Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/oZha6b5w9clZtNXo-zdOnTB4ZH4.roa
File: oZha6b5w9clZtNXo-zdOnTB4ZH4.roa (raw, json)
Hash identifier: eJd4ltM6RY/dDJSxWZcaSV6+RgrT6iyc6q41HyI/IVc=
Subject key identifier: A1:98:5A:E9:BE:70:F5:C9:59:B4:D5:E8:FB:37:4E:9D:30:78:64:7E
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 0199090B8F0DF7A4F10F2DB03DC3A843CEDA
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/oZha6b5w9clZtNXo-zdOnTB4ZH4.roa
Signing time: Tue 02 Sep 2025 06:09:36 +0000
ROA not before: Tue 02 Sep 2025 06:09:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 91.200.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:09:0b:8f:0d:f7:a4:f1:0f:2d:b0:3d:c3:a8:43:ce:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: Sep 2 06:09:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1985ae9be70f5c959b4d5e8fb374e9d3078647e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9c:bf:7a:51:44:be:bf:d0:1e:dd:ef:81:4b:
c8:03:9a:ee:4e:c1:2d:a5:e7:f1:83:87:4f:5e:5b:
54:01:e1:50:c7:47:91:b3:f1:97:85:db:4d:7d:fd:
bc:33:63:b9:6e:c1:dd:1a:d6:30:8f:5b:f4:c6:3d:
02:1a:f8:4d:f3:fc:19:33:49:08:3d:60:9c:f5:2f:
cd:be:67:21:55:4a:4e:30:24:c9:2c:bd:71:a7:49:
32:bf:39:41:c7:de:f9:1e:33:d3:f4:4a:69:f7:fe:
65:19:66:19:1b:10:25:12:42:e1:f4:0b:56:d6:36:
f7:2e:5b:a2:a5:32:98:59:b4:75:36:cb:7f:80:77:
31:ac:58:50:f7:0a:f9:b4:2e:27:18:6e:31:01:72:
4b:57:c0:8c:e7:ad:3b:f5:75:b1:5c:02:a0:4d:2f:
ca:57:71:f6:a4:2d:05:c0:d0:57:67:a5:63:2e:5b:
6d:df:35:02:37:cc:78:af:19:67:12:24:f6:9a:17:
01:43:70:5d:40:3b:cb:d9:57:a1:0a:81:1c:1b:33:
35:a1:dc:f2:43:2d:45:3d:92:e2:64:0f:59:10:4e:
2e:5d:1b:e7:02:81:62:af:b0:8d:41:d6:c3:3d:af:
3a:cf:77:e3:85:d7:6e:f2:7b:b6:8a:98:be:e4:ca:
62:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:98:5A:E9:BE:70:F5:C9:59:B4:D5:E8:FB:37:4E:9D:30:78:64:7E
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/oZha6b5w9clZtNXo-zdOnTB4ZH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.253.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:8a:17:d0:22:81:37:9f:f2:13:07:8c:d1:68:a3:8a:5d:c6:
55:67:51:75:d4:3c:ec:91:8f:4d:e8:dd:58:e7:84:f2:f0:7a:
2d:26:99:d8:71:45:3e:4c:f9:b1:f0:8f:aa:b7:30:69:a5:7e:
6c:ab:b2:cb:3b:56:8e:14:72:ba:8a:bf:4a:71:4e:98:96:9a:
66:9f:1d:e5:72:47:64:92:93:65:f3:4f:ba:87:bb:f9:d0:30:
5f:3e:f7:71:fb:6b:9f:b6:2a:96:af:1a:d9:c8:4f:c9:0f:06:
d5:ea:1b:12:76:cf:bc:55:7c:4e:b6:5b:d9:bc:85:45:5b:d1:
da:15:88:6b:c9:31:e3:52:76:53:db:dd:1e:57:4c:eb:e1:b7:
04:19:89:c3:c6:62:32:ca:d2:3f:ac:fb:4a:d8:b3:e3:b9:4b:
fb:47:cf:b5:29:69:a6:6f:08:f9:2e:fd:07:e7:93:56:ae:6d:
d4:2e:bc:38:fb:72:f4:8a:8a:dc:a9:ac:e8:5f:9f:a6:6a:f5:
79:57:4a:12:62:e9:2c:1f:62:20:d3:aa:61:f5:63:bc:44:80:
ec:d6:83:ad:4f:a5:2e:72:23:a4:d5:25:20:ce:de:3e:a9:f7:
46:c9:d5:8f:3a:96:d2:62:b1:80:1f:05:a9:6e:ba:c9:fe:39:
28:72:04:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 10:05:49 2025 by rpki-client