Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/okruFnISD7EQct_wZyVK7OoF9f0.roa
File: okruFnISD7EQct_wZyVK7OoF9f0.roa (raw, json)
Hash identifier: 5T5bG/5gLaCSh85KXs6MCMnso65+wJtcow/zA4Y2km4=
Subject key identifier: A2:4A:EE:16:72:12:0F:B1:10:72:DF:F0:67:25:4A:EC:EA:05:F5:FD
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0198A827EB493F745AD6CD0D61648F186EF9
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/okruFnISD7EQct_wZyVK7OoF9f0.roa
Signing time: Thu 14 Aug 2025 10:37:25 +0000
ROA not before: Thu 14 Aug 2025 10:37:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 89.35.119.0/24 maxlen: 24
94.177.145.0/24 maxlen: 24
103.56.84.0/24 maxlen: 24
167.17.176.0/24 maxlen: 24
167.17.177.0/24 maxlen: 24
167.17.178.0/24 maxlen: 24
167.17.182.0/24 maxlen: 24
167.17.191.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
188.213.0.0/24 maxlen: 24
188.214.107.0/24 maxlen: 24
193.124.225.0/24 maxlen: 24
194.85.249.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
202.71.12.0/24 maxlen: 24
202.71.13.0/24 maxlen: 24
202.71.15.0/24 maxlen: 24
204.77.1.0/24 maxlen: 24
206.245.129.0/24 maxlen: 24
206.245.131.0/24 maxlen: 24
208.123.185.0/24 maxlen: 24
208.123.190.0/24 maxlen: 24
212.192.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a8:27:eb:49:3f:74:5a:d6:cd:0d:61:64:8f:18:6e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 14 10:37:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a24aee1672120fb11072dff067254aecea05f5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:31:c2:b9:99:2d:0c:16:33:e6:39:03:83:17:
56:51:65:bb:3b:53:0f:5c:ef:4c:9f:56:26:aa:1f:
b6:5d:8c:ed:f8:c8:80:16:14:ec:3a:5b:bc:b8:f1:
8c:3d:e5:28:09:74:f5:6b:0d:cf:9a:2a:76:7d:31:
bb:66:cf:a3:cf:e2:3e:80:97:56:59:68:f2:4e:6a:
71:04:20:8d:0a:f3:a6:15:32:b6:5f:dc:6d:97:71:
02:e0:b3:df:3f:22:f0:95:fc:83:b7:a5:88:7d:96:
27:a6:25:48:27:e1:fa:99:bd:29:fa:67:4b:c2:3f:
4d:af:a9:c9:07:fa:9b:36:9d:1e:c2:96:52:e8:b6:
8d:c7:17:4e:3d:ac:4a:20:06:c4:a3:52:a9:9a:78:
9c:60:c5:ed:7c:31:56:b3:4b:b1:08:5b:9a:65:06:
1a:b0:0a:3e:fe:6d:a9:21:da:4a:08:e6:18:f1:3f:
92:2e:b4:7e:0d:66:cd:38:95:41:76:13:dc:3d:e3:
41:bb:4d:43:a4:14:10:e1:af:e0:f2:af:09:86:ba:
7c:11:b6:07:20:33:ea:95:b3:64:a8:03:f0:89:5e:
89:20:e0:8c:bb:87:28:7d:38:fb:97:24:37:7d:94:
15:1b:1e:5e:e0:9c:e1:1e:91:0b:ec:29:47:70:ce:
00:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4A:EE:16:72:12:0F:B1:10:72:DF:F0:67:25:4A:EC:EA:05:F5:FD
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/okruFnISD7EQct_wZyVK7OoF9f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.119.0/24
94.177.145.0/24
103.56.84.0/24
167.17.176.0-167.17.178.255
167.17.182.0/24
167.17.191.0/24
188.208.103.0/24
188.213.0.0/24
188.214.107.0/24
193.124.225.0/24
194.85.249.0/24
194.85.251.0/24
202.71.12.0/23
202.71.15.0/24
204.77.1.0/24
206.245.129.0/24
206.245.131.0/24
208.123.185.0/24
208.123.190.0/24
212.192.212.0/24
Signature Algorithm: sha256WithRSAEncryption
10:e1:5b:55:ec:6b:22:bb:0a:7c:42:5f:0a:6d:80:16:ec:d9:
be:12:33:a7:c2:5e:bd:85:95:23:45:e8:e2:e9:f3:a2:02:f8:
61:d4:2c:fa:40:3d:d7:ee:2b:b1:78:05:cd:78:dc:76:64:48:
62:49:1c:42:46:3b:5f:58:81:12:1a:23:07:e0:23:b4:3d:9e:
06:07:c2:bd:da:20:24:8a:cf:d8:75:ef:d4:26:56:ce:b8:e3:
f1:f5:fa:fe:22:95:34:6a:bd:37:10:dc:87:01:f8:e5:08:33:
f7:0c:9f:33:46:a7:77:31:c1:34:13:de:ec:54:61:34:e7:60:
41:b0:ad:6a:8c:53:46:13:b7:5f:08:ab:89:e7:d8:d4:d6:0b:
7a:23:61:86:c8:7a:67:8f:87:9f:d4:c3:40:8e:05:c3:9c:c2:
d5:a8:6e:e4:a6:e5:77:68:1f:8f:04:f2:a4:1d:a5:b4:5d:cd:
e9:7a:05:ae:09:0f:5c:b2:57:53:42:9e:15:71:11:f3:1c:e9:
84:a7:d9:32:e1:4c:13:36:59:dd:b7:2b:eb:65:8a:14:1e:ce:
86:13:eb:2f:d6:16:aa:f5:58:a1:12:74:b2:f7:bb:4b:e8:e1:
a1:f8:48:50:b6:85:51:f0:90:6d:d8:c9:f6:18:d1:49:ef:2f:
8f:32:ed:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:57:23 2025 by rpki-client