Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/O7atMXtEIJm5vQz7W8heifIaCbA.roa
File: O7atMXtEIJm5vQz7W8heifIaCbA.roa (raw, json)
Hash identifier: co8lkj6ZmcMmS3fIL6FgljEMwizloNQj3S6Ye0V5Fow=
Subject key identifier: 3B:B6:AD:31:7B:44:20:99:B9:BD:0C:FB:5B:C8:5E:89:F2:1A:09:B0
Certificate issuer: /CN=84d601a8b0ea5cb24c5ec4f85d2267d821931c02
Certificate serial: 019930805BFD2BD0A0A7F0B4C4DB5B9BF9A0
Authority key identifier: 84:D6:01:A8:B0:EA:5C:B2:4C:5E:C4:F8:5D:22:67:D8:21:93:1C:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNYBqLDqXLJMXsT4XSJn2CGTHAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/O7atMXtEIJm5vQz7W8heifIaCbA.roa
Signing time: Tue 09 Sep 2025 22:02:22 +0000
ROA not before: Tue 09 Sep 2025 22:02:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 146.19.247.0/24 maxlen: 24
212.52.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNYBqLDqXLJMXsT4XSJn2CGTHAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 14:36:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:80:5b:fd:2b:d0:a0:a7:f0:b4:c4:db:5b:9b:f9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d601a8b0ea5cb24c5ec4f85d2267d821931c02
Validity
Not Before: Sep 9 22:02:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3bb6ad317b442099b9bd0cfb5bc85e89f21a09b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f5:52:7b:08:75:da:95:39:1f:05:f1:22:3c:
32:89:4f:e9:46:cc:4d:ce:ef:c2:dc:bd:44:4c:09:
79:3f:85:e7:63:99:53:69:d5:48:aa:2d:d7:a6:9a:
d9:c4:d9:83:36:b3:35:ab:2f:db:84:07:3e:b7:6a:
60:ce:33:7a:b3:c5:4f:3a:f3:fd:a7:b9:b8:35:d7:
26:f2:c6:ac:08:4c:f0:c1:a9:3f:e9:0d:7d:54:ba:
1b:3b:72:97:17:99:1d:a6:1d:d6:13:52:09:00:78:
4d:d9:26:a7:f6:b0:4c:22:f3:d4:17:bf:0a:54:52:
0c:8a:8f:9c:8f:45:e3:54:a1:4c:6d:10:0d:89:5e:
5f:ae:9d:cf:db:3a:47:df:e6:2f:8e:f4:f6:37:df:
f3:12:80:8f:55:2c:53:6f:df:0a:13:65:39:1d:16:
f9:e6:84:62:87:d7:b4:9f:b9:27:0e:eb:87:47:dc:
44:a5:f9:49:93:23:7f:15:66:4b:f4:68:64:f7:8f:
c7:5c:76:3e:2a:96:85:38:de:a3:f4:03:f1:32:5d:
6d:8a:01:df:45:fc:8d:d4:c3:da:ff:72:0e:70:79:
84:75:94:39:11:79:a4:40:1e:0f:c0:4d:59:f5:89:
27:7c:1b:e1:73:db:0e:3d:34:5b:bd:72:cc:09:b2:
f0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B6:AD:31:7B:44:20:99:B9:BD:0C:FB:5B:C8:5E:89:F2:1A:09:B0
X509v3 Authority Key Identifier:
keyid:84:D6:01:A8:B0:EA:5C:B2:4C:5E:C4:F8:5D:22:67:D8:21:93:1C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNYBqLDqXLJMXsT4XSJn2CGTHAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/O7atMXtEIJm5vQz7W8heifIaCbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.247.0/24
212.52.1.0/24
