Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/okhIel7-mR-D4RUD3Tg3EKpzZno.roa
File: okhIel7-mR-D4RUD3Tg3EKpzZno.roa (raw, json)
Hash identifier: GWUAmBhhQxX6j2A9GGPqihcMKfVBm5Guwxwe7RxHnj0=
Subject key identifier: A2:48:48:7A:5E:FE:99:1F:83:E1:15:03:DD:38:37:10:AA:73:66:7A
Certificate issuer: /CN=e1f2ca951823314a5f4d10a66a7822398fb8896b
Certificate serial: 019EC18C3554F80FC4ACFFB54B71F5332D0F
Authority key identifier: E1:F2:CA:95:18:23:31:4A:5F:4D:10:A6:6A:78:22:39:8F:B8:89:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fLKlRgjMUpfTRCmangiOY-4iWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/okhIel7-mR-D4RUD3Tg3EKpzZno.roa
Signing time: Sat 13 Jun 2026 15:14:11 +0000
ROA not before: Sat 13 Jun 2026 15:14:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51329
IP address blocks: 185.20.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fLKlRgjMUpfTRCmangiOY-4iWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:8c:35:54:f8:0f:c4:ac:ff:b5:4b:71:f5:33:2d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f2ca951823314a5f4d10a66a7822398fb8896b
Validity
Not Before: Jun 13 15:14:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a248487a5efe991f83e11503dd383710aa73667a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c8:5a:7d:20:89:20:88:ad:23:79:a7:95:df:
2a:85:a9:be:bc:f5:4a:91:88:96:6e:f6:84:ca:bc:
79:b2:4f:ed:52:5e:b7:84:8c:49:56:0a:e0:50:a9:
e1:93:8a:7a:4d:66:a9:b6:a1:e6:6f:37:bf:5f:54:
64:6a:4f:fc:4e:be:9e:b2:80:cf:61:9f:8c:a1:43:
ac:07:01:13:e9:74:e9:e7:83:2b:01:6c:bf:e2:e3:
ec:5f:60:2e:25:13:35:ac:d4:bd:4d:64:66:5d:2d:
06:7e:a3:49:cc:16:5d:29:5d:25:2a:e3:08:20:98:
da:65:7c:57:4e:18:c5:a4:1e:2f:b2:4f:a8:7d:64:
11:3a:d8:93:db:98:5e:a0:97:38:7c:0e:36:11:5f:
bd:84:87:f8:d5:13:4f:83:c9:ce:ce:4f:64:86:c9:
f6:36:8b:7c:27:49:ad:1d:b9:a3:1a:0f:62:79:db:
f3:c8:9a:03:83:4b:a4:8d:11:7e:97:9f:6a:54:ca:
7d:70:57:01:02:50:cd:de:04:fa:bf:3c:2f:83:49:
79:d3:0b:d9:2d:5b:90:40:1b:41:fa:f6:be:f4:95:
29:c8:b7:52:3b:f8:93:97:63:76:43:5d:cc:10:b2:
99:12:dc:17:e6:e2:0a:b4:b5:c4:eb:35:3a:0f:79:
32:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:48:48:7A:5E:FE:99:1F:83:E1:15:03:DD:38:37:10:AA:73:66:7A
X509v3 Authority Key Identifier:
keyid:E1:F2:CA:95:18:23:31:4A:5F:4D:10:A6:6A:78:22:39:8F:B8:89:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fLKlRgjMUpfTRCmangiOY-4iWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/okhIel7-mR-D4RUD3Tg3EKpzZno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.20.251.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:05:a4:39:b1:78:4f:56:1d:71:d5:40:bc:9c:07:63:78:b6:
f0:9c:a3:e6:eb:67:13:8e:c3:33:b2:e6:b2:d0:79:08:bd:18:
4c:e6:10:aa:03:6f:f4:a0:a0:83:fc:af:f9:f8:28:a8:30:9c:
01:f7:7d:bb:7a:16:f0:79:6c:30:94:f9:46:46:a7:27:e5:1c:
fa:9f:d8:c9:b9:d6:5b:da:0f:74:ab:b8:2d:a0:88:c7:0e:52:
64:97:11:ee:b1:ac:60:f5:e3:f7:4d:8d:88:31:2a:0a:d3:b1:
1a:82:83:93:2a:0d:aa:bd:06:d0:e8:61:b2:0e:8b:12:f9:79:
60:28:9a:c3:66:58:64:d5:8e:c5:1d:6f:08:91:29:d4:b4:ca:
7c:23:67:e4:66:76:74:44:7a:58:14:15:c2:38:3a:7f:09:1f:
19:28:dd:dc:47:9e:20:a6:2e:84:8b:43:47:23:8b:2a:69:35:
20:1c:d5:b7:e6:0d:02:ee:15:38:35:0f:82:fc:99:b1:90:4a:
ee:52:d3:d5:3e:f8:d5:48:d3:d5:d7:df:27:92:c1:0f:2b:5c:
de:86:96:d5:97:77:22:ad:56:3b:78:84:aa:4a:76:50:a1:e7:
9e:bb:f2:d4:23:d7:01:22:1c:d0:d0:20:48:ab:77:e4:ea:c5:
6f:98:48:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:06 2026 by rpki-client