Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/oszO5cRy_bT24vbGygYagfAt25M.roa
File: oszO5cRy_bT24vbGygYagfAt25M.roa (raw, json)
Hash identifier: jZ3tdldk6JjFlin4RDbE9w6pyZh5JE76rT/riu50Cpw=
Subject key identifier: A2:CC:CE:E5:C4:72:FD:B4:F6:E2:F6:C6:CA:06:1A:81:F0:2D:DB:93
Certificate issuer: /CN=fb434b32b9fbe3de95bc771d6d2b3c79aa014bf5
Certificate serial: 019A55010AF56DC89E8DEC49FC9103EF3F61
Authority key identifier: FB:43:4B:32:B9:FB:E3:DE:95:BC:77:1D:6D:2B:3C:79:AA:01:4B:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0NLMrn7496VvHcdbSs8eaoBS_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/oszO5cRy_bT24vbGygYagfAt25M.roa
Signing time: Wed 05 Nov 2025 17:12:02 +0000
ROA not before: Wed 05 Nov 2025 17:12:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49573
IP address blocks: 185.211.188.0/22 maxlen: 22
2a0b:6940::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-0NLMrn7496VvHcdbSs8eaoBS_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:01:0a:f5:6d:c8:9e:8d:ec:49:fc:91:03:ef:3f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb434b32b9fbe3de95bc771d6d2b3c79aa014bf5
Validity
Not Before: Nov 5 17:12:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2cccee5c472fdb4f6e2f6c6ca061a81f02ddb93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f0:72:86:80:27:64:a8:e6:26:31:2b:73:75:
9c:65:ef:42:e5:32:95:6f:84:48:66:8c:1e:40:02:
97:b8:ee:88:3d:17:d4:0a:81:73:93:43:f7:af:80:
a4:2e:3d:0c:53:d2:e0:0d:2d:0c:16:9f:e4:5b:5d:
00:48:8e:e7:9b:79:fe:77:ad:eb:f4:db:37:ac:6c:
74:2d:95:f3:99:22:74:44:45:b3:90:99:c7:29:05:
1d:d1:08:86:c0:a9:42:d6:ee:2b:64:d8:dd:57:5f:
56:66:29:b4:57:aa:94:fd:21:8c:1e:f0:22:35:3a:
ba:28:0d:96:f4:d1:2d:7b:8a:f6:62:19:ff:67:79:
13:41:3e:ee:f6:20:2f:9c:6f:10:17:88:e9:1f:bc:
8c:ba:02:fd:25:47:27:1e:3b:5c:d7:9c:4b:cb:21:
93:81:2e:59:f2:bb:df:64:0d:32:43:5e:f7:0b:f9:
95:13:55:58:85:ed:04:3c:64:23:5e:3d:c1:ed:ab:
21:80:3b:37:60:d1:8c:5d:69:e9:84:34:e1:75:e3:
df:24:a7:e9:ef:14:68:73:88:ee:6f:00:9d:c8:6a:
e8:ea:92:7a:aa:ea:a2:45:7b:83:49:cb:0d:6c:cc:
bc:cd:a7:cd:11:b6:31:2e:b2:f2:d9:0e:1d:7e:48:
ce:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CC:CE:E5:C4:72:FD:B4:F6:E2:F6:C6:CA:06:1A:81:F0:2D:DB:93
X509v3 Authority Key Identifier:
keyid:FB:43:4B:32:B9:FB:E3:DE:95:BC:77:1D:6D:2B:3C:79:AA:01:4B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0NLMrn7496VvHcdbSs8eaoBS_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/oszO5cRy_bT24vbGygYagfAt25M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.188.0/22
IPv6:
2a0b:6940::/29
Signature Algorithm: sha256WithRSAEncryption
74:24:3d:7e:17:4d:ec:44:a7:5f:3f:30:8a:ec:9d:a0:81:eb:
dd:b7:92:eb:37:c0:1c:c8:02:17:5f:bc:d2:9e:03:29:46:34:
09:b5:20:1e:03:51:96:21:78:5e:7e:3d:af:a1:55:a9:b8:50:
e1:48:c9:f8:3f:bc:99:46:3c:7e:bd:57:b8:40:b9:63:4a:46:
ec:a8:91:e7:7d:3b:28:e1:1a:16:f0:4f:62:a1:64:95:14:52:
ed:7f:8c:8e:82:81:ad:ec:7c:10:9a:4a:89:8d:a7:fd:17:5a:
cb:be:24:21:fe:e2:12:b8:65:e8:89:ae:80:30:9e:4d:63:32:
c5:15:cc:b9:93:38:4d:9b:e9:a8:40:67:dd:e2:e5:f1:8d:99:
c4:e0:60:8b:19:30:f3:73:7e:8b:af:4a:10:1f:b0:bb:74:43:
9e:d8:c8:ef:9a:fd:d9:ca:f9:45:de:e7:52:80:dc:2b:6b:13:
4c:b4:05:fc:d0:a8:c9:df:bf:6d:95:6b:ff:af:a6:68:29:c5:
14:3a:30:f5:ad:85:0e:0f:c0:8a:78:ec:77:f2:22:14:fb:79:
2c:17:70:72:81:64:93:57:76:e2:be:3f:9f:ec:1a:16:e5:a9:
d3:c3:14:14:aa:48:63:90:db:9e:27:f6:49:24:95:75:c8:90:
0d:1f:88:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:16:15 2025 by rpki-client