Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/oLB2NwVVfJwfGY-CeGchTG06b0o.roa
File: oLB2NwVVfJwfGY-CeGchTG06b0o.roa (raw, json)
Hash identifier: m01+0JNKwIgkqLLZUiv7RwGcZrBYusJVFTlAThmwhfs=
Subject key identifier: A0:B0:76:37:05:55:7C:9C:1F:19:8F:82:78:67:21:4C:6D:3A:6F:4A
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 01988A97405117DEE90D7852FE7D2B165A5F
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/oLB2NwVVfJwfGY-CeGchTG06b0o.roa
Signing time: Fri 08 Aug 2025 16:50:24 +0000
ROA not before: Fri 08 Aug 2025 16:50:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207710
IP address blocks: 185.81.174.0/24 maxlen: 24
185.81.184.0/24 maxlen: 24
185.81.187.0/24 maxlen: 24
185.89.104.0/23 maxlen: 24
185.89.108.0/22 maxlen: 24
185.95.101.0/24 maxlen: 24
185.95.102.0/23 maxlen: 24
185.96.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:97:40:51:17:de:e9:0d:78:52:fe:7d:2b:16:5a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Aug 8 16:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0b0763705557c9c1f198f827867214c6d3a6f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f5:e3:d5:25:d2:91:e3:88:eb:12:3a:ce:ba:
19:75:33:df:21:0e:09:76:1d:40:3e:01:c0:07:af:
d0:a0:c1:96:9b:49:65:ed:c7:06:6f:8f:0b:55:78:
ee:75:7a:86:3c:02:ac:d1:5d:64:87:ca:08:5b:8f:
23:c1:f9:df:f0:d6:3f:14:89:f1:52:d3:c7:ae:c3:
f2:be:78:0d:36:d1:5b:67:bf:24:a6:9e:a6:7f:20:
bd:0a:55:9f:9c:19:44:16:95:22:02:2b:ce:ef:62:
4f:43:bc:05:3a:4b:93:ae:b4:ae:a1:7b:04:ea:af:
71:b9:c8:2e:70:84:8e:28:ce:84:d9:52:e5:3f:a7:
a8:5e:d9:ba:aa:b7:23:69:f4:af:2c:ec:97:76:07:
69:3e:1c:ba:c4:5c:6a:45:37:94:42:9b:c5:f4:fc:
b8:88:2b:e6:4e:a1:f6:77:3e:96:11:d7:f9:2c:6f:
4b:fe:23:ca:3c:97:e6:56:f1:c5:4b:9d:e3:2f:b1:
7c:e2:bc:d8:31:c2:61:4c:71:6f:81:e9:04:48:c1:
1c:4e:84:d0:b4:d1:d9:fc:0a:18:fd:d4:d2:37:41:
8d:c2:3b:ed:b8:47:38:46:f5:3a:74:35:e3:30:6f:
fa:cc:fa:e4:a4:af:ea:f3:19:a6:db:a8:9d:aa:32:
2f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B0:76:37:05:55:7C:9C:1F:19:8F:82:78:67:21:4C:6D:3A:6F:4A
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/oLB2NwVVfJwfGY-CeGchTG06b0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.174.0/24
185.81.184.0/24
185.81.187.0/24
185.89.104.0/23
185.89.108.0/22
185.95.101.0-185.95.103.255
185.96.38.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:57:00:aa:64:8b:73:c1:5c:6f:7e:e0:42:70:f8:86:1b:21:
ea:bf:c0:2c:fc:0d:cb:da:5b:d9:66:48:b8:7f:fc:3e:45:ee:
13:a3:1d:5b:ac:e2:8c:33:d1:90:c8:f6:cb:ff:6f:f6:03:52:
c9:05:5c:8c:cd:7e:93:b3:1b:2a:05:44:66:d2:68:1e:04:c9:
83:a2:ba:98:d0:3b:ef:de:63:21:b5:b1:87:fd:ad:a7:9a:f4:
2f:f2:ac:79:61:a2:1f:55:f3:0c:74:37:9f:0c:d9:f5:d8:75:
9c:36:11:d3:9d:8c:40:72:86:14:17:ad:fe:b6:ee:8a:bf:73:
90:73:7a:51:61:c9:8c:e4:41:99:98:a1:1e:fc:2a:0d:9b:fc:
3c:5e:22:0c:62:e0:d2:0e:2a:68:48:72:f7:f8:a7:d7:4f:9d:
d3:8c:ca:7a:7d:24:67:33:82:0c:70:92:c3:25:c4:e1:0a:d7:
8b:c9:3d:91:46:5d:5b:11:8d:1f:15:b1:c0:68:89:35:9c:04:
49:47:6c:14:29:e5:aa:ef:b7:26:24:f0:8d:4c:a6:40:0d:a7:
21:94:69:9c:90:f2:0b:37:77:04:0e:6d:cd:a5:a6:54:6c:b4:
50:97:7a:ce:40:5a:1c:e0:b4:c7:a8:68:17:f0:44:ee:2b:ea:
fa:b6:46:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:29:55 2025 by rpki-client