Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/oCjkzoPA5DhcNXNaA81aLkXVvU8.roa
File: oCjkzoPA5DhcNXNaA81aLkXVvU8.roa (raw, json)
Hash identifier: /KyYNtiUm3dFVEM2p0gYOmtMuq4IWNJXiDF4AkueFW0=
Subject key identifier: A0:28:E4:CE:83:C0:E4:38:5C:35:73:5A:03:CD:5A:2E:45:D5:BD:4F
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0198B20F9E0718860A06D236ED633A69EA47
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/oCjkzoPA5DhcNXNaA81aLkXVvU8.roa
Signing time: Sat 16 Aug 2025 08:47:04 +0000
ROA not before: Sat 16 Aug 2025 08:47:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.222.30.0/24 maxlen: 24
194.5.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b2:0f:9e:07:18:86:0a:06:d2:36:ed:63:3a:69:ea:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 16 08:47:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a028e4ce83c0e4385c35735a03cd5a2e45d5bd4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a3:4f:34:48:55:2d:06:f3:fb:41:ce:10:a4:
82:c7:ce:29:27:77:c6:2c:e1:9e:6a:11:40:4d:d7:
53:ed:08:c5:74:7d:5d:a0:a0:ae:72:61:c2:88:54:
a1:d6:78:07:18:c4:19:21:68:12:a1:3a:aa:9d:07:
e5:95:29:2d:d6:2d:16:4d:bf:bb:9f:8c:04:9f:06:
f5:68:a3:8c:27:10:fa:ab:50:37:98:b1:0b:90:87:
e2:e4:98:9a:96:9e:7f:03:62:f5:0b:25:e8:52:b9:
d5:c6:6c:3c:b1:cf:09:e2:ee:d0:36:f6:57:bc:70:
44:5e:7e:7d:12:7d:8e:87:f4:f6:4f:81:65:92:ab:
89:6a:07:9b:7a:9d:4d:c1:eb:8a:16:ae:43:89:2b:
06:21:76:49:93:fc:42:07:ff:9e:0d:45:08:71:75:
90:6c:37:84:0d:46:cc:b3:cc:d6:f5:e2:2b:fa:8b:
f5:6e:2f:e3:7d:30:4f:02:f1:03:8e:cc:d7:ec:c9:
e6:5c:ee:ec:1b:a4:ef:f4:67:cb:26:63:74:a0:b6:
d3:27:73:89:96:b9:cd:aa:88:5d:7c:35:2b:fd:e8:
2f:cb:a4:ce:99:b8:c7:80:f2:c1:21:4c:24:4d:19:
63:5d:fb:1f:2b:04:11:b0:3a:46:9c:6b:69:7d:f9:
c8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:28:E4:CE:83:C0:E4:38:5C:35:73:5A:03:CD:5A:2E:45:D5:BD:4F
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/oCjkzoPA5DhcNXNaA81aLkXVvU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.30.0/24
194.5.64.0/24
Signature Algorithm: sha256WithRSAEncryption
42:b7:5d:0b:78:9d:bd:99:6f:8c:f1:9f:b2:f5:b5:bb:6e:44:
5d:64:a0:e4:cf:fa:60:37:ae:b2:1c:f3:66:0b:ca:74:f1:71:
8b:a4:07:25:f3:5e:bd:c5:7d:23:65:76:8d:39:31:39:0b:59:
d5:a6:56:ff:6d:04:fd:bb:e2:93:da:d6:e2:a0:8c:eb:a6:3f:
37:07:33:c4:91:00:ca:d6:38:6d:ee:a4:d5:36:5b:5d:7c:b7:
e4:e5:5f:67:6d:bb:a4:2a:d5:a4:6f:00:e8:06:54:88:6e:e3:
14:91:9a:2f:68:d0:b2:31:47:b5:aa:c9:b3:b6:56:b9:d0:70:
5b:18:09:2f:64:ab:6f:4e:6a:43:67:4b:ad:6b:e9:0b:52:bb:
48:9b:17:e9:0d:b5:9d:78:bd:53:eb:c5:a8:b0:99:31:d7:93:
85:09:e8:ec:f3:41:93:18:15:00:d0:c8:21:ac:6b:64:57:ce:
66:bb:a0:a6:c7:4c:bb:54:8f:97:80:aa:cf:8b:3b:b6:44:cd:
1e:7f:63:de:dc:36:d2:ae:22:d0:f5:83:60:d7:9f:8a:d7:1b:
9f:d9:ca:93:d2:fe:74:25:39:14:b6:db:eb:d9:fd:ae:43:86:
8b:00:b8:d7:f0:d1:bb:0e:83:ab:68:eb:a7:64:68:60:51:3c:
1f:e2:27:5c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZiyD54HGIYKBtI27WM6aepHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjUwODE2MDg0NzA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDI4ZTRjZTgzYzBlNDM4NWMzNTczNWEwM2NkNWEyZTQ1ZDViZDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaNPNEhVLQbz+0HOEKSCx84pJ3fG
LOGeahFATddT7QjFdH1doKCucmHCiFSh1ngHGMQZIWgSoTqqnQfllSkt1i0WTb+7
n4wEnwb1aKOMJxD6q1A3mLELkIfi5Jialp5/A2L1CyXoUrnVxmw8sc8J4u7QNvZX
vHBEXn59En2Oh/T2T4FlkquJagebep1NweuKFq5DiSsGIXZJk/xCB/+eDUUIcXWQ
bDeEDUbMs8zW9eIr+ov1bi/jfTBPAvEDjszX7MnmXO7sG6Tv9GfLJmN0oLbTJ3OJ
lrnNqohdfDUr/egvy6TOmbjHgPLBIUwkTRljXfsfKwQRsDpGnGtpffnIxwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKAo5M6DwOQ4XDVzWgPNWi5F1b1PMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvb0Nqa3pvUEE1RGhjTlhOYUE4MWFMa1hWdlU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAud4eAwQA
wgVAMA0GCSqGSIb3DQEBCwUAA4IBAQBCt10LeJ29mW+M8Z+y9bW7bkRdZKDkz/pg
N66yHPNmC8p08XGLpAcl8169xX0jZXaNOTE5C1nVplb/bQT9u+KT2tbioIzrpj83
BzPEkQDK1jht7qTVNltdfLfk5V9nbbukKtWkbwDoBlSIbuMUkZovaNCyMUe1qsmz
tla50HBbGAkvZKtvTmpDZ0uta+kLUrtImxfpDbWdeL1T68WosJkx15OFCejs80GT
GBUA0MghrGtkV85mu6Cmx0y7VI+XgKrPizu2RM0ef2Pe3DbSriLQ9YNg15+K1xuf
2cqT0v50JTkUttvr2f2uQ4aLALjX8NG7DoOraOunZGhgUTwf4idc
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:10 2025 by rpki-client