Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/6OzuFuoHFoTdTwv4FRn7LoIvB5s.roa
File: 6OzuFuoHFoTdTwv4FRn7LoIvB5s.roa (raw, json)
Hash identifier: e4WYSwjwkMxNR6fSo9iakfDeNdFMp+Vk1BRcdY4nLcA=
Subject key identifier: E8:EC:EE:16:EA:07:16:84:DD:4F:0B:F8:15:19:FB:2E:82:2F:07:9B
Certificate issuer: /CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Certificate serial: 01993D6D14A690C672A619E7EF027594D362
Authority key identifier: 46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/6OzuFuoHFoTdTwv4FRn7LoIvB5s.roa
Signing time: Fri 12 Sep 2025 10:16:22 +0000
ROA not before: Fri 12 Sep 2025 10:16:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211517
IP address blocks: 90.156.245.0/24 maxlen: 24
2a03:720:70::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 13:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3d:6d:14:a6:90:c6:72:a6:19:e7:ef:02:75:94:d3:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Validity
Not Before: Sep 12 10:16:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8ecee16ea071684dd4f0bf81519fb2e822f079b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:28:e8:78:60:88:c6:2e:92:36:9c:f4:63:c1:
b4:b8:75:08:6a:e4:17:5f:61:3a:d3:d1:1f:26:26:
7a:ef:93:6b:bc:68:8a:3e:50:2d:05:e9:34:8d:c7:
9a:e2:31:1a:bb:fe:fd:9f:ca:6e:5a:32:86:93:b7:
95:56:a0:75:73:b5:9b:15:9f:aa:62:22:74:c6:c2:
a9:a5:e5:d8:eb:20:4a:34:f9:b2:94:f6:88:0b:d1:
96:50:d3:5a:1e:8c:2e:4c:d9:6b:5b:fd:98:a0:28:
c8:5d:c8:e2:1c:55:2f:3b:89:73:14:df:c4:91:98:
56:2d:9e:35:83:cd:a5:08:7a:f7:af:b3:cb:33:02:
c4:51:fb:49:fd:67:65:db:f3:80:e4:1c:c9:53:18:
8f:9d:14:30:d7:cd:a9:32:4b:1c:9e:cc:94:75:f3:
2a:d3:8f:43:a8:6a:c9:40:4d:95:56:a1:b1:e0:fe:
e1:c0:8d:f0:9b:0b:ea:45:ef:6a:ae:00:d9:e1:23:
5a:bb:7e:31:08:21:4e:fa:5d:55:fe:93:a4:d2:6d:
4f:9d:82:fa:5b:88:f7:2e:14:26:63:ba:35:4f:1e:
a2:a6:52:57:ed:57:81:aa:93:9a:b6:09:67:2e:06:
b1:b1:52:2b:f2:49:26:fc:9c:90:59:99:fa:f4:8d:
ad:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EC:EE:16:EA:07:16:84:DD:4F:0B:F8:15:19:FB:2E:82:2F:07:9B
X509v3 Authority Key Identifier:
keyid:46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/6OzuFuoHFoTdTwv4FRn7LoIvB5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.156.245.0/24
IPv6:
2a03:720:70::/48
Signature Algorithm: sha256WithRSAEncryption
1b:b1:b3:83:1e:cd:9d:a9:45:04:2f:8b:4a:a7:81:15:d9:08:
8f:79:3e:af:18:0d:01:48:21:d4:f4:4e:1f:82:aa:44:bc:a3:
b6:de:05:e6:99:b1:03:52:49:0c:51:a7:2b:57:91:8f:f7:2a:
4a:2f:c7:60:ed:43:ba:00:7a:ca:20:58:76:8b:c5:4b:ce:4d:
1e:d2:23:75:e6:3a:d2:bf:14:cd:27:67:72:be:e3:aa:74:fb:
c2:4c:0c:94:79:a0:38:8e:a1:26:82:54:ed:35:ea:e9:11:6a:
f6:61:f3:77:1d:bc:b3:86:30:a8:ab:b3:75:22:ad:b1:5a:ac:
ca:e5:5f:1d:62:da:7d:f8:44:a1:4d:12:8e:86:9a:61:e3:76:
68:72:dc:dc:23:fe:0f:2c:ed:c6:1f:2c:42:64:7d:25:58:da:
57:a0:bc:fa:2d:a6:b6:0a:6b:be:27:70:bb:35:2c:da:9e:5b:
ff:f8:6d:8e:5d:93:17:69:93:83:6a:1f:f1:87:31:5c:6b:e3:
48:62:f2:e5:22:c3:60:50:3c:18:95:f2:07:7c:60:c3:ca:90:
04:19:32:fd:ed:9a:59:29:57:31:5c:ec:3b:d8:0a:3e:f6:4a:
0f:1a:f5:35:b4:9e:51:07:ed:f3:b0:0c:61:98:2d:0e:da:f1:
2d:f6:df:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 17:56:11 2025 by rpki-client