Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/oUg4r2OBs85ehDgtUaZ7fS7ZSWg.roa
File: oUg4r2OBs85ehDgtUaZ7fS7ZSWg.roa (raw, json)
Hash identifier: kO/T5K/Tm0Il+9bk3tcJkl98AuZsRFDBXoirX5jpk/k=
Subject key identifier: A1:48:38:AF:63:81:B3:CE:5E:84:38:2D:51:A6:7B:7D:2E:D9:49:68
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01980D5EBBD9EE70289AA2731666CFBAFC3A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/oUg4r2OBs85ehDgtUaZ7fS7ZSWg.roa
Signing time: Tue 15 Jul 2025 09:16:09 +0000
ROA not before: Tue 15 Jul 2025 09:16:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395839
IP address blocks: 193.5.65.0/24 maxlen: 24
2a0f:3d86:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 19:29:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0d:5e:bb:d9:ee:70:28:9a:a2:73:16:66:cf:ba:fc:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 15 09:16:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a14838af6381b3ce5e84382d51a67b7d2ed94968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:50:85:09:be:f5:97:06:1b:1c:b2:ff:eb:a6:
b9:d0:d4:72:ea:2f:18:d9:fb:9a:c6:13:04:f7:90:
8c:ba:7c:33:f1:c5:3b:88:e5:3b:0e:ac:58:5b:f6:
3a:c1:4c:29:f3:a3:20:a0:00:68:aa:62:14:ee:b9:
07:cf:b7:a4:d0:d1:ca:31:6f:25:ec:b8:8a:87:ac:
20:e1:bd:36:b9:ac:c6:12:2d:de:f5:63:e2:9e:d3:
aa:da:88:72:88:df:b1:ef:55:a7:f8:2f:b8:8f:80:
33:92:79:50:7b:fb:0d:af:7b:82:63:3e:f4:67:75:
ba:c5:f2:39:d5:e1:fa:40:f7:8e:6a:23:db:af:23:
bf:ce:5c:97:e8:87:d0:c0:2d:9f:f6:4e:38:7d:bb:
f5:de:67:77:62:b8:46:a1:4b:d3:e3:8f:ab:af:88:
6f:31:1a:98:f0:9a:91:53:a1:ed:6d:0d:ba:f6:8c:
77:10:1b:16:1b:74:c2:31:1b:09:32:c3:d2:8f:df:
82:8a:77:40:43:c0:77:28:47:20:42:32:a4:8b:d8:
db:67:7e:d9:5c:d3:12:0c:28:85:7a:2a:20:ee:63:
2b:0f:47:4d:96:e0:18:54:ad:77:de:73:f9:e8:66:
c2:ee:b7:cf:32:2f:d9:66:80:e9:9a:75:db:0d:8a:
67:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:48:38:AF:63:81:B3:CE:5E:84:38:2D:51:A6:7B:7D:2E:D9:49:68
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/oUg4r2OBs85ehDgtUaZ7fS7ZSWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.65.0/24
IPv6:
2a0f:3d86:100::/48
Signature Algorithm: sha256WithRSAEncryption
a1:d6:65:a4:a7:f9:98:14:f7:1d:fd:5d:fd:f3:30:4e:a1:47:
cf:47:d2:cf:44:63:cf:cc:97:6d:19:53:b3:23:87:82:9f:86:
2b:6f:db:f0:16:70:85:e3:71:e4:b9:4b:19:41:cf:dc:5d:c1:
f8:66:c3:d6:7e:ac:2e:a8:05:f9:ee:2c:fd:3a:e1:e3:d0:92:
8f:39:36:c5:59:eb:72:86:c8:c2:90:4e:93:d1:24:4e:0e:d7:
2d:91:6a:31:52:8d:35:5c:2d:ff:cc:da:75:5a:25:ed:7d:a6:
da:2c:4d:37:bd:6b:67:1c:94:92:32:b4:f6:30:66:ff:82:9f:
8d:a0:d4:10:6c:eb:aa:36:fd:22:0a:79:98:eb:46:ff:03:1f:
d7:19:e8:3b:e3:c1:9c:0b:ed:74:1f:03:d8:ad:df:23:99:31:
66:55:4d:9c:0a:a0:25:fa:25:8c:f1:e6:f1:41:73:9b:7a:57:
13:1e:cc:b5:1b:ab:f9:4a:cf:6f:c0:35:fb:af:5a:77:44:d1:
dc:cb:a8:b6:80:31:7f:a7:06:32:27:d3:fa:c3:97:cb:4b:2a:
77:2c:1c:f3:8a:29:85:9e:04:da:c2:e0:19:1b:6f:82:c7:f2:
da:93:c0:ad:69:c8:c8:a8:28:10:3d:53:71:3e:f7:50:7a:f9:
52:ec:1d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:23:30 2025 by rpki-client