Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/O0Y2pXvoTcwSg_AH3MrYw8lGjAI.roa
File: O0Y2pXvoTcwSg_AH3MrYw8lGjAI.roa (raw, json)
Hash identifier: SS9S9xCfIfcatYd8ThDYEjf3h4RzT0uB9Re77ZoPS4g=
Subject key identifier: 3B:46:36:A5:7B:E8:4D:CC:12:83:F0:07:DC:CA:D8:C3:C9:46:8C:02
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 019950EE41DABA9E4DA54ED8C369EF687FE2
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/O0Y2pXvoTcwSg_AH3MrYw8lGjAI.roa
Signing time: Tue 16 Sep 2025 05:10:15 +0000
ROA not before: Tue 16 Sep 2025 05:10:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212429
IP address blocks: 82.163.52.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 06:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:50:ee:41:da:ba:9e:4d:a5:4e:d8:c3:69:ef:68:7f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Sep 16 05:10:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b4636a57be84dcc1283f007dccad8c3c9468c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a9:b8:15:3c:96:ee:f3:a2:39:0d:ac:a9:96:
29:8a:53:9b:ea:65:a4:f0:ca:bf:33:f7:b1:6b:3f:
2d:24:34:d8:63:d7:e4:b8:1a:d2:9d:f8:a0:76:26:
b4:db:8d:4c:d2:ff:c7:40:8d:c0:f9:f2:3f:3f:be:
a8:33:46:0f:41:f1:fc:02:d1:97:df:86:9c:f8:ba:
55:54:a8:65:73:12:6c:ff:ea:8d:e2:c0:95:5f:f7:
64:60:15:e4:bd:ea:c4:16:a9:e5:66:58:e5:28:e4:
af:a3:03:7c:1d:14:8a:4e:91:3c:6b:9b:7b:00:ef:
75:6b:a8:9b:70:c4:8d:32:14:c1:b5:e8:1d:b8:f0:
6d:b6:3a:5c:8e:2b:25:a2:9e:fa:7e:98:55:35:92:
ff:56:79:01:2a:b7:86:ac:e7:99:3c:68:37:28:e2:
8d:e6:1f:e0:d8:fe:81:97:b5:8f:08:ae:4c:c0:41:
52:33:5c:3d:ae:59:a9:ff:fc:d1:98:b3:f2:59:a7:
5f:fe:6a:5c:67:2b:ff:16:54:c7:4f:95:31:f4:b9:
0f:8e:fd:50:61:1d:2c:eb:37:c9:d1:27:01:e6:00:
96:90:2d:e2:9c:cf:16:27:20:bc:17:ea:1d:c8:3c:
94:8f:cf:86:59:12:14:bd:a2:79:3f:78:71:b6:48:
16:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:46:36:A5:7B:E8:4D:CC:12:83:F0:07:DC:CA:D8:C3:C9:46:8C:02
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/O0Y2pXvoTcwSg_AH3MrYw8lGjAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.52.0/23
Signature Algorithm: sha256WithRSAEncryption
61:82:b1:6a:a0:a6:b2:6a:01:b7:66:99:fe:00:59:ae:e5:50:
25:46:74:75:d1:fa:7c:57:36:33:6d:8f:16:eb:4a:55:d4:6a:
4b:30:78:b9:ee:cd:92:dc:4b:48:71:48:fa:b8:e2:01:d3:80:
88:f4:16:37:44:53:1c:39:a9:5e:72:4f:a6:82:30:cb:4c:c3:
be:97:1f:6f:4e:3a:83:ed:ea:02:f0:df:39:43:fa:a7:ac:bb:
ec:b2:75:01:da:4d:1b:dc:44:6b:8d:d0:37:31:9e:2b:20:d4:
ff:5f:ab:8b:3e:a5:48:03:4f:68:96:49:65:7d:74:df:e1:d0:
41:17:28:57:a4:5e:10:ca:2c:d7:ab:76:60:16:4d:2c:ec:bc:
d8:ff:24:11:f7:bd:9e:80:91:c6:33:89:ab:2e:9a:99:96:eb:
b2:19:85:66:6b:31:fd:c7:85:df:31:ed:ec:fd:5f:1c:7c:eb:
a3:33:85:68:6b:c9:0b:c9:29:16:c3:a5:c8:84:3c:42:95:2e:
c6:a2:e0:e0:cd:95:76:b0:97:59:1b:00:4f:26:8e:7f:c0:4c:
b7:3c:05:9f:34:48:14:62:70:0c:24:ce:b7:39:df:cf:6c:05:
a3:b5:66:65:9a:31:5d:e0:9e:c7:62:6e:28:6a:aa:c7:d1:76:
67:d4:56:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 15:10:41 2025 by rpki-client