Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/o3rcqhmpzx-KZyOKzIrbE8E7xH8.roa
File: o3rcqhmpzx-KZyOKzIrbE8E7xH8.roa (raw, json)
Hash identifier: DhHj4T9kNHqPXFBDEITUBD0D/IF09iiNQ2ByB3yTJQI=
Subject key identifier: A3:7A:DC:AA:19:A9:CF:1F:8A:67:23:8A:CC:8A:DB:13:C1:3B:C4:7F
Certificate issuer: /CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
Certificate serial: 0199A696C51AFD2A9714719322F80A0B0F34
Authority key identifier: 55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/o3rcqhmpzx-KZyOKzIrbE8E7xH8.roa
Signing time: Thu 02 Oct 2025 20:22:02 +0000
ROA not before: Thu 02 Oct 2025 20:22:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209604
IP address blocks: 208.92.224.0/24 maxlen: 24
208.92.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a6:96:c5:1a:fd:2a:97:14:71:93:22:f8:0a:0b:0f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
Validity
Not Before: Oct 2 20:22:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a37adcaa19a9cf1f8a67238acc8adb13c13bc47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6a:82:79:97:d9:5e:db:11:ae:fd:17:f9:ed:
fa:88:e1:0a:59:78:1a:eb:df:16:0d:d6:d7:30:98:
03:4b:08:1a:d6:2f:2a:1b:89:12:c9:c7:9e:dd:57:
20:48:7b:ba:03:7a:41:b2:0d:f8:39:0a:9d:f2:c9:
fc:a1:11:be:4e:7b:2f:1a:d5:d6:c0:8d:0f:65:bf:
7c:fd:a4:c0:0a:c7:32:0e:dc:10:35:1d:66:3d:c9:
65:82:7a:46:73:38:db:a1:5d:c3:f3:7b:04:33:4f:
03:d2:3d:7f:5d:7d:a0:cd:47:d2:c5:fe:4d:ce:2d:
b9:e1:f4:30:82:cd:d3:49:7c:59:fe:02:f6:ab:af:
83:c1:0e:2f:4b:b2:1d:82:d1:04:a0:74:7b:c8:c6:
6c:65:9c:b1:df:ae:83:bb:67:89:cb:bd:b0:39:7e:
4d:58:0a:2c:98:83:8b:5c:dd:6b:8b:b5:61:80:0d:
0a:1f:8b:6d:53:6f:5a:94:2a:96:19:0b:19:52:f7:
2a:5b:ff:a1:06:d3:d9:44:f9:79:92:71:c1:26:6b:
f4:8f:2f:a8:b4:62:d2:7c:6b:94:2e:a2:b5:c9:e4:
b9:01:7d:a4:f0:be:37:3c:36:c3:fe:3a:4a:6d:a7:
9b:4a:20:4c:b7:10:f0:6b:a7:b8:90:28:eb:ef:13:
d4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7A:DC:AA:19:A9:CF:1F:8A:67:23:8A:CC:8A:DB:13:C1:3B:C4:7F
X509v3 Authority Key Identifier:
keyid:55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/o3rcqhmpzx-KZyOKzIrbE8E7xH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.92.224.0/23
Signature Algorithm: sha256WithRSAEncryption
32:1b:6c:f6:23:23:fa:ae:f9:34:fe:ff:58:55:cb:37:9a:b8:
ba:0d:92:8b:b1:13:3a:cd:86:ab:e6:44:32:94:ec:19:2c:0b:
1a:85:70:d5:83:8b:30:e2:b3:01:15:3f:15:1c:3a:13:6d:71:
47:c0:62:dd:09:dc:fa:90:e1:d7:1e:35:b6:b5:3b:83:f8:8d:
15:45:69:8a:76:d2:14:2a:16:0f:6d:e1:7f:57:d5:8b:2d:ad:
43:83:d0:ad:ae:75:f1:a4:87:0e:0b:18:60:0e:80:a9:6d:1e:
e8:d8:70:81:26:76:68:84:2d:f2:63:bf:71:74:10:b7:5e:55:
49:7e:a2:21:e3:ea:0d:67:38:06:b8:df:79:bb:1d:d8:84:ff:
2c:34:33:b8:0f:1e:0f:11:0f:28:68:a3:90:65:52:77:74:23:
21:bb:c0:67:a2:84:a5:26:e2:ad:aa:71:e5:df:d7:2f:18:a4:
01:26:70:b9:85:77:1b:35:d5:0c:86:ec:04:a4:50:79:85:61:
8a:ca:e1:b7:90:17:9a:33:e9:23:25:53:7b:b2:01:45:c0:a9:
b1:88:2d:3e:1b:dd:c6:78:71:2d:92:9e:c1:79:c6:bd:97:40:
8c:16:fb:22:4b:77:fd:15:ca:2b:23:15:df:03:4b:58:52:0b:
47:4c:33:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 13:23:30 2025 by rpki-client