Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/eokrGDKKk0G74B46cfTWojQ52Jk.roa
File: eokrGDKKk0G74B46cfTWojQ52Jk.roa (raw, json)
Hash identifier: 3LPYckY4Mq2pqzQbZ2q+2fT9RSskgmzOaPcUGiyhlMY=
Subject key identifier: 7A:89:2B:18:32:8A:93:41:BB:E0:1E:3A:71:F4:D6:A2:34:39:D8:99
Certificate issuer: /CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Certificate serial: 0199E1F8B93CB51C707A22AF1F0952119355
Authority key identifier: BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/eokrGDKKk0G74B46cfTWojQ52Jk.roa
Signing time: Tue 14 Oct 2025 09:06:37 +0000
ROA not before: Tue 14 Oct 2025 09:06:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9155
IP address blocks: 62.150.10.0/24 maxlen: 24
62.150.155.0/24 maxlen: 24
62.150.181.0/24 maxlen: 24
62.150.182.0/24 maxlen: 24
78.154.192.0/18 maxlen: 18
78.154.192.0/20 maxlen: 20
78.154.192.0/24 maxlen: 24
78.154.193.0/24 maxlen: 24
78.154.194.0/24 maxlen: 24
78.154.195.0/24 maxlen: 24
78.154.196.0/24 maxlen: 24
78.154.197.0/24 maxlen: 24
78.154.198.0/24 maxlen: 24
78.154.199.0/24 maxlen: 24
78.154.200.0/24 maxlen: 24
78.154.201.0/24 maxlen: 24
78.154.202.0/24 maxlen: 24
78.154.203.0/24 maxlen: 24
78.154.204.0/24 maxlen: 24
78.154.205.0/24 maxlen: 24
78.154.206.0/24 maxlen: 24
78.154.207.0/24 maxlen: 24
78.154.208.0/20 maxlen: 20
78.154.208.0/24 maxlen: 24
78.154.209.0/24 maxlen: 24
78.154.210.0/24 maxlen: 24
78.154.211.0/24 maxlen: 24
78.154.212.0/24 maxlen: 24
78.154.213.0/24 maxlen: 24
78.154.214.0/24 maxlen: 24
78.154.215.0/24 maxlen: 24
78.154.216.0/24 maxlen: 24
78.154.217.0/24 maxlen: 24
78.154.218.0/24 maxlen: 24
78.154.219.0/24 maxlen: 24
78.154.220.0/24 maxlen: 24
78.154.221.0/24 maxlen: 24
78.154.222.0/24 maxlen: 24
78.154.223.0/24 maxlen: 24
78.154.224.0/20 maxlen: 20
78.154.224.0/24 maxlen: 24
78.154.225.0/24 maxlen: 24
78.154.226.0/24 maxlen: 24
78.154.227.0/24 maxlen: 24
78.154.228.0/24 maxlen: 24
78.154.229.0/24 maxlen: 24
78.154.230.0/24 maxlen: 24
78.154.231.0/24 maxlen: 24
78.154.232.0/24 maxlen: 24
78.154.233.0/24 maxlen: 24
78.154.234.0/24 maxlen: 24
78.154.235.0/24 maxlen: 24
78.154.236.0/24 maxlen: 24
78.154.237.0/24 maxlen: 24
78.154.238.0/24 maxlen: 24
78.154.239.0/24 maxlen: 24
78.154.240.0/20 maxlen: 20
78.154.240.0/24 maxlen: 24
78.154.241.0/24 maxlen: 24
78.154.242.0/24 maxlen: 24
78.154.243.0/24 maxlen: 24
78.154.244.0/24 maxlen: 24
78.154.245.0/24 maxlen: 24
78.154.246.0/24 maxlen: 24
78.154.247.0/24 maxlen: 24
78.154.248.0/24 maxlen: 24
78.154.249.0/24 maxlen: 24
78.154.250.0/24 maxlen: 24
78.154.251.0/24 maxlen: 24
78.154.252.0/24 maxlen: 24
