Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/oUOtRV7pUYw15-5AdTCHfTFJYmA.roa
File: oUOtRV7pUYw15-5AdTCHfTFJYmA.roa (raw, json)
Hash identifier: 6WpA5rDmOxSR5I+UxNUiJzVqMhIhP9GYpFZRnnoMCmg=
Subject key identifier: A1:43:AD:45:5E:E9:51:8C:35:E7:EE:40:75:30:87:7D:31:49:62:60
Certificate issuer: /CN=b96e8b6d73f2f38548996f66621330a8d7108529
Certificate serial: 0199286A5F75E2FC09CDAEA0A407CF149998
Authority key identifier: B9:6E:8B:6D:73:F2:F3:85:48:99:6F:66:62:13:30:A8:D7:10:85:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uW6LbXPy84VImW9mYhMwqNcQhSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/oUOtRV7pUYw15-5AdTCHfTFJYmA.roa
Signing time: Mon 08 Sep 2025 08:21:23 +0000
ROA not before: Mon 08 Sep 2025 08:21:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60880
IP address blocks: 5.133.84.0/22 maxlen: 22
5.133.84.0/24 maxlen: 24
185.159.127.0/24 maxlen: 24
185.197.188.0/22 maxlen: 22
185.205.240.0/22 maxlen: 22
185.214.128.0/22 maxlen: 24
192.145.24.0/22 maxlen: 22
194.164.116.0/23 maxlen: 23
2a0a:7cc0::/29 maxlen: 29
2a0a:7cc0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uW6LbXPy84VImW9mYhMwqNcQhSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:6a:5f:75:e2:fc:09:cd:ae:a0:a4:07:cf:14:99:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b96e8b6d73f2f38548996f66621330a8d7108529
Validity
Not Before: Sep 8 08:21:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a143ad455ee9518c35e7ee407530877d31496260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2e:ce:69:af:36:a6:66:fe:72:1a:5b:4e:17:
04:d1:f2:87:db:02:c0:57:4e:db:ea:be:d4:82:b8:
2a:5d:71:88:44:d1:f4:ca:10:ff:77:9b:ff:f8:bd:
c7:70:95:16:c7:eb:ff:49:67:01:39:e0:f5:7a:52:
47:74:7f:ff:87:17:ec:1e:67:3c:2b:17:7c:c5:cd:
20:4c:2d:50:c3:3c:d9:78:ce:f5:61:44:71:be:b6:
47:8d:b4:ad:6f:7f:39:04:af:32:e3:3b:dd:8e:ea:
bd:08:49:6f:04:21:e0:8f:17:47:25:37:74:86:b2:
40:6f:d0:4e:ba:c1:5e:f8:42:fe:56:93:8a:78:b8:
fd:41:95:17:cd:37:8f:77:b9:7c:ba:b4:a7:a8:60:
81:81:13:12:74:48:0b:60:f6:20:e9:15:39:d1:44:
8a:9e:58:49:90:a5:52:95:54:d6:39:5c:01:05:19:
9b:e1:ad:66:55:1e:1c:12:b3:26:77:a7:ac:03:89:
2f:cd:96:da:70:82:d8:08:50:04:42:41:27:ab:c3:
3c:91:b0:1f:f8:5a:8e:9c:86:20:31:df:10:15:fb:
a6:c7:52:d0:b6:3d:7b:4d:7d:4c:82:97:dc:58:51:
d1:6a:76:80:ee:24:5d:9e:21:36:05:99:11:0c:e6:
d2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:43:AD:45:5E:E9:51:8C:35:E7:EE:40:75:30:87:7D:31:49:62:60
X509v3 Authority Key Identifier:
keyid:B9:6E:8B:6D:73:F2:F3:85:48:99:6F:66:62:13:30:A8:D7:10:85:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uW6LbXPy84VImW9mYhMwqNcQhSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/oUOtRV7pUYw15-5AdTCHfTFJYmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c14a62-aa6a-486d-b9e6-bc004649ee99/1/uW6LbXPy84VImW9mYhMwqNcQhSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.84.0/22
185.159.127.0/24
185.197.188.0/22
185.205.240.0/22
185.214.128.0/22
192.145.24.0/22
194.164.116.0/23
IPv6:
2a0a:7cc0::/29
Signature Algorithm: sha256WithRSAEncryption
69:97:20:e8:96:d7:68:c7:ea:0a:60:12:85:c0:49:73:7f:e5:
c8:02:24:29:23:8d:92:87:1f:2d:28:7b:39:31:b2:4a:cf:b6:
e5:fc:e9:3d:80:c0:05:6b:03:c2:ea:68:1f:1a:4d:fa:73:4f:
5c:ac:f3:e9:ff:c1:59:56:77:39:10:38:90:d0:d3:b9:35:d3:
b7:01:1c:f9:47:a5:82:38:26:33:ba:8e:7f:b5:42:26:7e:4d:
ca:ed:36:ba:12:69:f2:fb:f7:76:db:83:d6:7d:93:41:18:63:
d0:e7:66:14:56:40:31:49:81:eb:c6:2a:c0:5f:46:c2:1b:6a:
17:d0:6f:1c:10:b3:ed:45:fe:5b:ea:c6:52:6d:07:b5:fb:d6:
9d:ee:05:29:5a:de:86:5b:18:aa:4b:c4:83:91:c6:c8:e6:d0:
43:0c:0e:13:a9:b3:e6:e2:57:63:8a:f1:98:73:ad:a8:11:78:
37:c1:ae:76:6c:cb:2d:3b:26:bf:27:31:68:3f:00:76:f9:92:
00:ab:d7:cd:e7:d5:16:d9:40:01:d7:3f:09:a4:66:8e:70:f1:
83:8c:07:56:32:35:d6:a1:ab:7a:95:e4:86:b5:03:4b:12:3d:
e0:49:df:af:89:8e:13:71:58:9e:8f:42:b3:6c:2a:54:db:0d:
33:40:9b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 14:19:42 2025 by rpki-client