Signature Algorithm: sha256WithRSAEncryption
23:07:02:d2:e3:98:a1:fb:a9:f1:f4:4a:a8:21:62:cb:54:0c:
2b:50:80:c7:60:6e:97:a9:05:aa:0d:3e:58:e1:ef:64:fc:6b:
67:4f:f9:c7:0f:66:25:90:f0:b7:ee:6f:3a:f8:78:b3:d7:c4:
2a:5d:f5:6e:6f:f1:a9:68:47:c4:77:46:fe:a1:06:2f:24:78:
67:95:14:8d:d1:b4:7e:b3:9e:a1:84:f6:1a:fc:f7:ac:1e:62:
ff:75:ef:19:e0:1f:9b:fa:f0:37:c2:78:79:21:cd:64:c2:df:
bb:8f:31:df:b9:5a:cb:17:0d:3f:c6:f4:23:cd:4a:d5:80:b8:
2c:06:3b:b9:2f:67:9f:85:9c:83:82:ec:61:27:c5:2a:14:73:
04:3e:0d:a8:97:61:d1:c6:cd:75:99:a3:08:8e:82:f9:c0:29:
be:b8:14:91:5e:84:c4:e1:10:1b:95:2e:85:08:59:97:10:3b:
fd:88:16:89:eb:d4:66:db:7c:6b:5d:08:f4:94:db:79:8a:db:
77:17:98:30:9f:8e:72:18:42:24:bf:cf:8b:10:bd:ad:00:48:
b3:1d:3f:bf:75:a5:f8:73:f1:b8:90:cb:50:3e:ac:b3:1f:c2:
90:2e:3d:45:38:5d:0f:d5:79:c9:a4:46:a8:c0:75:df:91:c9:
33:8b:ec:24
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZkwgFv9K9Cgp/C0xNtbm/mgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ZDYwMWE4YjBlYTVjYjI0YzVlYzRmODVkMjI2N2Q4MjE5
MzFjMDIwHhcNMjUwOTA5MjIwMjIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYmI2YWQzMTdiNDQyMDk5YjliZDBjZmI1YmM4NWU4OWYyMWEwOWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fVSewh12pU5HwXxIjwyiU/pRsxN
zu/C3L1ETAl5P4XnY5lTadVIqi3XpprZxNmDNrM1qy/bhAc+t2pgzjN6s8VPOvP9
p7m4Ndcm8sasCEzwwak/6Q19VLobO3KXF5kdph3WE1IJAHhN2San9rBMIvPUF78K
VFIMio+cj0XjVKFMbRANiV5frp3P2zpH3+YvjvT2N9/zEoCPVSxTb98KE2U5HRb5
5oRih9e0n7knDuuHR9xEpflJkyN/FWZL9Ghk94/HXHY+KpaFON6j9APxMl1tigHf
RfyN1MPa/3IOcHmEdZQ5EXmkQB4PwE1Z9YknfBvhc9sOPTRbvXLMCbLwdQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDu2rTF7RCCZub0M+1vIXonyGgmwMB8GA1UdIwQY
MBaAFITWAaiw6lyyTF7E+F0iZ9ghkxwCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaE5ZQnFMRHFYTEpNWHNUNFhTSm4yQ0dUSEFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8yNTA5NDYtZGE2Ni00YTk0LWJhZTYt
ZWU3N2Q3NWMzMjVlLzEvTzdhdE1YdEVJSm01dlF6N1c4aGVpZklhQ2JBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8yNTA5NDYtZGE2Ni00YTk0LWJhZTYtZWU3N2Q3NWMzMjVl
LzEvaE5ZQnFMRHFYTEpNWHNUNFhTSm4yQ0dUSEFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAkhP3AwQA
1DQBMA0GCSqGSIb3DQEBCwUAA4IBAQAjBwLS45ih+6nx9EqoIWLLVAwrUIDHYG6X
qQWqDT5Y4e9k/GtnT/nHD2YlkPC37m86+Hiz18QqXfVub/GpaEfEd0b+oQYvJHhn
lRSN0bR+s56hhPYa/PesHmL/de8Z4B+b+vA3wnh5Ic1kwt+7jzHfuVrLFw0/xvQj
zUrVgLgsBju5L2efhZyDguxhJ8UqFHMEPg2ol2HRxs11maMIjoL5wCm+uBSRXoTE
4RAblS6FCFmXEDv9iBaJ69Rm23xrXQj0lNt5itt3F5gwn45yGEIkv8+LEL2tAEiz
HT+/daX4c/G4kMtQPqyzH8KQLj1FOF0P1XnJpEaowHXfkckzi+wk
-----END CERTIFICATE-----
Generated at Fri Sep 19 17:50:43 2025 by rpki-client