Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/oEno-CthzwQU-VjSao4UO7jaNkg.roa
File: oEno-CthzwQU-VjSao4UO7jaNkg.roa (raw, json)
Hash identifier: 3Rl3OLIGDkVrE/zgQbmmmkc8mI0JYDpAiiICVuTcrXY=
Subject key identifier: A0:49:E8:F8:2B:61:CF:04:14:F9:58:D2:6A:8E:14:3B:B8:DA:36:48
Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial: 019830D0C74DF0E606D37B2164D6A9BDA11C
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/oEno-CthzwQU-VjSao4UO7jaNkg.roa
Signing time: Tue 22 Jul 2025 06:27:25 +0000
ROA not before: Tue 22 Jul 2025 06:27:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205516
IP address blocks: 5.35.80.0/24 maxlen: 24
5.35.81.0/24 maxlen: 24
37.233.81.0/24 maxlen: 24
45.94.23.0/24 maxlen: 24
45.139.29.0/24 maxlen: 24
77.73.232.0/24 maxlen: 24
83.222.22.0/23 maxlen: 24
89.169.36.0/23 maxlen: 24
90.156.252.0/23 maxlen: 24
91.218.140.0/24 maxlen: 24
91.218.141.0/24 maxlen: 24
109.94.211.0/24 maxlen: 24
178.236.16.0/24 maxlen: 24
178.236.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:30:d0:c7:4d:f0:e6:06:d3:7b:21:64:d6:a9:bd:a1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Validity
Not Before: Jul 22 06:27:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a049e8f82b61cf0414f958d26a8e143bb8da3648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2a:ca:63:a1:40:1d:28:b3:15:e0:1a:77:07:
e0:fe:0d:42:7e:44:df:4b:43:a2:28:72:94:19:f2:
06:11:12:0e:c0:5e:86:ba:e8:5f:95:25:fd:23:20:
c2:60:04:b4:80:5c:59:30:60:64:bc:21:c3:6b:19:
db:f7:71:a8:10:6f:49:46:76:ca:80:c7:1b:1f:d0:
0d:ec:9a:aa:3e:97:ca:1d:bf:c3:dc:b1:77:55:86:
33:47:76:39:14:b1:4d:8a:1b:78:1a:85:db:7f:96:
0d:72:a3:ba:21:a8:b7:ab:18:f9:d2:33:4f:57:a8:
9e:16:a4:85:c3:8d:70:d4:78:66:3f:06:b9:90:73:
2f:1a:88:88:f7:e1:e4:01:d0:fb:a9:2d:af:7b:79:
93:5c:9b:ba:79:93:d6:b2:8e:8f:a4:e1:51:e6:b3:
82:e9:e8:1b:06:bd:4c:66:cf:fb:24:08:59:cb:6d:
5b:e6:eb:7c:b9:a6:04:5e:03:ad:ef:8e:03:26:d3:
ea:43:9f:16:d0:86:e4:c3:20:e6:96:27:5b:56:05:
0f:4a:81:d1:59:b3:c1:63:f5:22:12:e9:2d:5f:29:
28:07:67:b0:b3:07:83:27:0e:38:e0:72:4b:d2:e8:
56:a0:18:75:c3:ea:c3:8d:24:90:59:40:b1:fe:9b:
e2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:49:E8:F8:2B:61:CF:04:14:F9:58:D2:6A:8E:14:3B:B8:DA:36:48
X509v3 Authority Key Identifier:
keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/oEno-CthzwQU-VjSao4UO7jaNkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.80.0/23
37.233.81.0/24
45.94.23.0/24
45.139.29.0/24
77.73.232.0/24
83.222.22.0/23
89.169.36.0/23
90.156.252.0/23
91.218.140.0/23
109.94.211.0/24
