Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/oFP6X1Pf78VGMK8HY0EDx01ApW0.roa
File: oFP6X1Pf78VGMK8HY0EDx01ApW0.roa (raw, json)
Hash identifier: lDBxCCacRhN6uDAJG81pMtyRTm9VBKmLlVEk7CNfFXw=
Subject key identifier: A0:53:FA:5F:53:DF:EF:C5:46:30:AF:07:63:41:03:C7:4D:40:A5:6D
Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial: 0198E69E33AD44E4A2876B9C3588F96F1DDA
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/oFP6X1Pf78VGMK8HY0EDx01ApW0.roa
Signing time: Tue 26 Aug 2025 13:43:04 +0000
ROA not before: Tue 26 Aug 2025 13:43:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 84.239.5.0/24 maxlen: 24
84.239.6.0/24 maxlen: 24
84.239.7.0/24 maxlen: 24
84.239.10.0/24 maxlen: 24
84.239.12.0/24 maxlen: 24
84.239.16.0/24 maxlen: 24
84.239.17.0/24 maxlen: 24
84.239.25.0/24 maxlen: 24
84.239.27.0/24 maxlen: 24
84.239.28.0/24 maxlen: 24
84.239.31.0/24 maxlen: 24
84.239.33.0/24 maxlen: 24
84.239.37.0/24 maxlen: 24
84.239.41.0/24 maxlen: 24
84.239.42.0/24 maxlen: 24
84.239.43.0/24 maxlen: 24
84.239.45.0/24 maxlen: 24
84.239.47.0/24 maxlen: 24
84.239.48.0/24 maxlen: 24
84.239.50.0/24 maxlen: 24
84.239.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e6:9e:33:ad:44:e4:a2:87:6b:9c:35:88:f9:6f:1d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
Validity
Not Before: Aug 26 13:43:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a053fa5f53dfefc54630af07634103c74d40a56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ce:02:75:22:67:22:c9:29:d5:3f:60:2d:a3:
b5:59:d0:29:6e:9c:32:db:d2:dc:eb:86:c2:10:bc:
2d:dc:76:4b:51:bd:ea:42:d4:b0:03:45:d1:d5:0c:
76:87:54:89:52:3f:4d:da:83:ab:4b:6a:2a:46:01:
bf:87:74:91:7f:d8:78:b3:7c:d9:cc:5d:8d:f9:a5:
10:ce:1e:bd:91:c7:7b:f4:75:29:89:aa:75:38:0b:
79:6b:23:a0:d6:c3:19:e4:85:ca:11:ff:14:3d:24:
a8:1c:72:31:6c:75:54:23:f2:78:e4:0b:0a:30:d8:
d6:c2:8e:ca:cf:6f:b2:b7:07:89:97:11:4f:e6:c7:
2f:30:7b:48:a6:67:45:05:35:91:53:c0:37:2b:2b:
d3:b6:bc:32:e2:1f:cb:3e:1b:82:e8:02:92:5f:81:
b7:19:67:5b:b9:66:fb:58:4a:22:82:30:cb:fc:de:
9f:50:a8:07:e9:cc:d3:5a:6b:44:58:a5:8e:b7:e9:
bc:e4:73:11:1f:a4:dd:b9:49:f0:e9:81:1c:55:cb:
98:40:fd:09:14:ca:ce:53:93:7c:2d:3b:5f:d0:5f:
71:2d:59:cb:20:e2:01:47:a1:92:b6:91:08:b8:95:
d8:3c:bb:35:ab:7b:6d:16:73:0a:4a:3e:c9:88:b4:
32:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:53:FA:5F:53:DF:EF:C5:46:30:AF:07:63:41:03:C7:4D:40:A5:6D
X509v3 Authority Key Identifier:
keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/oFP6X1Pf78VGMK8HY0EDx01ApW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.239.5.0-84.239.7.255
84.239.10.0/24
84.239.12.0/24
84.239.16.0/23
84.239.25.0/24
84.239.27.0-84.239.28.255
84.239.31.0/24
84.239.33.0/24
84.239.37.0/24
84.239.41.0-84.239.43.255
84.239.45.0/24
84.239.47.0-84.239.48.255
84.239.50.0/24
84.239.52.0/24
Signature Algorithm: sha256WithRSAEncryption
32:a8:bc:42:45:f2:c4:92:c7:8b:95:8c:08:1b:3f:8c:70:aa:
b1:a3:f3:f4:a4:a0:2c:39:15:cf:51:a1:49:25:b3:78:d6:a5:
22:f4:f1:78:77:fe:5b:39:9b:4e:35:84:ee:8a:56:26:48:fa:
9b:fb:16:1a:bd:af:e2:88:af:29:28:30:b5:28:16:0d:50:32:
b8:df:6b:31:67:0b:ee:71:41:5e:ea:51:da:29:5b:29:5a:90:
5e:31:45:e3:ef:94:75:44:dd:d1:e3:24:5c:8c:a2:4e:81:82:
3b:12:96:fa:3c:f8:44:8b:ce:fe:2d:49:ba:1b:86:ee:1e:8b:
2c:83:34:27:56:3f:8e:bd:47:7b:fd:1b:63:47:fd:58:c2:d2:
f9:d9:66:f4:14:fb:3f:e9:96:e6:d1:a8:8b:90:b8:65:24:df:
3f:c9:ae:6e:8f:17:53:b5:6c:11:4e:46:85:55:c3:ae:de:0a:
cb:1b:74:12:05:cb:83:40:dd:32:5f:bc:f5:a8:71:d1:57:3c:
63:fa:1b:88:32:84:b5:49:3c:5c:e3:bf:fb:43:0d:ad:26:12:
15:98:a4:20:bd:43:ed:bd:0a:1c:9e:7c:5b:16:9a:2c:cb:91:
af:55:7a:a9:a4:29:16:66:18:f9:7e:35:2c:50:50:1f:6f:c5:
02:97:39:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:55:29 2025 by rpki-client