Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/O3aj1sq28jEncC-VrEHScIVqm2s.roa
File: O3aj1sq28jEncC-VrEHScIVqm2s.roa (raw, json)
Hash identifier: ErVAkKBfexXNdqxolDCKn4vodt0IXWxMoZE998REcOM=
Subject key identifier: 3B:76:A3:D6:CA:B6:F2:31:27:70:2F:95:AC:41:D2:70:85:6A:9B:6B
Certificate issuer: /CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Certificate serial: 019A2E129D28196B8F4BCB283726809D6CC5
Authority key identifier: 96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/O3aj1sq28jEncC-VrEHScIVqm2s.roa
Signing time: Wed 29 Oct 2025 03:46:03 +0000
ROA not before: Wed 29 Oct 2025 03:46:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8801
IP address blocks: 83.167.176.0/21 maxlen: 21
83.167.181.0/24 maxlen: 24
83.167.182.0/24 maxlen: 24
83.167.183.0/24 maxlen: 24
83.167.184.0/22 maxlen: 22
83.167.185.0/24 maxlen: 24
83.167.186.0/24 maxlen: 24
83.167.187.0/24 maxlen: 24
185.222.21.0/24 maxlen: 24
193.56.176.0/22 maxlen: 22
2a10:f300::/29 maxlen: 29
2a10:f301::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:12:9d:28:19:6b:8f:4b:cb:28:37:26:80:9d:6c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f
Validity
Not Before: Oct 29 03:46:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b76a3d6cab6f23127702f95ac41d270856a9b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b2:53:0e:14:bd:d6:d4:58:a0:8d:7a:ef:2d:
14:77:19:a0:3b:15:51:d8:09:66:4f:2c:42:94:10:
6a:08:92:0c:df:62:72:54:e5:4d:5f:b7:91:96:23:
89:e2:d7:dc:64:e1:5d:19:2c:da:81:5c:69:75:a0:
67:7c:d4:8f:44:f3:c5:00:71:e6:50:2b:e4:7f:52:
b9:ea:56:c0:08:33:be:2f:b1:35:fd:02:aa:c7:6e:
bb:89:1d:59:26:3b:87:cd:e7:30:bd:bd:3e:0c:71:
07:73:8e:82:70:db:ab:6a:ee:01:eb:99:b1:e6:77:
3e:29:b4:06:9f:48:53:dc:11:20:72:fd:24:11:94:
f4:89:d0:05:e4:67:a8:08:1c:89:b3:b0:bc:51:25:
49:dd:76:0f:7c:ba:85:91:a3:2c:00:2c:31:f3:8b:
97:ca:c2:1a:07:e9:17:79:0d:f6:f2:1b:9a:f1:bd:
f3:88:36:d4:d9:7b:bf:ba:a1:08:11:8e:6b:90:f3:
a3:14:2c:52:ea:72:2e:57:37:0b:b8:26:d2:4b:e9:
56:53:b7:0d:c5:92:99:86:e6:03:61:ea:39:29:f4:
16:24:69:bf:73:ae:98:c8:30:00:b8:2b:f3:51:08:
d1:a9:e1:7b:eb:08:63:6e:3f:e9:9b:8d:ee:e5:04:
1a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:76:A3:D6:CA:B6:F2:31:27:70:2F:95:AC:41:D2:70:85:6A:9B:6B
X509v3 Authority Key Identifier:
keyid:96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/O3aj1sq28jEncC-VrEHScIVqm2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.167.176.0-83.167.187.255
185.222.21.0/24
193.56.176.0/22
IPv6:
2a10:f300::/29
Signature Algorithm: sha256WithRSAEncryption
