Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/OGzwu6qwYIdRS05vlX7kknNl9_s.roa
File: OGzwu6qwYIdRS05vlX7kknNl9_s.roa (raw, json)
Hash identifier: olvSH9W8AC06J53K4BNV7UZl7w94avtzGF6giANPJdQ=
Subject key identifier: 38:6C:F0:BB:AA:B0:60:87:51:4B:4E:6F:95:7E:E4:92:73:65:F7:FB
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 0198E7077D8EDDA9FA5C072B515596A21E44
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/OGzwu6qwYIdRS05vlX7kknNl9_s.roa
Signing time: Tue 26 Aug 2025 15:38:04 +0000
ROA not before: Tue 26 Aug 2025 15:38:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63989
IP address blocks: 109.122.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 14:36:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e7:07:7d:8e:dd:a9:fa:5c:07:2b:51:55:96:a2:1e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Aug 26 15:38:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=386cf0bbaab06087514b4e6f957ee4927365f7fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7c:25:3e:86:3d:1b:38:65:48:26:2b:89:ce:
a5:de:ca:20:62:50:4e:f9:d0:41:6d:5e:b2:c2:d5:
06:ec:98:28:a5:9b:42:23:ba:e3:49:77:a9:89:c6:
d5:4f:59:38:84:bb:2a:fe:92:dd:34:9a:41:ac:db:
00:58:b5:cf:04:07:3e:67:d2:ba:b3:18:04:e0:74:
0c:9f:e6:60:0b:83:e2:da:47:15:71:e0:62:80:cc:
87:d3:86:09:56:6e:54:10:3a:17:2e:bf:50:72:7a:
9a:b9:06:9e:da:52:46:3b:58:1e:6e:1a:71:db:7c:
a1:dc:ee:f3:f8:7f:d4:78:2c:3c:c6:c5:63:0a:b3:
dd:79:33:c9:fd:a6:d7:36:69:c7:be:50:71:2a:76:
34:cb:92:f7:c3:38:39:71:ff:af:fa:18:a0:46:29:
59:5e:07:4c:3b:15:e1:35:a1:b3:25:41:9e:8b:a2:
a2:fc:ea:95:0b:30:4f:f5:37:39:86:4a:37:bd:b4:
cb:9e:cd:39:0e:7e:a4:a4:46:04:1b:a1:75:db:f7:
d3:bd:60:64:e8:0c:c7:e6:b2:b8:8b:08:a5:d1:00:
8c:c2:a4:14:0c:bf:95:b1:34:c0:dc:fe:25:1b:b3:
c8:2b:00:47:39:65:01:2d:58:11:86:35:94:ea:e8:
f7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6C:F0:BB:AA:B0:60:87:51:4B:4E:6F:95:7E:E4:92:73:65:F7:FB
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/OGzwu6qwYIdRS05vlX7kknNl9_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.24.0/24
Signature Algorithm: sha256WithRSAEncryption
98:75:1c:71:15:bf:3f:65:82:a2:2d:b8:f8:fb:7d:b0:16:03:
e4:c8:bc:c0:61:7d:98:1e:fb:6f:98:4c:bb:7f:5c:ad:31:dd:
f9:8f:f7:8e:cb:6e:4e:ef:80:32:cc:71:8d:b1:34:25:e8:30:
6a:ec:98:cb:95:f3:30:40:50:97:bf:0a:35:13:f0:b8:9e:56:
f1:5e:bd:4c:3e:41:21:d6:a1:a7:1a:d2:a5:24:96:78:94:95:
06:ca:07:fd:ee:dd:92:c4:a4:e7:62:50:62:ef:96:de:22:dd:
91:d5:af:6e:41:eb:68:bf:68:62:b8:5a:35:a1:5c:6a:08:b2:
d2:6a:a1:4c:23:5a:d5:2d:55:97:57:b0:15:d3:22:95:a4:73:
6e:a2:70:2b:40:4a:f8:f1:dd:14:d8:e5:8f:d5:ad:91:14:38:
be:5c:74:c1:a2:06:5c:0f:66:97:bd:f6:81:2f:9e:bf:43:84:
68:9e:bf:0c:08:9c:89:cb:83:24:9c:0f:7a:96:f4:2b:fd:ad:
b2:77:bb:16:db:03:6a:3e:aa:ea:1a:5c:f6:56:d8:bd:25:e2:
58:57:c4:5c:e7:b6:8c:da:35:68:72:83:bb:b2:76:d7:df:c9:
6c:7d:6e:86:77:56:78:40:ea:56:40:bf:95:e8:92:46:73:44:
58:18:87:e0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZjnB32O3an6XAcrUVWWoh5EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3
OGE1NzkwHhcNMjUwODI2MTUzODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODZjZjBiYmFhYjA2MDg3NTE0YjRlNmY5NTdlZTQ5MjczNjVmN2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3wlPoY9GzhlSCYric6l3sogYlBO
+dBBbV6ywtUG7JgopZtCI7rjSXepicbVT1k4hLsq/pLdNJpBrNsAWLXPBAc+Z9K6
sxgE4HQMn+ZgC4Pi2kcVceBigMyH04YJVm5UEDoXLr9QcnqauQae2lJGO1gebhpx
23yh3O7z+H/UeCw8xsVjCrPdeTPJ/abXNmnHvlBxKnY0y5L3wzg5cf+v+higRilZ
XgdMOxXhNaGzJUGei6Ki/OqVCzBP9Tc5hko3vbTLns05Dn6kpEYEG6F12/fTvWBk
6AzH5rK4iwil0QCMwqQUDL+VsTTA3P4lG7PIKwBHOWUBLVgRhjWU6uj3AQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDhs8LuqsGCHUUtOb5V+5JJzZff7MB8GA1UdIwQY
MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt
YTM5YWMyNTM5ZmM1LzEvT0d6d3U2cXdZSWRSUzA1dmxYN2trbk5sOV9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1
LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXoYMA0G
CSqGSIb3DQEBCwUAA4IBAQCYdRxxFb8/ZYKiLbj4+32wFgPkyLzAYX2YHvtvmEy7
f1ytMd35j/eOy25O74AyzHGNsTQl6DBq7JjLlfMwQFCXvwo1E/C4nlbxXr1MPkEh
1qGnGtKlJJZ4lJUGygf97t2SxKTnYlBi75beIt2R1a9uQetov2hiuFo1oVxqCLLS
aqFMI1rVLVWXV7AV0yKVpHNuonArQEr48d0U2OWP1a2RFDi+XHTBogZcD2aXvfaB
L56/Q4Ronr8MCJyJy4MknA96lvQr/a2yd7sW2wNqPqrqGlz2Vti9JeJYV8Rc57aM
2jVocoO7snbX38lsfW6Gd1Z4QOpWQL+V6JJGc0RYGIfg
-----END CERTIFICATE-----
Generated at Fri Sep 19 21:01:01 2025 by rpki-client