Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/ody9P0FOVuvAsEYBb7FSrt6rVlo.roa
File: ody9P0FOVuvAsEYBb7FSrt6rVlo.roa (raw, json)
Hash identifier: 8DCSpvtBqHS1UhkIWKZORztPmskya39EHOn+cmU5MSA=
Subject key identifier: A1:DC:BD:3F:41:4E:56:EB:C0:B0:46:01:6F:B1:52:AE:DE:AB:56:5A
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 0198E5D69EFF48D05D0755D95877ECEF9D09
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/ody9P0FOVuvAsEYBb7FSrt6rVlo.roa
Signing time: Tue 26 Aug 2025 10:05:04 +0000
ROA not before: Tue 26 Aug 2025 10:05:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200539
IP address blocks: 195.136.52.0/22 maxlen: 22
195.136.52.0/24 maxlen: 24
195.136.53.0/24 maxlen: 24
195.136.54.0/24 maxlen: 24
195.136.55.0/24 maxlen: 24
195.136.56.0/21 maxlen: 21
195.136.56.0/24 maxlen: 24
195.136.57.0/24 maxlen: 24
195.136.58.0/24 maxlen: 24
195.136.59.0/24 maxlen: 24
195.136.60.0/24 maxlen: 24
195.136.61.0/24 maxlen: 24
195.136.62.0/24 maxlen: 24
195.136.63.0/24 maxlen: 24
195.136.100.0/22 maxlen: 22
195.136.100.0/24 maxlen: 24
195.136.101.0/24 maxlen: 24
195.136.102.0/24 maxlen: 24
195.136.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 21:42:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e5:d6:9e:ff:48:d0:5d:07:55:d9:58:77:ec:ef:9d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Aug 26 10:05:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1dcbd3f414e56ebc0b046016fb152aedeab565a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b1:1e:36:11:e9:7d:6c:db:bd:dd:ca:93:8a:
8b:16:99:fa:c6:98:e0:eb:db:26:20:7e:fa:28:cd:
e6:9f:9f:65:93:3f:b4:d6:74:85:fd:5f:b8:bf:e6:
6c:0b:6d:fb:cd:0d:98:37:08:0d:65:db:01:cf:db:
4c:f4:8a:d5:d8:4f:76:c2:cd:a4:ff:5f:24:ff:9a:
cb:55:4e:8f:e3:f7:cc:94:cd:80:9c:84:a7:57:4a:
2f:27:50:c7:86:9e:f3:f1:3c:f6:6b:c1:d5:25:ed:
7a:3a:d6:62:3c:44:df:fd:4f:1e:7f:24:5b:e8:fb:
f0:8f:de:86:ba:d0:21:9e:79:6c:a6:f0:f2:ac:0c:
6b:36:79:03:36:12:6b:e4:46:1b:6c:ae:f9:d3:9b:
a4:a2:40:10:02:2e:f5:5b:07:d3:f3:c2:b5:a1:7f:
4d:90:7c:bf:f3:3e:20:6b:23:08:1f:60:53:3b:d5:
bc:f5:d6:50:7d:d8:72:2b:b5:c1:45:e7:8e:91:45:
52:5d:5d:1b:73:19:f9:17:ad:93:15:cd:4d:b0:f0:
f2:64:11:4c:55:f7:bb:02:1b:d5:f2:89:18:42:22:
a2:16:c5:7d:5f:32:f8:0b:fd:53:e7:e6:aa:76:f8:
c3:1e:e2:d2:e8:0c:fd:b1:ea:90:5f:7e:46:cb:33:
3c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DC:BD:3F:41:4E:56:EB:C0:B0:46:01:6F:B1:52:AE:DE:AB:56:5A
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/ody9P0FOVuvAsEYBb7FSrt6rVlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.52.0-195.136.63.255
195.136.100.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:45:14:8c:8c:8e:bc:69:c4:23:9e:40:16:7c:49:48:5d:75:
43:24:57:c4:bb:d0:16:a0:ca:8c:f3:bf:3e:5e:4a:f1:c4:cd:
b4:45:10:1e:4b:82:d7:bc:ab:a7:85:dd:41:34:69:29:7c:eb:
f6:21:cb:bf:d5:e6:e4:55:d4:ff:74:c4:f4:91:cc:a2:df:a6:
54:e3:5a:97:af:7c:63:eb:89:d9:59:99:13:ca:99:f1:b8:6d:
c2:68:11:9f:bf:cb:9e:28:26:91:b7:ca:c5:db:b4:a9:df:bf:
80:a8:27:63:01:68:12:b2:27:aa:30:69:ca:4b:f8:4f:cd:1a:
ca:40:96:1c:b1:1d:8e:e8:60:e4:f6:83:af:bb:e1:a5:a5:80:
83:43:b2:bb:e5:9c:5f:ca:9c:3c:03:ec:9a:3c:24:b4:05:d7:
80:05:49:65:0a:d3:29:60:86:ba:d5:3c:a5:7a:81:47:75:f7:
96:ba:9e:d9:75:b3:2b:48:21:41:71:d8:24:16:78:41:9e:2f:
b6:b8:ba:e0:23:b4:fb:74:f1:a7:54:7d:65:36:1f:12:bb:5d:
70:aa:49:0e:43:c1:c9:af:c4:8d:6a:45:f8:7e:e3:05:5b:8a:
6e:31:29:06:d8:40:1a:48:51:97:a7:c6:ce:73:a6:4d:46:f5:
3b:15:3c:15
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 9 00:34:15 2025 by rpki-client