Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/OSXtgZFTRCqapZbj1Rss-9P6qbI.roa
File: OSXtgZFTRCqapZbj1Rss-9P6qbI.roa (raw, json)
Hash identifier: AUmjKUojOqL9JzPQrWExZ3cDw/gVJywbQJ3W19HFEWU=
Subject key identifier: 39:25:ED:81:91:53:44:2A:9A:A5:96:E3:D5:1B:2C:FB:D3:FA:A9:B2
Certificate issuer: /CN=3d0483538737453e2f57ffb57499c3922e83636d
Certificate serial: 0197E446ED0B255F25D03629EE609B41C65F
Authority key identifier: 3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/OSXtgZFTRCqapZbj1Rss-9P6qbI.roa
Signing time: Mon 07 Jul 2025 09:45:42 +0000
ROA not before: Mon 07 Jul 2025 09:45:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206996
IP address blocks: 45.156.84.0/24 maxlen: 24
45.156.85.0/24 maxlen: 24
185.150.25.0/24 maxlen: 24
194.62.1.0/24 maxlen: 24
194.62.29.0/24 maxlen: 24
194.62.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e4:46:ed:0b:25:5f:25:d0:36:29:ee:60:9b:41:c6:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0483538737453e2f57ffb57499c3922e83636d
Validity
Not Before: Jul 7 09:45:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3925ed819153442a9aa596e3d51b2cfbd3faa9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:65:34:77:b9:d7:43:9b:1a:6c:62:28:a0:cc:
bb:7b:75:e7:d1:94:5a:d3:e3:70:46:21:03:92:fb:
10:e7:ed:79:4f:80:90:4d:7c:22:c0:10:b3:03:ba:
ad:e6:48:06:bf:cf:98:bc:91:9d:71:d3:d7:b6:88:
af:52:af:03:c8:0b:60:ca:f1:14:a7:15:55:a9:1c:
4f:47:ab:4a:5a:b5:cd:ff:92:83:8f:9e:58:74:cc:
5d:92:46:35:38:e0:b4:f2:e8:58:a2:4a:4d:01:e4:
e8:98:78:8f:43:08:3d:eb:3b:dc:90:17:0e:37:8f:
7c:cd:55:d9:27:bd:85:52:42:bc:cd:c9:fa:5f:56:
f4:2c:2e:b7:dc:d7:f3:00:78:dd:1f:bb:bf:70:04:
b2:ce:9c:99:6f:cb:76:12:c2:78:ac:52:07:34:62:
b0:be:89:af:22:90:ea:40:66:34:05:98:f7:f7:f0:
1f:78:04:e3:07:7c:09:14:13:c3:45:83:6a:d0:92:
1e:88:6b:11:aa:73:1b:2b:77:30:1d:13:92:8a:e6:
80:71:7d:d0:6b:b9:cf:86:30:36:b2:2e:a1:0e:b9:
44:03:80:3b:08:4d:5b:ec:25:e1:bc:01:7a:e1:6f:
3d:cf:c5:b0:96:19:8c:97:4d:48:e2:4f:9c:8c:83:
7e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:25:ED:81:91:53:44:2A:9A:A5:96:E3:D5:1B:2C:FB:D3:FA:A9:B2
X509v3 Authority Key Identifier:
keyid:3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/OSXtgZFTRCqapZbj1Rss-9P6qbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.84.0/23
185.150.25.0/24
194.62.1.0/24
194.62.29.0/24
194.62.157.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:71:55:94:8f:11:ef:35:8d:84:69:bf:d0:73:97:b5:95:a5:
52:91:04:0e:87:0c:8c:6e:37:c6:cf:e4:63:2c:20:3d:88:3b:
0e:62:8c:b0:92:35:03:2f:48:58:31:03:2b:6f:4a:dc:fe:18:
47:40:91:6c:96:94:5e:02:ef:77:ea:f2:95:7d:fa:b3:6a:6c:
04:c8:05:95:a2:76:17:90:2c:1b:07:5f:b0:fa:7a:dd:8e:44:
fd:89:64:ec:60:05:00:51:19:f0:bb:e7:51:b2:0d:d1:72:13:
bb:d7:ea:ae:2e:99:86:b0:d3:c5:0b:f2:3e:12:40:d3:79:5b:
80:95:0c:0e:78:fa:ae:98:e3:00:16:b3:e8:12:31:0f:12:e3:
24:a0:0e:0a:1e:6d:16:38:36:86:d6:27:45:e2:25:5b:29:cd:
64:35:25:12:88:6f:29:be:c1:ca:13:c7:20:d5:76:d8:9a:4a:
4f:1e:75:3f:9e:76:fa:79:45:be:45:70:fe:27:1e:f0:63:3e:
7b:ef:e7:58:53:e4:72:a5:d4:61:53:b5:7b:50:ae:73:81:6b:
98:8f:ca:6c:bc:04:d7:b3:28:f0:8b:04:27:6c:c3:2e:c3:7f:
0b:35:b7:d0:57:ae:52:d2:f1:ae:b5:a7:2e:ca:0a:fe:87:55:
b4:ac:43:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:47:57 2025 by rpki-client