Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/ocQ6hkGGlpLFqJevmWMP4yG9kcg.roa
File: ocQ6hkGGlpLFqJevmWMP4yG9kcg.roa (raw, json)
Hash identifier: V2gAUafgNGkT92VkWusvaTxnq34wT53AXCaLQN/T3EY=
Subject key identifier: A1:C4:3A:86:41:86:96:92:C5:A8:97:AF:99:63:0F:E3:21:BD:91:C8
Certificate issuer: /CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Certificate serial: 019931DF0096E5878F4E9156CE4C6F461918
Authority key identifier: 3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/ocQ6hkGGlpLFqJevmWMP4yG9kcg.roa
Signing time: Wed 10 Sep 2025 04:25:22 +0000
ROA not before: Wed 10 Sep 2025 04:25:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25019
IP address blocks: 159.0.0.0/16 maxlen: 16
159.0.0.0/20 maxlen: 20
159.0.16.0/20 maxlen: 20
159.0.32.0/20 maxlen: 20
159.0.48.0/20 maxlen: 20
159.0.64.0/20 maxlen: 20
159.0.80.0/20 maxlen: 20
159.0.96.0/20 maxlen: 20
159.0.112.0/20 maxlen: 20
159.0.160.0/20 maxlen: 20
159.0.192.0/20 maxlen: 20
159.0.208.0/20 maxlen: 20
159.0.224.0/20 maxlen: 20
159.0.240.0/20 maxlen: 20
185.139.8.0/22 maxlen: 22
212.215.128.0/17 maxlen: 17
212.215.128.0/18 maxlen: 18
212.215.137.0/24 maxlen: 24
212.215.160.0/20 maxlen: 20
212.215.240.0/22 maxlen: 22
212.215.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:df:00:96:e5:87:8f:4e:91:56:ce:4c:6f:46:19:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Validity
Not Before: Sep 10 04:25:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1c43a8641869692c5a897af99630fe321bd91c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:00:42:5e:92:ba:8c:66:0c:96:79:d2:8b:5b:
3f:89:e3:0c:cf:a2:ab:be:15:dd:fe:ed:03:ac:f2:
63:f5:36:f2:42:97:da:ae:8c:8b:04:0e:37:c7:95:
0a:63:e5:d1:ca:da:91:8c:1f:65:cb:2b:83:23:b2:
4f:a5:95:68:3d:0c:56:52:f1:79:aa:f4:46:57:b5:
14:0e:e1:08:7f:d3:e9:19:cb:25:08:e7:7d:31:05:
ae:d0:33:59:7c:82:a8:a0:15:63:d4:c0:aa:87:71:
e4:4c:98:4b:de:d9:01:ee:e6:ef:86:6b:50:6e:6d:
13:59:0c:0b:20:69:67:38:ca:8d:48:e0:04:c0:e6:
2e:21:d6:76:ed:dc:b5:62:aa:60:6c:68:5c:23:b9:
f1:95:52:23:24:3b:1f:59:c1:fe:cd:d7:95:df:34:
b5:f2:4a:dd:73:5a:61:2f:25:cc:1c:26:91:e4:38:
50:b4:3f:03:1d:13:7c:09:18:3a:48:62:1d:bd:b3:
6f:8c:7f:8a:1c:1e:b5:16:63:35:01:70:20:f8:a6:
ba:0d:53:9f:55:e6:56:a3:14:27:24:14:e0:d5:4a:
8e:0b:4f:d5:a0:a4:37:12:f8:89:a5:7d:9d:89:08:
63:9c:4c:e8:bc:ca:2a:7c:db:3a:5e:31:88:25:9e:
21:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C4:3A:86:41:86:96:92:C5:A8:97:AF:99:63:0F:E3:21:BD:91:C8
X509v3 Authority Key Identifier:
keyid:3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/ocQ6hkGGlpLFqJevmWMP4yG9kcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.0.0.0/16
185.139.8.0/22
212.215.128.0/17
Signature Algorithm: sha256WithRSAEncryption
71:8b:30:3f:bd:4a:76:81:ff:a1:1b:25:4d:09:d3:cd:22:51:
ce:e3:25:85:11:4d:83:44:a0:4c:08:80:00:ba:20:f5:5c:70:
e9:5f:77:04:41:33:e3:52:9d:53:4d:f0:73:1a:88:71:7a:ba:
d5:0a:96:ed:35:f2:14:3d:23:ef:c0:8a:b7:d0:4c:63:78:4f:
76:e7:2c:e2:46:59:eb:12:35:01:ad:28:fb:1a:09:67:64:65:
8d:e2:47:da:7d:0a:cf:3a:83:a7:ff:1f:be:5e:74:d4:c3:63:
b0:84:20:e0:57:6a:7a:a6:92:4b:df:2b:32:16:33:9d:6a:d3:
e0:6e:62:16:ce:ca:4b:db:96:b1:ad:65:09:8f:4a:fb:06:f8:
57:63:36:18:62:07:66:76:79:c8:b7:45:43:94:8c:ce:d7:4e:
16:ad:ca:b8:55:50:d9:dc:c8:14:fe:a7:e1:1c:46:41:8b:03:
ce:43:03:c3:68:7a:d5:f0:66:cf:23:65:59:6b:68:e2:18:d0:
18:af:e3:a0:e2:00:d4:e2:01:b3:74:8d:3b:d3:c6:c6:ac:69:
c1:68:72:c9:ad:90:57:18:90:ed:1c:48:79:a7:c9:8b:4e:89:
55:86:cb:c6:df:32:a6:ca:52:b6:89:55:b9:ed:06:52:15:2b:
5b:90:5f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 03:02:31 2025 by rpki-client