Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/ObpPyrV6nY3VTY_MJsA9gywrfek.roa
File: ObpPyrV6nY3VTY_MJsA9gywrfek.roa (raw, json)
Hash identifier: 07jwwjcg4kll9zheibcZqtF5uLcKvWgF1fQLeGthDhs=
Subject key identifier: 39:BA:4F:CA:B5:7A:9D:8D:D5:4D:8F:CC:26:C0:3D:83:2C:2B:7D:E9
Certificate issuer: /CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
Certificate serial: 01993CCBD6018B2414A52D75F4794FD4A1C8
Authority key identifier: 33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/ObpPyrV6nY3VTY_MJsA9gywrfek.roa
Signing time: Fri 12 Sep 2025 07:20:15 +0000
ROA not before: Fri 12 Sep 2025 07:20:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207464
IP address blocks: 62.241.32.0/20 maxlen: 22
85.113.72.0/21 maxlen: 24
109.72.160.0/20 maxlen: 24
147.161.16.0/22 maxlen: 23
185.36.212.0/22 maxlen: 23
185.135.134.0/23 maxlen: 23
185.154.16.0/22 maxlen: 23
2a00:f0a0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3c:cb:d6:01:8b:24:14:a5:2d:75:f4:79:4f:d4:a1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
Validity
Not Before: Sep 12 07:20:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39ba4fcab57a9d8dd54d8fcc26c03d832c2b7de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8f:29:97:90:96:5a:30:51:30:63:e7:e5:32:
ff:12:9d:b5:d4:bd:d4:e9:56:63:a4:24:6d:9c:59:
20:87:fa:cb:72:fe:b0:66:20:ad:92:a4:2f:9d:95:
0d:97:4d:bd:b9:7c:50:4e:dd:a9:65:76:e6:4f:ca:
0d:60:8b:1b:d7:f6:99:28:d5:f6:e2:c3:fb:04:eb:
52:09:6f:f2:2f:66:0c:1b:7c:fe:ed:09:8d:9f:e5:
e0:cd:f5:7c:11:1b:02:52:a2:0f:7f:f0:bf:97:e2:
a4:d5:80:25:ef:64:09:8c:b1:29:3b:cd:e4:f5:2a:
a7:94:4f:1a:25:23:4f:ee:39:59:e8:76:6d:5a:2b:
0b:ff:b0:70:b6:75:18:c4:88:48:83:93:52:cb:d0:
0f:4a:25:82:d7:d9:cc:fb:15:3e:e8:dd:15:e5:ed:
d9:02:e0:44:2b:fc:8d:1f:2d:3b:42:c4:70:63:4a:
6b:ff:94:e8:5a:9f:0b:e4:4c:47:b4:77:e2:21:7b:
5c:ec:df:1b:b7:cd:9f:c9:8f:5b:60:f8:3e:b7:00:
88:eb:26:5b:51:e1:fc:86:da:01:40:d6:02:57:69:
40:9a:67:50:40:de:8b:a3:c9:5e:01:26:4f:09:ea:
56:3a:b6:5c:e6:87:88:23:6f:e7:ea:28:3e:b1:7c:
15:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BA:4F:CA:B5:7A:9D:8D:D5:4D:8F:CC:26:C0:3D:83:2C:2B:7D:E9
X509v3 Authority Key Identifier:
keyid:33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/ObpPyrV6nY3VTY_MJsA9gywrfek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.241.32.0/20
85.113.72.0/21
109.72.160.0/20
147.161.16.0/22
185.36.212.0/22
185.135.134.0/23
185.154.16.0/22
IPv6:
2a00:f0a0::/29
Signature Algorithm: sha256WithRSAEncryption
4c:6f:8d:d1:90:7e:ec:f0:26:08:ab:7f:f5:1a:13:77:18:de:
78:66:32:38:f5:0a:aa:d4:e3:0f:6f:52:72:32:4f:3e:5f:77:
3a:3c:44:28:2b:6a:d8:10:a1:fc:bb:4f:1f:a7:6f:58:ff:c9:
b1:62:76:b1:f5:14:01:03:93:ea:6d:fa:c6:fa:54:8c:19:0d:
c9:de:fe:cc:6c:d1:a5:10:32:74:b1:4a:1c:b2:bc:f0:56:1a:
4c:9a:85:43:5b:6e:eb:80:2e:54:82:b9:d3:25:75:c6:ae:e3:
71:6b:a1:28:6c:3d:5b:7d:75:b2:25:97:33:7f:b3:50:4a:78:
21:e2:34:b8:91:6d:a6:f5:2d:3e:87:50:28:bc:f3:ea:0a:d2:
55:bb:f8:21:f9:f1:d7:de:be:6c:97:e8:e1:3c:0d:c3:7a:cd:
36:2e:e8:31:3a:aa:01:2b:77:3d:c7:ce:99:9e:5b:12:a3:c9:
b2:d5:dd:ab:af:8c:c7:71:04:a4:f1:8c:0c:fc:59:fd:3c:54:
c3:1f:6f:71:6b:2e:eb:3f:55:cc:1c:84:c3:f0:d2:ea:ee:7f:
ba:ed:9e:8f:fa:58:a7:6d:d7:d9:35:5c:4f:3e:15:d8:bd:19:
fe:27:49:22:fa:c2:9d:f0:bb:ff:d4:eb:c5:29:e5:fa:f0:df:
2e:18:c1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 00:17:55 2025 by rpki-client