Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/CHoPOoom0a9RnOt315mDRfUGmoY.roa
File: CHoPOoom0a9RnOt315mDRfUGmoY.roa (raw, json)
Hash identifier: YoVmfjQzsmDv9UfWF56AABjoG52HO+Hyly7TBLUKc34=
Subject key identifier: 08:7A:0F:3A:8A:26:D1:AF:51:9C:EB:77:D7:99:83:45:F5:06:9A:86
Certificate issuer: /CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Certificate serial: 0198B442F10EAA94B11B3CFCD695105A6D1F
Authority key identifier: A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/CHoPOoom0a9RnOt315mDRfUGmoY.roa
Signing time: Sat 16 Aug 2025 19:02:22 +0000
ROA not before: Sat 16 Aug 2025 19:02:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 46.236.252.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.mft
rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b4:42:f1:0e:aa:94:b1:1b:3c:fc:d6:95:10:5a:6d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Validity
Not Before: Aug 16 19:02:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=087a0f3a8a26d1af519ceb77d7998345f5069a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:84:4c:b4:a3:eb:d0:f3:34:b9:50:d3:8d:e3:
33:5f:40:71:5a:49:1a:97:35:9e:3a:6b:0a:91:f1:
cd:21:9e:4c:4f:fc:cf:12:d3:2a:d0:1d:eb:74:b9:
7a:39:e1:7e:a4:ea:fb:f6:4a:4f:93:bf:83:65:5c:
3f:bb:3d:fa:55:0b:53:69:a1:0f:8f:0f:0f:d2:58:
4b:3a:77:40:15:10:fa:c1:fc:ea:7b:4c:20:75:d8:
3b:a6:8b:a1:20:71:9b:70:22:11:75:17:a7:f2:4d:
22:c3:b7:b9:a2:0c:b2:61:56:9a:3c:60:ce:59:9b:
5f:73:14:63:42:1a:7f:ce:56:2d:e2:ca:15:17:42:
0e:fb:b3:d7:8b:fb:9a:07:0e:0d:9d:28:85:81:11:
c9:e3:bf:a6:da:c9:9e:a3:ce:53:b8:c1:56:db:0f:
3d:32:45:0a:7f:25:8b:c6:ae:53:72:db:0a:2a:6e:
e7:f8:55:ed:16:d6:42:25:79:67:ad:f1:5d:bd:72:
c4:9d:ca:d8:26:8e:ec:58:92:1e:90:2b:32:06:ba:
73:44:c5:40:42:d2:ae:82:6b:02:a5:6a:d6:91:9a:
0d:36:ec:24:ff:03:3b:f4:ec:28:a0:8a:5d:eb:73:
52:ad:f9:62:c2:52:9d:59:0b:9a:97:df:ae:21:46:
bd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7A:0F:3A:8A:26:D1:AF:51:9C:EB:77:D7:99:83:45:F5:06:9A:86
X509v3 Authority Key Identifier:
keyid:A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/CHoPOoom0a9RnOt315mDRfUGmoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.252.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:a8:5d:fd:89:dd:05:a1:48:5f:00:f2:b8:d0:d7:89:0d:43:
fc:4f:0f:c6:d3:69:c8:da:b2:1b:e9:d9:64:b2:fe:fb:b3:c7:
9e:0c:c2:cb:29:30:ac:05:c1:40:bc:7f:ad:03:44:ca:6a:8f:
f5:ed:69:3d:a9:24:99:11:dd:c5:77:ce:3d:28:85:64:74:ad:
10:65:3d:83:06:6e:c3:68:6d:a5:65:06:0b:b2:2e:25:2c:bb:
19:27:46:b4:c7:25:8f:ec:db:5b:2d:27:14:e9:f6:a5:be:09:
43:27:a4:09:51:89:30:8d:77:28:30:a4:b1:fd:92:1f:e0:8a:
d4:ee:ab:aa:36:10:9a:03:b9:c4:dc:3e:50:a6:78:d6:9c:a3:
50:42:0c:29:26:8d:a5:31:cc:b8:73:63:47:0d:54:47:50:22:
04:98:6c:fc:16:5f:85:2f:47:aa:cc:c0:5d:1e:df:ee:22:a5:
cd:a3:ea:74:53:89:0f:a3:e8:aa:3f:12:1e:c4:40:0f:ba:0f:
68:df:49:6b:72:42:a7:a1:37:30:f2:f8:f5:24:55:da:83:f1:
b3:6b:5b:16:9e:0c:9a:76:42:58:31:d7:7c:21:a8:6b:d0:df:
9f:7e:b7:21:bb:42:7b:1b:ab:65:18:77:9a:73:3e:0a:16:4b:
1c:52:10:c6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZi0QvEOqpSxGzz81pUQWm0fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyYjEyZThkZjNhYmQ1NTU5ZjljZjk2ODBhZjY1ZGQxNjU4
OWRlODYwHhcNMjUwODE2MTkwMjIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODdhMGYzYThhMjZkMWFmNTE5Y2ViNzdkNzk5ODM0NWY1MDY5YTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4RMtKPr0PM0uVDTjeMzX0BxWkka
lzWeOmsKkfHNIZ5MT/zPEtMq0B3rdLl6OeF+pOr79kpPk7+DZVw/uz36VQtTaaEP
jw8P0lhLOndAFRD6wfzqe0wgddg7pouhIHGbcCIRdRen8k0iw7e5ogyyYVaaPGDO
WZtfcxRjQhp/zlYt4soVF0IO+7PXi/uaBw4NnSiFgRHJ47+m2smeo85TuMFW2w89
MkUKfyWLxq5TctsKKm7n+FXtFtZCJXlnrfFdvXLEncrYJo7sWJIekCsyBrpzRMVA
QtKugmsCpWrWkZoNNuwk/wM79OwooIpd63NSrfliwlKdWQual9+uIUa9YwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAh6DzqKJtGvUZzrd9eZg0X1BpqGMB8GA1UdIwQY
MBaAFKKxLo3zq9VVn5z5aAr2XdFlid6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3JFdWpmT3IxVldmblBsb0N2WmQwV1dKM29ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lYzQ0ZWEtZWY0My00YjNhLWE2OWEt
YjRjYjYzN2RhOGMzLzEvQ0hvUE9vb20wYTlSbk90MzE1bURSZlVHbW9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9lYzQ0ZWEtZWY0My00YjNhLWE2OWEtYjRjYjYzN2RhOGMz
LzEvb3JFdWpmT3IxVldmblBsb0N2WmQwV1dKM29ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLuz8MA0G
CSqGSIb3DQEBCwUAA4IBAQBsqF39id0FoUhfAPK40NeJDUP8Tw/G02nI2rIb6dlk
sv77s8eeDMLLKTCsBcFAvH+tA0TKao/17Wk9qSSZEd3Fd849KIVkdK0QZT2DBm7D
aG2lZQYLsi4lLLsZJ0a0xyWP7NtbLScU6falvglDJ6QJUYkwjXcoMKSx/ZIf4IrU
7quqNhCaA7nE3D5QpnjWnKNQQgwpJo2lMcy4c2NHDVRHUCIEmGz8Fl+FL0eqzMBd
Ht/uIqXNo+p0U4kPo+iqPxIexEAPug9o30lrckKnoTcw8vj1JFXag/Gza1sWngya
dkJYMdd8Iahr0N+ffrchu0J7G6tlGHeacz4KFkscUhDG
-----END CERTIFICATE-----
Generated at Wed Aug 20 10:45:31 2025 by rpki-client