Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/k04OOwBCYwVKNNo3iCfh1jOc82Q.roa
File: k04OOwBCYwVKNNo3iCfh1jOc82Q.roa (raw, json)
Hash identifier: zGKAKX/nmarWVLX9nim6dXgrSYRFp/a235WxfB2aC/U=
Subject key identifier: 93:4E:0E:3B:00:42:63:05:4A:34:DA:37:88:27:E1:D6:33:9C:F3:64
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 01990E0164738822CBE56CAE342A293D56FE
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/k04OOwBCYwVKNNo3iCfh1jOc82Q.roa
Signing time: Wed 03 Sep 2025 05:16:36 +0000
ROA not before: Wed 03 Sep 2025 05:16:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62257
IP address blocks: 194.36.172.0/24 maxlen: 24
194.147.150.0/24 maxlen: 24
194.180.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0e:01:64:73:88:22:cb:e5:6c:ae:34:2a:29:3d:56:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: Sep 3 05:16:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=934e0e3b004263054a34da378827e1d6339cf364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fd:b1:65:fb:de:14:48:91:7d:ca:17:24:f0:
4b:1e:64:a0:56:a1:1e:ea:95:0f:ef:27:bc:fb:97:
35:94:2d:55:29:ff:f9:62:fc:cd:4f:24:a5:d0:ed:
94:84:47:0d:47:01:3d:a9:3a:d1:57:4f:5c:aa:cf:
21:e6:8d:41:1a:bc:66:0c:15:ad:d0:87:57:6e:53:
93:c2:fb:f9:bb:16:00:62:7e:d7:24:08:cb:d4:54:
8e:90:3f:2e:59:f5:a1:d9:32:4c:49:7e:8a:33:14:
e5:99:85:e1:b1:28:df:b9:76:01:34:22:cf:bf:0e:
15:81:a5:b1:e1:13:97:2d:88:1e:3a:0b:4d:1c:ab:
6f:c0:fc:b9:c0:43:dd:cf:d6:ff:e3:e6:0e:06:09:
49:de:21:b2:7f:8b:eb:91:b9:ac:33:75:1b:68:39:
7d:7e:f7:73:fa:3c:08:9c:2b:cd:c5:af:9e:6c:2c:
e8:55:f1:40:d0:66:ae:fe:50:3c:ba:dd:62:bb:70:
13:24:2f:89:c9:f6:6c:10:c6:c3:1e:8a:01:44:7b:
2c:9d:05:86:5d:95:a4:1c:7a:d1:91:73:ff:95:6f:
9c:92:95:0f:16:3f:6b:16:d1:2d:e0:09:5f:94:97:
c1:20:8d:44:53:33:b6:ca:5d:1b:a9:18:9c:e7:c0:
77:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4E:0E:3B:00:42:63:05:4A:34:DA:37:88:27:E1:D6:33:9C:F3:64
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/k04OOwBCYwVKNNo3iCfh1jOc82Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.172.0/24
194.147.150.0/24
194.180.208.0/24
Signature Algorithm: sha256WithRSAEncryption
79:23:72:8e:7f:1a:66:a6:c5:d1:96:e2:ff:15:42:20:f0:56:
03:5b:79:72:29:ae:7f:6d:76:08:ad:5d:3d:b9:6f:c5:9e:ec:
29:65:54:90:71:a9:7a:ac:63:4c:d0:96:2a:a4:3e:65:10:bb:
59:9b:84:37:3d:fb:c4:73:d8:fc:5c:42:8e:5b:d1:94:5b:e9:
09:67:09:98:09:b9:92:2b:69:29:d0:b5:4c:2d:b4:fb:7d:a8:
85:be:d2:1e:71:1f:4d:97:d5:34:2b:4e:bd:04:bd:c5:4f:74:
dc:36:72:5d:8f:e1:2c:47:7b:f8:c7:95:31:60:a1:6d:9a:f1:
a8:de:ad:57:54:c8:51:ec:e2:c9:04:84:df:85:0d:2b:2a:35:
b5:08:1e:8f:72:a6:8e:ac:ae:f7:79:0b:ed:d8:d5:30:d0:95:
2f:05:0c:98:08:41:48:b4:46:08:6e:ed:6c:fd:58:f4:e2:4f:
a8:5a:7d:27:18:70:8c:fd:cd:bc:ed:c1:e5:d9:29:7f:f6:d4:
df:20:79:fb:b2:fa:f8:d1:81:3c:c4:e1:e9:13:b1:5f:64:f4:
03:f0:09:fb:6e:2f:a3:f5:5c:4b:12:22:fb:b7:f2:e6:02:4e:
ab:cb:dc:a2:86:bc:ba:0a:02:7c:87:9e:2a:cf:2e:0d:c3:83:
2f:78:4a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:24:24 2025 by rpki-client