALC58gDBALC59AwDQYJKoZIhvcNAQELBQADggEBANPkHOoAtRrXgwxGcOqV4eNu
tK0AhymEXMnAKxALXNOqXAPD7A9LV8CVJs8ZMDtXKf6Xo8I5LU00/1J1Dmb9zTAB
pJ30z0ge8Iwvq/GuoNBDrC4yJBuE+NWiFfLMImrZLqsAVCato3TitiUcBcnoeTrR
SJ3i7y6cYZuqDPFLrTeyNG3JdUCPTe8Fe2BHZHBIhgtiM4g83UPJlvqikTWAFkI0
XJzN0/xAl6OURtfxlIDFkKJ7LxxZUR1dHHaUg0lnoVamSsgh9vuxYSDc/N8T+2Bu
X6zyTM4yfPvg+tNC/U2Ujvk7RkRtdBo8LpaO97PF16F/+6wJhDNBZXG6mssIuBs=
-----END CERTIFICATE-----
Generated at Mon Jul 21 18:13:09 2025 by rpki-client