Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/OkV10ej4i1aWkWynfHxAfefl68k.roa
File: OkV10ej4i1aWkWynfHxAfefl68k.roa (raw, json)
Hash identifier: 5dmrYmVBIjHF14pmICYPZDuHTrGireyhaa0Od9fQBWk=
Subject key identifier: 3A:45:75:D1:E8:F8:8B:56:96:91:6C:A7:7C:7C:40:7D:E7:E5:EB:C9
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01999B1F972B28212E0015971228D42705AD
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/OkV10ej4i1aWkWynfHxAfefl68k.roa
Signing time: Tue 30 Sep 2025 14:56:02 +0000
ROA not before: Tue 30 Sep 2025 14:56:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 91.194.55.0/24 maxlen: 24
185.85.188.0/24 maxlen: 24
185.85.189.0/24 maxlen: 24
185.86.4.0/24 maxlen: 24
185.86.6.0/24 maxlen: 24
185.86.7.0/24 maxlen: 24
185.86.12.0/24 maxlen: 24
185.86.14.0/24 maxlen: 24
185.86.15.0/24 maxlen: 24
185.86.152.0/24 maxlen: 24
185.86.155.0/24 maxlen: 24
185.87.120.0/24 maxlen: 24
185.88.172.0/24 maxlen: 24
185.88.173.0/24 maxlen: 24
185.88.174.0/24 maxlen: 24
185.88.175.0/24 maxlen: 24
185.98.61.0/24 maxlen: 24
185.98.62.0/24 maxlen: 24
185.98.63.0/24 maxlen: 24
185.141.33.0/24 maxlen: 24
185.141.34.0/24 maxlen: 24
185.141.35.0/24 maxlen: 24
185.184.24.0/24 maxlen: 24
185.184.25.0/24 maxlen: 24
185.184.26.0/24 maxlen: 24
185.184.27.0/24 maxlen: 24
185.185.232.0/24 maxlen: 24
185.185.233.0/24 maxlen: 24
185.185.234.0/24 maxlen: 24
185.243.180.0/24 maxlen: 24
185.243.181.0/24 maxlen: 24
185.243.182.0/24 maxlen: 24
185.243.183.0/24 maxlen: 24
185.250.210.0/24 maxlen: 24
185.254.236.0/24 maxlen: 24
185.254.237.0/24 maxlen: 24
185.254.238.0/24 maxlen: 24
185.254.239.0/24 maxlen: 24
193.160.140.0/24 maxlen: 24
193.160.141.0/24 maxlen: 24
193.160.142.0/24 maxlen: 24
193.160.143.0/24 maxlen: 24
193.223.104.0/24 maxlen: 24
193.223.105.0/24 maxlen: 24
193.223.106.0/24 maxlen: 24
193.223.107.0/24 maxlen: 24
2a05:bf00::/29 maxlen: 29
2a07:e700::/29 maxlen: 29
2a0b:2780::/29 maxlen: 29
2a0d:49c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9b:1f:97:2b:28:21:2e:00:15:97:12:28:d4:27:05:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Sep 30 14:56:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a4575d1e8f88b5696916ca77c7c407de7e5ebc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1e:3b:74:4a:a5:93:64:36:e2:e6:8d:4a:6d:
3c:74:cc:18:f2:9c:ed:74:a7:f1:78:e1:14:d8:5d:
b6:d4:a6:85:42:d7:54:b9:99:da:5b:ca:c3:58:05:
9f:0b:b2:b1:1b:c5:c6:e3:54:fe:1d:b4:df:40:fa:
c3:78:5f:e2:84:4c:7a:e9:e8:dc:f4:92:7c:9f:8f:
4d:cd:be:65:b5:7b:38:e9:9e:12:c1:02:2e:4a:b2:
47:da:d0:f2:5f:37:9d:d1:68:c8:fe:e1:5d:09:00:
f4:3e:08:67:2f:dd:ee:72:6f:ae:b2:03:22:d1:d0:
2d:97:2c:1e:c6:0f:f9:10:60:dc:57:44:cb:ba:46:
df:61:35:d9:bf:1e:49:3d:12:1e:3c:71:9a:bb:32:
67:57:24:8d:b9:a6:aa:3d:c7:8f:40:8d:32:d5:dd:
5a:58:14:f5:36:31:4f:2e:c1:f9:b9:2a:b0:40:08:
0f:d4:96:74:da:0f:f5:5f:16:af:4a:ab:5a:f9:6f:
18:92:50:43:d2:0d:f9:d7:77:a5:be:3a:79:a6:ee:
1e:af:93:21:32:be:71:12:10:5e:65:8d:70:83:11:
5c:f9:f9:6b:f7:30:22:76:ce:14:97:16:ea:1c:0a:
e9:d4:3c:19:a1:02:ae:db:a7:3b:65:a7:13:74:fb:
