Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/O3HB8RSgMVOhYaf96zL0k6K3nZc.roa
File: O3HB8RSgMVOhYaf96zL0k6K3nZc.roa (raw, json)
Hash identifier: z2RBJsKCUdq19FmXpexk/4aBj6EiMtTI7PUDkCaEtvc=
Subject key identifier: 3B:71:C1:F1:14:A0:31:53:A1:61:A7:FD:EB:32:F4:93:A2:B7:9D:97
Certificate issuer: /CN=304e59a223f4bcb823492fb1096c3a82310c03da
Certificate serial: 01990A275F3F8555E916522209968A2E1379
Authority key identifier: 30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/O3HB8RSgMVOhYaf96zL0k6K3nZc.roa
Signing time: Tue 02 Sep 2025 11:19:36 +0000
ROA not before: Tue 02 Sep 2025 11:19:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42032
IP address blocks: 45.14.60.0/22 maxlen: 22
185.119.105.0/24 maxlen: 24
2a06:8a02::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0a:27:5f:3f:85:55:e9:16:52:22:09:96:8a:2e:13:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=304e59a223f4bcb823492fb1096c3a82310c03da
Validity
Not Before: Sep 2 11:19:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b71c1f114a03153a161a7fdeb32f493a2b79d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:9c:1d:56:5b:4e:c6:e0:32:11:9f:9a:5e:26:
c8:c0:63:e5:18:70:28:a4:d0:d5:c1:68:42:c2:41:
a7:5e:c1:3b:32:13:eb:2f:31:bb:dc:20:9e:f6:a1:
1c:0b:5d:12:16:22:e6:68:59:29:4e:20:fa:30:88:
70:7d:29:8f:8c:7d:55:c7:c3:c4:1d:da:82:8f:ea:
77:93:c4:d7:4a:4b:4d:f9:e7:d5:30:58:1e:11:4a:
81:f1:3b:37:e9:5c:46:3c:94:33:c8:b2:a4:20:9e:
92:06:79:ed:2c:ff:1f:e6:6e:c8:53:99:04:07:f9:
83:f1:bc:7a:36:26:a3:bc:27:d4:25:5f:a4:24:23:
01:d1:b8:15:6a:18:53:ec:a7:1a:31:ce:68:08:74:
89:3a:83:87:8b:6a:c0:4d:ce:56:ca:0c:2c:70:02:
45:6d:8a:9d:df:a3:b0:37:45:2d:60:d1:49:55:d4:
b5:a0:49:26:97:67:3d:e7:a2:0e:d8:87:10:4e:52:
bf:c7:ec:cf:ab:cd:52:ef:51:3c:1e:64:31:01:1c:
7c:e2:a9:4b:3b:da:fa:9c:fa:85:39:fe:e6:d6:14:
fa:33:f0:a3:9b:02:4a:2e:49:8a:37:16:00:d0:36:
19:74:65:f8:3d:0b:f7:a5:0d:ab:51:bd:a4:55:44:
f0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:71:C1:F1:14:A0:31:53:A1:61:A7:FD:EB:32:F4:93:A2:B7:9D:97
X509v3 Authority Key Identifier:
keyid:30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/O3HB8RSgMVOhYaf96zL0k6K3nZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.60.0/22
185.119.105.0/24
IPv6:
2a06:8a02::/32
Signature Algorithm: sha256WithRSAEncryption
67:85:df:80:fb:c6:76:65:62:4b:2b:5d:8d:87:77:22:3b:d9:
46:00:c2:5f:f1:ba:48:ff:ce:ff:f6:d1:9a:ee:b3:1a:8f:2f:
ad:f9:ee:2f:6b:60:0b:85:df:30:15:f6:51:75:c2:f6:f2:0d:
e0:75:b0:dc:a9:57:c0:4e:94:cd:4a:c2:b4:a3:f6:8c:76:cc:
c8:a2:db:a4:a9:5b:cd:9f:83:44:13:5c:a9:00:10:ff:bc:7d:
d3:e8:a3:87:b4:4b:bb:d8:29:20:25:6d:e5:44:78:04:df:63:
9c:8c:8b:a9:dd:4d:a7:98:6b:20:5a:3b:28:22:9c:70:7b:ed:
4b:d2:96:85:1c:c6:17:48:1c:97:3d:f0:64:71:ec:76:18:a0:
ef:b1:b4:fb:6a:17:fd:e4:d7:25:22:ec:70:fd:c4:52:db:26:
a8:2e:cf:58:25:9b:c6:3b:11:70:ad:51:5b:2e:02:64:62:67:
ab:48:a9:a0:20:33:c2:19:76:b0:d5:ac:8c:e9:a9:03:db:41:
77:90:98:b0:46:58:5d:1f:52:d6:58:bc:c6:95:6d:95:19:38:
60:ad:a6:b3:78:ff:13:30:35:f3:84:5c:35:68:b8:58:74:fa:
e9:fd:09:cf:d2:73:48:d8:8d:dd:53:73:3a:9c:39:d0:34:f4:
08:82:cb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:46:27 2025 by rpki-client