2f:ba:0f:49:90:2e:4a:ee:f4:13:1d:39:b7:e4:ea:6e:75:80:
de:2a:f7:c5:22:cc:68:ba:9b:95:1d:6a:dc:50:16:e3:d6:3e:
cd:45:05:4a:c2:b6:92:d3:aa:ed:46:76:d4:21:5a:f3:e7:f9:
71:d6:aa:e6:2c:37:79:95:de:dc:3e:ee:67:f0:4e:84:aa:dd:
b8:a9:5d:dc:7d:8c:67:3a:42:62:f5:90:3f:5e:d6:a3:ac:69:
02:11:ab:81:08:5f:18:e6:32:7d:2a:d7:db:cb:c1:91:78:26:
73:40:91:4a:ec:f5:a4:86:c0:b1:57:ea:55:ea:0f:77:c4:51:
e6:5f:a6:ab:34:97:87:04:0a:84:87:d3:86:e2:07:76:83:8d:
6c:63:32:01:76:64:96:a6:dc:47:14:ed:2d:b4:e9:e5:63:d9:
4b:cb:a9:0e:a8:c2:d9:c5:a6:d2:9a:60:55:c8:ed:ab:b3:a4:
75:fb:be:46:99:b7:1d:72:9e:9c:d4:c3:27:b9:82:9a:6c:6c:
e1:07:aa:ee:d2:28:4d:98:9f:b3:92:c8:9b:f4:2d:8d:15:24:
b2:df:c1:87:7d:19:c5:28:90:0a:8e:94:e1:34:55:eb:52:07:
33:b1:71:26:88:e9:33:8e:9c:50:47:a6:f7:94:ac:81:2f:53:
58:fc:e1:0a
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAZouEp0oGWuPS8soNyaAnWzFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZTZmNzdjYmRhMTAxOTg3ZDlkZmM4NGJlOTBiNmZiYTY2
YWRjOWYwHhcNMjUxMDI5MDM0NjAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjc2YTNkNmNhYjZmMjMxMjc3MDJmOTVhYzQxZDI3MDg1NmE5YjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurJTDhS91tRYoI167y0UdxmgOxVR
2AlmTyxClBBqCJIM32JyVOVNX7eRliOJ4tfcZOFdGSzagVxpdaBnfNSPRPPFAHHm
UCvkf1K56lbACDO+L7E1/QKqx267iR1ZJjuHzecwvb0+DHEHc46CcNurau4B65mx
5nc+KbQGn0hT3BEgcv0kEZT0idAF5GeoCByJs7C8USVJ3XYPfLqFkaMsACwx84uX
ysIaB+kXeQ328hua8b3ziDbU2Xu/uqEIEY5rkPOjFCxS6nIuVzcLuCbSS+lWU7cN
xZKZhuYDYeo5KfQWJGm/c66YyDAAuCvzUQjRqeF76whjbj/pm43u5QQa8QIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFDt2o9bKtvIxJ3AvlaxB0nCFaptrMB8GA1UdIwQY
MBaAFJbm93y9oQGYfZ38hL6QtvumatyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHViM2ZMMmhBWmg5bmZ5RXZwQzItNlpxM0o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8xY2JjMWUtNGQ0Ni00YjViLWIyNDkt
MzIwOGRlMzljMDlkLzEvTzNhajFzcTI4akVuY0MtVnJFSFNjSVZxbTJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8xY2JjMWUtNGQ0Ni00YjViLWIyNDktMzIwOGRlMzljMDlk
LzEvbHViM2ZMMmhBWmg5bmZ5RXZwQzItNlpxM0o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaMAwDBARTp7AD
BAJTp7gDBAC53hUDBALBOLAwDQQCAAIwBwMFAyoQ8wAwDQYJKoZIhvcNAQELBQAD
ggEBAC+6D0mQLkru9BMdObfk6m51gN4q98UizGi6m5UdatxQFuPWPs1FBUrCtpLT
qu1GdtQhWvPn+XHWquYsN3mV3tw+7mfwToSq3bipXdx9jGc6QmL1kD9e1qOsaQIR
q4EIXxjmMn0q19vLwZF4JnNAkUrs9aSGwLFX6lXqD3fEUeZfpqs0l4cECoSH04bi
B3aDjWxjMgF2ZJam3EcU7S206eVj2UvLqQ6owtnFptKaYFXI7auzpHX7vkaZtx1y
npzUwye5gppsbOEHqu7SKE2Yn7OSyJv0LY0VJLLfwYd9GcUokAqOlOE0VetSBzOx
cSaI6TOOnFBHpveUrIEvU1j84Qo=
-----END CERTIFICATE-----
Generated at Thu Oct 30 05:19:50 2025 by rpki-client