178.236.16.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:6c:16:02:f0:63:c2:f2:49:4f:0a:0e:3a:56:24:fb:da:2d:
7b:6a:91:53:c0:e0:9f:a3:91:9f:cb:ac:9c:77:64:66:d9:fa:
8f:49:c9:1d:ce:29:bb:2b:da:da:bc:58:df:30:a8:8a:f3:d9:
dd:28:dc:93:11:42:42:f6:ae:eb:81:cf:47:0b:7d:fe:8d:78:
2b:3b:d9:f1:ab:b9:b9:ac:44:c5:70:db:a2:ff:20:8c:a5:63:
b7:2e:c3:0d:0f:fb:68:39:99:53:bb:0a:63:0c:e3:eb:29:d2:
68:9e:6c:db:e1:e3:8f:93:06:6e:16:39:f5:6c:d5:be:ec:1a:
fa:d8:17:4c:f3:89:23:ab:c3:50:e5:c3:51:3a:cb:48:00:6d:
a0:63:78:89:5c:6e:3e:b1:c6:85:3e:c5:21:db:25:fa:4d:24:
e8:79:c9:16:0d:7c:f0:58:b9:c7:8a:07:60:5f:7d:7a:1a:b4:
7e:59:cc:c9:2a:5e:80:08:91:49:1f:87:cf:4b:3e:4d:83:5e:
6d:9c:35:15:0c:37:34:af:eb:85:21:9d:74:af:2e:e6:4e:fd:
a0:ea:2b:df:ce:67:8f:8e:fe:35:14:5a:f2:e2:ce:d9:41:4f:
12:5d:2c:6e:e2:ce:72:cb:01:39:31:d2:24:bb:05:ef:91:4c:
55:63:a9:79
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAZgw0MdN8OYG03shZNapvaEcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNzNlZWI4ZDAyZjVmNjQ3ODhiM2ZkYzc4ZDZiYWI4YTU1
ZmQxNmEwHhcNMjUwNzIyMDYyNzI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDQ5ZThmODJiNjFjZjA0MTRmOTU4ZDI2YThlMTQzYmI4ZGEzNjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyirKY6FAHSizFeAadwfg/g1CfkTf
S0OiKHKUGfIGERIOwF6GuuhflSX9IyDCYAS0gFxZMGBkvCHDaxnb93GoEG9JRnbK
gMcbH9AN7JqqPpfKHb/D3LF3VYYzR3Y5FLFNiht4GoXbf5YNcqO6Iai3qxj50jNP
V6ieFqSFw41w1HhmPwa5kHMvGoiI9+HkAdD7qS2ve3mTXJu6eZPWso6PpOFR5rOC
6egbBr1MZs/7JAhZy21b5ut8uaYEXgOt744DJtPqQ58W0IbkwyDmlidbVgUPSoHR
WbPBY/UiEuktXykoB2ewsweDJw444HJL0uhWoBh1w+rDjSSQWUCx/pvijQIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFKBJ6PgrYc8EFPlY0mqOFDu42jZIMB8GA1UdIwQY
MBaAFEFz7rjQL19keIs/3HjWurilX9FqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ODkyYTktM2IzNy00ZDM5LTljMmIt
ZDgzZWQxNDBkMjhkLzEvb0Vuby1DdGh6d1FVLVZqU2FvNFVPN2phTmtnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80ODkyYTktM2IzNy00ZDM5LTljMmItZDgzZWQxNDBkMjhk
LzEvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQBBSNQAwQA
JelRAwQALV4XAwQALYsdAwQATUnoAwQBU94WAwQBWakkAwQBWpz8AwQBW9qMAwQA
bV7TAwQBsuwQMA0GCSqGSIb3DQEBCwUAA4IBAQClbBYC8GPC8klPCg46ViT72i17
apFTwOCfo5Gfy6ycd2Rm2fqPSckdzim7K9ravFjfMKiK89ndKNyTEUJC9q7rgc9H
C33+jXgrO9nxq7m5rETFcNui/yCMpWO3LsMND/toOZlTuwpjDOPrKdJonmzb4eOP
kwZuFjn1bNW+7Br62BdM84kjq8NQ5cNROstIAG2gY3iJXG4+scaFPsUh2yX6TSTo
eckWDXzwWLnHigdgX316GrR+WczJKl6ACJFJH4fPSz5Ng15tnDUVDDc0r+uFIZ10
ry7mTv2g6ivfzmePjv41FFry4s7ZQU8SXSxu4s5yywE5MdIkuwXvkUxVY6l5
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:52:07 2025 by rpki-client