78.154.253.0/24 maxlen: 24
78.154.254.0/24 maxlen: 24
78.154.255.0/24 maxlen: 24
195.39.161.0/24 maxlen: 24
195.39.180.0/24 maxlen: 24
195.39.181.0/24 maxlen: 24
195.39.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e1:f8:b9:3c:b5:1c:70:7a:22:af:1f:09:52:11:93:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Validity
Not Before: Oct 14 09:06:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a892b18328a9341bbe01e3a71f4d6a23439d899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d5:3e:1c:f1:f1:cc:f2:d4:51:93:cf:38:cd:
7d:fa:ec:9b:44:4c:57:99:40:0c:e7:cc:c4:ca:59:
32:fa:36:80:8f:fd:e7:db:96:f7:90:af:01:84:1b:
67:d0:3d:92:3e:2e:a2:8a:74:c5:21:20:dd:a1:60:
82:59:a3:76:36:59:d9:14:1d:42:51:ab:ee:33:81:
4d:d8:d8:c2:0d:30:f8:8c:37:0e:c7:b4:14:62:1f:
d7:65:28:1a:f4:d3:89:aa:75:a5:8d:1b:1c:fe:5f:
e4:79:79:28:a5:35:d8:46:26:08:76:cf:35:83:e7:
0d:bc:6f:fd:54:da:a1:e5:df:76:24:9a:1c:1a:5e:
1a:3c:63:da:a9:9e:8e:bb:67:fe:fe:7b:a7:a8:82:
73:12:28:4e:ad:15:0d:6a:8c:37:1e:aa:97:3d:51:
94:96:90:62:66:cc:83:86:6a:a3:dd:4d:8c:49:d3:
84:0c:02:5c:45:d0:5c:2a:0f:e0:d3:9b:9a:3d:f4:
11:96:a7:6e:48:9b:5d:4e:92:9e:1f:a5:e6:9d:15:
fd:92:3d:82:1e:98:78:53:cb:d2:99:66:87:05:c4:
96:17:01:6f:e2:70:55:dc:e1:0e:8d:6e:d2:da:33:
6e:13:9a:90:f1:76:f9:3c:c3:8a:b7:b6:3c:38:90:
9e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:89:2B:18:32:8A:93:41:BB:E0:1E:3A:71:F4:D6:A2:34:39:D8:99
X509v3 Authority Key Identifier:
keyid:BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/eokrGDKKk0G74B46cfTWojQ52Jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.150.10.0/24
62.150.155.0/24
62.150.181.0-62.150.182.255
78.154.192.0/18
195.39.161.0/24
195.39.180.0-195.39.182.255
Signature Algorithm: sha256WithRSAEncryption
2a:de:c1:95:c8:c9:c6:e4:ce:b7:a4:55:d9:3c:d5:2c:22:9c:
19:aa:1c:6f:e3:db:a8:ce:03:46:9c:19:80:92:ce:72:e1:fc:
81:15:73:2b:cd:fa:6e:7b:83:8a:49:f2:f0:06:00:96:ae:88:
b1:3a:6e:09:3f:61:8b:bb:6d:56:70:bc:a4:8e:04:4a:05:ce:
42:98:0b:4d:1d:fa:26:12:bf:06:ee:c2:c8:a2:27:f1:6d:83:
10:13:96:c2:60:79:fd:84:94:b5:d6:5f:71:c1:f6:3d:db:11:
22:57:04:c2:df:0f:7a:ea:14:1e:27:43:f1:fd:f7:48:dc:aa:
1c:4d:ad:fe:44:dc:7c:d9:9d:a9:08:62:0a:1b:86:cd:ef:09:
9c:91:c4:91:79:00:35:7c:36:fe:fd:ac:44:47:51:da:a1:52:
79:1f:c2:cf:4d:1f:cc:71:4b:6d:c1:3e:d8:b0:1c:67:30:51:
86:eb:f0:f6:7b:ec:f2:ab:a3:78:58:ff:dd:bc:ea:50:16:5b:
0b:43:de:b4:5a:87:a8:4a:06:fa:24:4a:49:6f:f3:eb:dd:8f:
9b:d7:d2:36:18:b1:51:18:92:ad:b1:44:3f:7b:c5:21:8c:cb:
cf:8f:a7:10:6a:e7:22:f3:ea:9c:31:d7:84:d9:bd:c3:4a:0b:
07:b5:a6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:04:11 2025 by rpki-client