Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/OsSemMFuJIzlguBNFL5i99h59ac.roa
File: OsSemMFuJIzlguBNFL5i99h59ac.roa (raw, json)
Hash identifier: wej6G9fzYwe+kpr/KR/AvxkzN1danDVs2QQt2gCzdwo=
Subject key identifier: 3A:C4:9E:98:C1:6E:24:8C:E5:82:E0:4D:14:BE:62:F7:D8:79:F5:A7
Certificate issuer: /CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b
Certificate serial: 019A156BE1A0AC9F6D94A528ADDB458867B1
Authority key identifier: 36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/OsSemMFuJIzlguBNFL5i99h59ac.roa
Signing time: Fri 24 Oct 2025 08:53:02 +0000
ROA not before: Fri 24 Oct 2025 08:53:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12902
IP address blocks: 185.211.210.0/23 maxlen: 23
185.211.210.0/24 maxlen: 24
185.211.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:6b:e1:a0:ac:9f:6d:94:a5:28:ad:db:45:88:67:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b
Validity
Not Before: Oct 24 08:53:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ac49e98c16e248ce582e04d14be62f7d879f5a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:97:f7:a3:71:4b:7b:bf:ea:51:eb:ab:71:0c:
24:8e:0d:99:26:5f:4b:8d:f3:a5:aa:c5:a7:1d:bd:
49:82:8d:68:e5:d1:02:b8:da:8d:30:67:4a:c1:7e:
56:fc:b1:0a:d4:49:1f:a2:9f:be:bc:f6:63:61:5e:
58:7b:fc:38:bb:b9:d6:b6:db:62:63:0a:c0:79:7f:
e5:5b:c6:95:fb:75:20:57:0a:b7:2b:92:d0:53:91:
1b:e2:f8:49:36:7e:2d:06:66:c4:4a:dd:54:4f:60:
1f:41:e2:c0:34:95:d5:77:cf:8e:87:b2:6c:e3:db:
32:74:61:6c:a7:0e:e3:27:93:7c:7e:98:39:99:4c:
8f:f2:9a:95:d6:39:a6:7c:43:ac:fb:ef:e0:b8:6a:
c7:7d:9c:40:53:65:a8:e9:58:17:18:dd:cc:80:55:
4b:9f:a0:0c:0c:81:77:6b:81:89:5b:4f:a2:26:a0:
29:a5:33:86:83:b8:4a:c7:44:5a:f2:60:7f:24:f3:
58:51:67:dc:e9:f1:98:5b:cc:d8:87:35:9e:f4:60:
ad:46:4e:23:cd:b4:89:38:b8:00:5c:ce:2d:fa:2a:
51:d2:e8:b7:33:70:f9:1d:c7:d2:6b:2b:d3:d4:c8:
8d:71:09:e3:9f:0d:c7:a2:6e:e5:21:1d:17:c3:92:
76:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C4:9E:98:C1:6E:24:8C:E5:82:E0:4D:14:BE:62:F7:D8:79:F5:A7
X509v3 Authority Key Identifier:
keyid:36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/OsSemMFuJIzlguBNFL5i99h59ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.210.0/23
Signature Algorithm: sha256WithRSAEncryption
84:3d:09:0d:10:c8:57:55:2f:74:0d:f5:26:4f:82:ff:1c:36:
b7:c3:e4:4c:dc:16:10:e2:2f:35:21:e8:0b:47:a9:8d:ad:07:
b9:61:8b:9e:a5:dd:3f:e6:ec:c5:f5:ce:ac:ab:d0:6b:e2:1c:
33:3e:d1:3a:5e:6d:d3:dd:f4:cf:64:d2:e3:3e:66:89:9a:58:
c3:1f:7e:78:46:d8:b6:51:2e:fa:5b:ab:07:08:62:b6:e7:d2:
38:31:3a:92:82:22:0f:9a:5d:ec:9b:9b:b1:01:95:2a:29:be:
87:23:ae:98:6d:da:a5:fc:a7:e2:cd:d3:f7:cc:ca:2e:20:4f:
15:3a:17:c1:a1:82:cd:b7:be:bb:7c:81:55:57:7b:9c:1a:72:
e2:67:af:7b:a1:df:33:be:8d:55:27:a4:58:73:e1:84:83:70:
1d:64:c2:d5:69:d6:7a:2c:d1:5a:2b:89:6f:86:30:2e:da:f3:
18:0c:e1:53:e1:73:dc:88:b7:0c:bc:bd:33:b8:60:70:a6:3f:
9c:6d:87:0d:9d:1e:96:fa:31:9c:05:64:bb:de:3e:cb:81:11:
ea:95:9b:1d:fe:97:43:23:4d:e4:b1:79:9c:b9:75:91:ea:22:
f2:4b:63:85:81:17:f2:f5:13:34:4d:f4:f4:d7:2c:b9:72:2d:
ca:9e:18:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 21:09:55 2025 by rpki-client