Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/oaVS1pbWcBBN8FESe3eLUU_oMNw.roa
File: oaVS1pbWcBBN8FESe3eLUU_oMNw.roa (raw, json)
Hash identifier: vZTpZMoFxYK8ulSAQHGg1wPcagrnIM8Mpovwt/IBiMk=
Subject key identifier: A1:A5:52:D6:96:D6:70:10:4D:F0:51:12:7B:77:8B:51:4F:E8:30:DC
Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial: 0198F04D737CF6AD7C737970C4F94BF2B62F
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/oaVS1pbWcBBN8FESe3eLUU_oMNw.roa
Signing time: Thu 28 Aug 2025 10:51:04 +0000
ROA not before: Thu 28 Aug 2025 10:51:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 62.164.195.0/24 maxlen: 24
194.76.114.0/23 maxlen: 24
194.76.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f0:4d:73:7c:f6:ad:7c:73:79:70:c4:f9:4b:f2:b6:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Validity
Not Before: Aug 28 10:51:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1a552d696d670104df051127b778b514fe830dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ab:53:70:24:f1:db:15:18:a3:b4:e7:93:bd:
d8:2d:37:ef:13:87:79:18:e5:c8:be:1f:77:11:99:
69:d6:b3:73:23:b2:8d:02:1f:c1:0e:24:ed:41:66:
10:93:50:e2:29:34:55:40:8e:49:d8:d5:45:f8:ba:
6e:d0:a6:f1:32:80:76:8d:60:72:cc:2e:cd:ec:b7:
49:26:da:0b:df:40:ab:72:78:19:fe:30:72:51:c7:
f8:71:8c:d3:aa:db:a0:07:94:04:1b:89:92:b4:20:
39:64:43:b8:f0:1c:b4:36:2f:30:90:07:10:d2:c9:
6d:f1:2e:47:c0:e6:26:4f:35:df:b7:bb:65:f2:20:
13:e2:ed:e2:61:0e:ec:56:79:5d:23:37:84:4f:3e:
bf:4b:13:2b:79:57:b9:63:e2:05:c3:3a:88:84:6d:
6c:4c:d3:5f:a2:ef:e3:cf:a0:28:cc:e8:ab:86:0b:
6e:b5:73:bb:be:b2:6a:e6:b7:c0:d4:a9:e6:d9:a5:
96:ce:5d:d6:b1:b2:90:b8:74:1a:65:be:81:aa:c4:
76:5f:50:fb:ff:73:39:67:34:6c:6b:88:33:f5:e0:
8b:99:d2:79:2a:49:69:dc:b0:35:00:97:9a:42:fb:
89:ea:9c:f7:c5:a1:e5:c8:dc:4d:75:27:71:34:d4:
2b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A5:52:D6:96:D6:70:10:4D:F0:51:12:7B:77:8B:51:4F:E8:30:DC
X509v3 Authority Key Identifier:
keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/oaVS1pbWcBBN8FESe3eLUU_oMNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.195.0/24
194.76.114.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:68:85:fa:20:be:b6:de:0c:ff:28:a3:40:6f:a2:a5:d3:da:
75:a3:c0:bd:10:30:07:a5:8d:1f:6e:96:30:5e:89:b7:9e:12:
76:be:c4:d0:b0:2b:b2:ae:ed:69:a5:04:d7:9b:c6:ca:e7:6a:
79:54:97:67:aa:20:93:90:66:5a:35:85:26:20:0e:9e:e5:3e:
d6:4b:8a:de:9f:ad:30:32:99:e1:a4:bd:82:b5:3f:90:be:ed:
a3:5b:b4:66:cc:e0:1c:d7:a4:3f:a1:46:e1:49:fa:81:42:7a:
a9:77:4b:50:66:01:61:1a:14:ae:c7:2f:e4:fc:9d:07:92:b4:
ca:e2:f7:59:f3:c3:80:74:40:90:13:70:b0:91:72:54:e6:29:
15:db:de:46:1a:e0:25:08:18:00:89:6a:e5:7d:44:74:83:4d:
c7:86:0e:09:16:8e:69:f6:e9:58:d1:cf:40:dc:2d:5c:2b:0d:
c1:7e:d8:f9:7e:ba:3c:a0:03:cd:27:a0:02:81:65:e7:9a:4a:
c0:34:4d:1c:95:bd:65:5c:20:e8:e8:e6:3e:3c:9c:2f:70:63:
f1:c3:5b:a2:ab:2e:1d:f6:95:2e:26:be:16:7d:eb:a9:c4:23:
7d:8c:9c:29:12:2d:f1:a8:ee:92:9f:ea:5c:21:94:8f:ae:fd:
6b:3b:de:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 15:33:48 2025 by rpki-client