Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/oWAjJbQBfxx3e4wlWi3kdlBilW0.roa
File: oWAjJbQBfxx3e4wlWi3kdlBilW0.roa (raw, json)
Hash identifier: PNb++l6AXajvtQHdYlCiHKFX324+t6SV7D+grw9N748=
Subject key identifier: A1:60:23:25:B4:01:7F:1C:77:7B:8C:25:5A:2D:E4:76:50:62:95:6D
Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7
Certificate serial: 019904304480540A557E4C1E32627FEA7B0F
Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/oWAjJbQBfxx3e4wlWi3kdlBilW0.roa
Signing time: Mon 01 Sep 2025 07:31:36 +0000
ROA not before: Mon 01 Sep 2025 07:31:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215540
IP address blocks: 5.44.42.0/24 maxlen: 24
45.129.185.0/24 maxlen: 24
2a05:541:102::/48 maxlen: 48
2a05:541:103::/48 maxlen: 48
2a05:541:104::/48 maxlen: 48
2a05:541:105::/48 maxlen: 48
2a05:541:106::/48 maxlen: 48
2a05:541:107::/48 maxlen: 48
2a05:541:108::/48 maxlen: 48
2a05:541:109::/48 maxlen: 48
2a05:541:110::/48 maxlen: 48
2a05:541:111::/48 maxlen: 48
2a05:541:112::/48 maxlen: 48
2a05:541:113::/48 maxlen: 48
2a05:541:114::/48 maxlen: 48
2a05:541:115::/48 maxlen: 48
2a05:541:116::/48 maxlen: 48
2a05:541:117::/48 maxlen: 48
2a05:541:118::/48 maxlen: 48
2a05:541:119::/48 maxlen: 48
2a05:541:121::/48 maxlen: 48
2a05:541:122::/48 maxlen: 48
2a05:541:123::/48 maxlen: 48
2a05:541:124::/48 maxlen: 48
2a05:541:125::/48 maxlen: 48
2a05:541:126::/48 maxlen: 48
2a05:541:127::/48 maxlen: 48
2a05:541:129::/48 maxlen: 48
2a05:541:131::/48 maxlen: 48
2a05:541:133::/48 maxlen: 48
2a05:541:134::/48 maxlen: 48
2a05:541:135::/48 maxlen: 48
2a05:541:136::/48 maxlen: 48
2a05:541:137::/48 maxlen: 48
2a05:541:138::/48 maxlen: 48
2a05:541:139::/48 maxlen: 48
2a05:541:141::/48 maxlen: 48
2a05:541:152::/48 maxlen: 48
2a05:541:153::/48 maxlen: 48
2a05:541:156::/48 maxlen: 48
2a05:541:157::/48 maxlen: 48
2a05:541:158::/48 maxlen: 48
2a05:541:159::/48 maxlen: 48
2a05:541:170::/48 maxlen: 48
2a05:541:171::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:04:30:44:80:54:0a:55:7e:4c:1e:32:62:7f:ea:7b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7
Validity
Not Before: Sep 1 07:31:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1602325b4017f1c777b8c255a2de4765062956d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0d:6c:ab:6f:a4:55:bf:70:2f:0c:57:99:60:
0a:3e:2c:92:02:e2:81:e1:7c:96:e9:83:76:be:80:
89:63:1d:66:67:f1:11:35:1a:58:e7:fb:2e:1d:f8:
57:a4:18:c6:85:67:a7:cf:6a:d1:a3:6a:b0:dd:cf:
d0:94:8a:a7:cb:f0:5f:cd:e2:af:4f:22:66:cc:43:
86:fc:28:ed:1d:f4:a6:f0:ae:d2:8b:1c:6b:69:a3:
54:90:ac:2e:ad:00:3d:87:1e:1b:30:8b:52:56:3a:
c0:4a:13:47:26:92:c7:32:86:49:bf:67:9a:a6:6f:
89:37:b2:ad:c0:b3:61:08:02:94:ae:88:42:f3:04:
de:fa:c7:ac:7a:93:41:bc:85:1d:f9:41:52:e3:ff:
27:8d:64:5f:20:30:8b:f7:8b:24:76:12:15:6c:74:
41:05:91:de:ff:1a:c8:7e:d1:e3:97:2b:83:da:12:
23:c8:b4:f9:96:44:99:10:62:da:a8:0f:5b:3f:3c:
b1:9d:1a:22:c9:2a:5d:8a:3a:16:1c:4b:87:1c:b4:
1d:75:82:22:ed:82:9d:74:80:dc:29:58:43:72:2b:
e5:f4:c2:ee:34:c3:69:20:9e:85:8a:8f:14:0b:d4:
74:8f:f1:21:16:94:01:7b:eb:05:df:47:1e:f7:42:
ae:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:60:23:25:B4:01:7F:1C:77:7B:8C:25:5A:2D:E4:76:50:62:95:6D
X509v3 Authority Key Identifier:
keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/oWAjJbQBfxx3e4wlWi3kdlBilW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.42.0/24
45.129.185.0/24
IPv6:
2a05:541:102::-2a05:541:109:ffff:ffff:ffff:ffff:ffff
2a05:541:110::-2a05:541:119:ffff:ffff:ffff:ffff:ffff
2a05:541:121::-2a05:541:127:ffff:ffff:ffff:ffff:ffff
2a05:541:129::/48
2a05:541:131::/48
2a05:541:133::-2a05:541:139:ffff:ffff:ffff:ffff:ffff
2a05:541:141::/48
2a05:541:152::/47
2a05:541:156::-2a05:541:159:ffff:ffff:ffff:ffff:ffff
2a05:541:170::/47
Signature Algorithm: sha256WithRSAEncryption
2a:88:d2:0a:2a:df:36:03:32:73:ba:98:09:9e:27:76:21:c0:
ab:57:42:3f:a9:c8:1f:15:89:54:98:cd:fe:9e:0f:98:0f:16:
fe:6d:33:37:fa:fc:bf:8a:99:67:81:ac:98:37:3a:ed:6d:3d:
70:c0:49:c1:31:9c:b9:2a:b0:99:00:96:ff:c6:40:77:16:56:
81:77:37:33:10:21:3f:7c:c9:50:73:4d:21:eb:ad:32:23:55:
3a:22:2b:46:65:9c:e6:06:a3:ef:e9:78:f1:bd:39:47:1d:a9:
e3:3b:40:8b:68:c3:c0:4c:03:d1:93:73:26:89:ef:ce:0e:b6:
f3:58:8e:4d:bb:0f:19:de:44:81:e7:b3:df:fa:c4:b1:6d:26:
db:59:be:d4:16:d6:08:15:b0:08:8a:e5:a9:de:47:5d:60:43:
54:66:40:a0:42:34:76:84:96:f3:97:fc:b2:bf:67:f5:20:db:
82:5d:85:8d:ef:71:d7:a9:79:47:f0:3f:d8:1e:e6:1d:06:ac:
70:65:d5:d5:23:65:a1:ce:82:21:55:bb:1f:27:d1:4f:d1:6e:
b8:a8:17:4e:22:1e:df:1b:b7:e2:ed:63:3b:49:f6:09:6c:82:
70:99:cd:65:4c:8f:eb:ae:7f:eb:ec:76:4e:6d:fe:dc:08:de:
b2:41:22:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 13:28:10 2025 by rpki-client