e5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:45:75:D1:E8:F8:8B:56:96:91:6C:A7:7C:7C:40:7D:E7:E5:EB:C9
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/OkV10ej4i1aWkWynfHxAfefl68k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.55.0/24
185.85.188.0/23
185.86.4.0/24
185.86.6.0/23
185.86.12.0/24
185.86.14.0/23
185.86.152.0/24
185.86.155.0/24
185.87.120.0/24
185.88.172.0/22
185.98.61.0-185.98.63.255
185.141.33.0-185.141.35.255
185.184.24.0/22
185.185.232.0-185.185.234.255
185.243.180.0/22
185.250.210.0/24
185.254.236.0/22
193.160.140.0/22
193.223.104.0/22
IPv6:
2a05:bf00::/29
2a07:e700::/29
2a0b:2780::/29
2a0d:49c0::/29
Signature Algorithm: sha256WithRSAEncryption
44:a8:79:27:bf:33:8c:10:6e:b0:74:d7:85:f3:10:0e:ae:8e:
6a:08:01:db:6a:ca:7e:47:cc:44:1e:5b:a5:68:99:bc:b1:53:
17:37:c7:d1:0a:ae:a6:92:42:9b:5d:69:5a:a8:e6:9a:2d:3b:
9f:d0:78:a9:a9:3d:09:2c:93:9a:63:22:a0:6a:33:2a:45:8d:
cf:b0:9c:55:d5:0e:c2:8f:c3:79:4d:33:e2:89:92:b3:c2:94:
0f:ba:25:5f:c9:32:66:28:85:c8:9b:ca:54:7a:ad:0b:d7:f3:
ab:1f:54:fd:29:3e:a3:39:9d:13:cd:b1:26:48:42:7e:36:48:
b9:c1:39:ac:d4:a0:45:cb:ad:d9:74:97:0e:3c:6e:cd:a5:b7:
ee:ae:07:54:5b:42:a8:9d:13:e4:93:6d:4b:8a:ce:5d:f7:41:
78:06:e4:a9:0c:49:0b:7f:c4:79:cc:0f:2c:8c:75:50:9d:9d:
04:dd:0b:da:64:b9:a7:e1:f5:a2:41:ad:58:48:0a:5c:32:fa:
25:f1:71:ec:6f:fe:27:54:ba:2f:c8:d0:7f:a9:8f:ff:b9:a8:
a3:75:14:d3:64:6a:7a:dd:fe:97:c7:00:58:ea:01:3b:ca:41:
0c:0c:4e:f0:a8:06:2a:2d:e9:20:22:e7:e4:6e:5b:17:0b:44:
4a:19:bc:c1
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgISAZmbH5crKCEuABWXEijUJwWtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjUwOTMwMTQ1NjAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTQ1NzVkMWU4Zjg4YjU2OTY5MTZjYTc3YzdjNDA3ZGU3ZTVlYmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3B47dEqlk2Q24uaNSm08dMwY8pzt
dKfxeOEU2F221KaFQtdUuZnaW8rDWAWfC7KxG8XG41T+HbTfQPrDeF/ihEx66ejc
9JJ8n49Nzb5ltXs46Z4SwQIuSrJH2tDyXzed0WjI/uFdCQD0PghnL93ucm+usgMi
0dAtlywexg/5EGDcV0TLukbfYTXZvx5JPRIePHGauzJnVySNuaaqPcePQI0y1d1a
WBT1NjFPLsH5uSqwQAgP1JZ02g/1XxavSqta+W8YklBD0g3513elvjp5pu4er5Mh
Mr5xEhBeZY1wgxFc+flr9zAids4UlxbqHArp1DwZoQKu26c7ZacTdPvl3wIDAQAB
o4ICtjCCArIwHQYDVR0OBBYEFDpFddHo+ItWlpFsp3x8QH3n5evJMB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEvT2tWMTBlajRpMWFXa1d5bmZIeEFmZWZsNjhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHLBggrBgEFBQcBBwEB/wSBuzCBuDCBkQQCAAEwgYoDBABb
wjcDBAG5VbwDBAC5VgQDBAG5VgYDBAC5VgwDBAG5Vg4DBAC5VpgDBAC5VpsDBAC5
V3gDBAK5WKwwDAMEALliPQMEBrliADAMAwQAuY0hAwQCuY0gAwQCubgYMAwDBAO5
uegDBAC5ueoDBAK587QDBAC5+tIDBAK5/uwDBALBoIwDBALB32gwIgQCAAIwHAMF
AyoFvwADBQMqB+cAAwUDKgsngAMFAyoNScAwDQYJKoZIhvcNAQELBQADggEBAESo
eSe/M4wQbrB014XzEA6ujmoIAdtqyn5HzEQeW6VombyxUxc3x9EKrqaSQptdaVqo
5potO5/QeKmpPQksk5pjIqBqMypFjc+wnFXVDsKPw3lNM+KJkrPClA+6JV/JMmYo
hcibylR6rQvX86sfVP0pPqM5nRPNsSZIQn42SLnBOazUoEXLrdl0lw48bs2lt+6u
B1RbQqidE+STbUuKzl33QXgG5KkMSQt/xHnMDyyMdVCdnQTdC9pkuafh9aJBrVhI
Clwy+iXxcexv/idUui/I0H+pj/+5qKN1FNNkanrd/pfHAFjqATvKQQwMTvCoBiot
6SAi5+RuWxcLREoZvME=
-----END CERTIFICATE-----
Generated at Sun Oct 19 09:42:12 2025 by rpki-client