Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/oy0RBpjxSP0ql4h1ibz07-__E2o.roa
File: oy0RBpjxSP0ql4h1ibz07-__E2o.roa (raw, json)
Hash identifier: 6Cxc3dZHUVoSuUtM1kMTedY7LGErQxmK7dXJEhw/5Uc=
Subject key identifier: A3:2D:11:06:98:F1:48:FD:2A:97:88:75:89:BC:F4:EF:EF:FF:13:6A
Certificate issuer: /CN=ffb2627672877d0f6de9bc4e7e186eedd1356110
Certificate serial: 0197AD435D6AA8BD41C60DE71EA9D73684FC
Authority key identifier: FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/oy0RBpjxSP0ql4h1ibz07-__E2o.roa
Signing time: Thu 26 Jun 2025 17:22:42 +0000
ROA not before: Thu 26 Jun 2025 17:22:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213861
IP address blocks: 185.147.124.0/24 maxlen: 24
185.147.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ad:43:5d:6a:a8:bd:41:c6:0d:e7:1e:a9:d7:36:84:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb2627672877d0f6de9bc4e7e186eedd1356110
Validity
Not Before: Jun 26 17:22:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a32d110698f148fd2a97887589bcf4efefff136a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b8:15:8a:13:04:e1:2a:3c:0b:3a:53:28:bb:
6e:85:13:69:aa:d4:20:82:bf:26:16:5e:10:d6:d4:
0d:73:05:62:0c:34:78:64:8e:75:99:65:28:ae:50:
bb:a1:91:d0:c7:ba:5f:b2:91:cf:23:75:c5:2e:3b:
92:45:45:83:ba:42:77:db:26:0f:75:ed:89:3e:12:
b2:ce:55:73:86:58:c0:ed:b3:e8:0c:81:88:de:71:
4f:6b:79:ad:ef:cc:9e:32:9c:6f:55:4e:20:0d:ab:
22:73:20:cf:c4:40:bb:27:68:7c:88:79:42:67:c9:
30:19:d1:43:af:72:1b:89:8d:13:5f:e4:ef:3e:73:
1c:32:4f:a0:8e:dc:d5:59:f5:32:f7:d3:38:1a:56:
db:c9:51:73:d3:c6:77:79:bd:e4:34:30:8d:2f:8e:
95:52:92:41:f5:5e:be:93:15:d4:24:dd:6f:a4:86:
fc:fc:79:fa:22:37:1e:68:00:8b:8f:d7:09:fd:fe:
22:b7:59:d8:9d:10:ae:49:8f:29:09:10:66:07:75:
76:03:8e:ac:88:40:cc:e0:76:98:21:07:d9:3a:5a:
43:d4:7f:d7:31:64:8b:2c:22:b5:ba:7f:53:74:50:
c0:7e:f5:b2:50:bc:fd:f9:71:5c:3a:09:23:c4:9a:
4f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:2D:11:06:98:F1:48:FD:2A:97:88:75:89:BC:F4:EF:EF:FF:13:6A
X509v3 Authority Key Identifier:
keyid:FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/oy0RBpjxSP0ql4h1ibz07-__E2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.124.0/23
Signature Algorithm: sha256WithRSAEncryption
56:7c:76:9c:db:3c:48:91:95:35:d6:e2:a1:66:ab:3d:1b:f2:
4a:b1:be:ce:73:bc:91:20:97:81:f1:35:b3:c5:7e:08:1d:ef:
69:72:5c:23:41:af:99:3d:16:dd:1a:fa:b9:66:b3:76:01:5b:
38:19:63:52:6f:ba:77:53:0b:e7:b7:b3:b5:b0:6f:35:10:52:
97:83:a5:76:9e:ac:42:7e:b3:03:c2:18:3f:d2:c9:f5:a2:35:
14:88:e1:3b:a7:7e:84:ad:68:f2:f4:c7:ce:e9:56:01:93:61:
62:94:89:0b:3b:e4:d6:29:93:93:f2:13:4c:95:b0:f6:a3:b7:
d9:9d:ff:e4:6e:f9:b6:02:0f:3d:7b:17:67:ca:8c:64:3a:35:
97:69:a8:fc:f4:e2:d3:7e:20:3d:08:ab:7f:33:b7:84:c7:b6:
00:28:78:e0:6b:eb:d9:5a:3a:a7:e4:35:c8:11:55:91:4a:9b:
f6:4f:f8:e4:31:ce:fe:af:f9:d5:f8:bd:26:0b:d4:87:fa:aa:
52:e8:dd:66:46:f3:39:0c:cc:f7:13:60:d8:88:d9:f4:a1:3b:
05:97:93:fa:ae:fe:60:b0:92:66:f0:0d:a6:ab:18:58:4e:7e:
61:6a:72:23:cb:ef:77:84:71:32:58:90:91:4f:49:31:a8:82:
40:13:b3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:11:43 2025 by rpki-client