Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/eb7394-9d9f-457e-b368-80973b3c0627/1/omvCiSbxGXEhWKYhV7yrIAYOUDI.roa
File: omvCiSbxGXEhWKYhV7yrIAYOUDI.roa (raw, json)
Hash identifier: k4kgxjvCMp/F7A0raOIajUVdScRBgP5O5bB2FqC6UMk=
Subject key identifier: A2:6B:C2:89:26:F1:19:71:21:58:A6:21:57:BC:AB:20:06:0E:50:32
Certificate issuer: /CN=70378e3cd8f3a59bda5233ff6e9a9c99648d7105
Certificate serial: 01999F077E956B720826856515A8426F760F
Authority key identifier: 70:37:8E:3C:D8:F3:A5:9B:DA:52:33:FF:6E:9A:9C:99:64:8D:71:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDeOPNjzpZvaUjP_bpqcmWSNcQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/eb7394-9d9f-457e-b368-80973b3c0627/1/omvCiSbxGXEhWKYhV7yrIAYOUDI.roa
Signing time: Wed 01 Oct 2025 09:08:12 +0000
ROA not before: Wed 01 Oct 2025 09:08:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216023
IP address blocks: 212.115.112.0/23 maxlen: 23
212.115.114.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/eb7394-9d9f-457e-b368-80973b3c0627/1/cDeOPNjzpZvaUjP_bpqcmWSNcQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/eb7394-9d9f-457e-b368-80973b3c0627/1/cDeOPNjzpZvaUjP_bpqcmWSNcQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDeOPNjzpZvaUjP_bpqcmWSNcQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9f:07:7e:95:6b:72:08:26:85:65:15:a8:42:6f:76:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70378e3cd8f3a59bda5233ff6e9a9c99648d7105
Validity
Not Before: Oct 1 09:08:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a26bc28926f119712158a62157bcab20060e5032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ba:ae:20:7f:ff:9d:a8:31:07:74:01:f3:ec:
31:8c:21:08:29:d0:e8:3f:04:53:c3:18:af:9f:fb:
f8:14:77:db:d7:9a:9a:8f:5a:04:5b:fb:75:09:49:
b0:d7:c4:71:f5:49:b9:92:65:31:57:61:c8:07:71:
eb:d9:bb:92:da:c9:9e:a3:27:5b:4d:2e:6a:ab:7a:
e5:8e:16:d3:0d:70:63:06:c3:1d:09:bc:91:9b:6a:
61:7b:ec:28:78:12:3d:47:05:8a:f4:ac:6d:e6:ef:
e1:3b:b6:90:83:89:bd:92:0f:7f:45:5f:bb:59:2b:
4a:cc:2b:f8:35:90:0c:82:9c:38:9a:64:86:4e:d2:
1a:57:aa:06:61:c7:a4:3a:af:f4:57:c3:1e:b9:ae:
49:f0:40:e6:4c:49:ee:c0:73:e3:07:45:7e:06:79:
eb:fa:9e:74:10:67:9b:ef:94:25:37:f1:45:55:3f:
ff:40:ab:c0:80:0e:72:17:ce:23:e0:7e:65:16:6d:
07:07:8a:8f:cb:e1:ac:36:c2:e0:6a:8b:df:bf:27:
24:93:9f:45:9e:0b:19:3c:35:e8:57:b5:ef:76:c4:
23:55:c3:f3:e2:86:97:ed:ef:40:5c:96:6e:1b:15:
c0:d5:cb:18:c1:06:56:45:4c:ad:93:98:42:c5:82:
01:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6B:C2:89:26:F1:19:71:21:58:A6:21:57:BC:AB:20:06:0E:50:32
X509v3 Authority Key Identifier:
keyid:70:37:8E:3C:D8:F3:A5:9B:DA:52:33:FF:6E:9A:9C:99:64:8D:71:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDeOPNjzpZvaUjP_bpqcmWSNcQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eb7394-9d9f-457e-b368-80973b3c0627/1/omvCiSbxGXEhWKYhV7yrIAYOUDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eb7394-9d9f-457e-b368-80973b3c0627/1/cDeOPNjzpZvaUjP_bpqcmWSNcQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.115.112.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:bc:54:8c:24:a4:92:6e:12:5e:b9:4d:83:f9:d7:fb:06:e2:
19:f5:cf:3a:e1:1d:3e:5e:bd:27:8f:01:8e:fe:a0:37:63:6f:
68:51:b3:b1:1c:f3:bb:de:70:23:fd:81:30:d5:fd:2c:ed:05:
22:72:ac:e8:08:f2:5a:09:49:34:cc:b2:83:b9:c4:68:d5:e8:
1a:2a:fd:2d:fb:1e:7a:36:f1:1a:bb:25:c5:13:08:60:04:a1:
68:2d:83:d8:94:c3:a6:00:7b:77:1c:bf:a0:ce:f9:9c:dd:2f:
22:57:eb:d5:df:04:8c:bb:cf:41:e4:d5:23:65:a6:5d:27:da:
ca:cc:e7:70:1b:d3:22:f0:56:e6:83:89:4c:67:53:43:bc:7d:
46:67:d5:e1:75:2e:45:e6:74:51:a9:7f:f2:62:22:f5:35:de:
8d:b6:35:a2:70:bb:e3:a3:4a:4e:38:69:95:60:af:58:5b:3f:
00:d6:15:f7:f6:c8:83:e5:b7:c9:9d:a8:a4:24:a8:0f:84:5f:
b5:51:15:9c:6d:e2:99:f2:46:6b:62:27:8f:9b:36:0c:0b:f5:
35:5d:31:a2:59:1d:9e:84:63:1e:e3:6f:cc:07:66:e4:e9:8b:
a0:b1:14:60:52:cc:6f:f8:21:8c:12:42:78:11:9b:d0:6f:46:
b9:ba:fa:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:32:08 2025 by rpki-client