Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/OcWVip6DgX4MYHqueI9VDIeoynM.roa
File: OcWVip6DgX4MYHqueI9VDIeoynM.roa (raw, json)
Hash identifier: bXmjTcrqmKqmTziOQvt+wOwhBLetOgMCVqDTQcX/Vo4=
Subject key identifier: 39:C5:95:8A:9E:83:81:7E:0C:60:7A:AE:78:8F:55:0C:87:A8:CA:73
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0197CF0E2EE265F70ED707AE26835467221E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/OcWVip6DgX4MYHqueI9VDIeoynM.roa
Signing time: Thu 03 Jul 2025 06:51:42 +0000
ROA not before: Thu 03 Jul 2025 06:51:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400304
IP address blocks: 86.107.101.0/24 maxlen: 24
208.123.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 14:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:0e:2e:e2:65:f7:0e:d7:07:ae:26:83:54:67:22:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 3 06:51:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39c5958a9e83817e0c607aae788f550c87a8ca73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f1:93:66:a5:05:c3:6e:19:bf:fb:05:74:c9:
eb:7b:21:cb:42:8f:a3:58:ae:dc:fa:6d:fa:0a:16:
58:db:1f:6f:9a:fc:22:da:41:15:e4:6c:d3:d0:d6:
47:c4:c7:8c:ef:da:92:2e:a4:d1:37:09:c5:89:8c:
dd:aa:8f:99:76:47:88:45:80:b7:13:d1:96:39:3e:
3c:79:b4:b0:12:f0:f3:60:ab:1a:cd:8a:e0:cb:73:
cf:c7:93:90:ed:01:9e:b4:b5:f9:c3:87:bd:1f:6d:
02:62:37:02:1c:b8:41:aa:f1:e2:a6:7b:3b:f8:1e:
cf:5c:bd:1a:4c:d3:f9:2e:55:e3:94:2f:5f:97:0c:
d3:2c:b7:76:c5:b1:bb:af:b5:78:7e:e2:c1:77:87:
78:a5:fe:f7:93:f3:42:3e:71:63:37:03:2e:8a:aa:
29:7a:8e:ad:f7:b0:7a:3c:2c:0c:35:3c:19:43:33:
1d:f3:93:9e:49:51:ed:c9:ba:c4:6a:16:e0:1e:62:
2a:66:d1:95:7b:88:d6:de:33:9a:dd:12:db:32:dd:
99:3a:38:93:87:c8:11:6b:79:31:e9:01:71:72:57:
2e:55:d7:e8:22:81:65:e9:84:c2:a5:b8:a5:9f:e4:
d5:81:da:f2:f7:4a:16:c5:da:f5:8a:82:7a:42:15:
93:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C5:95:8A:9E:83:81:7E:0C:60:7A:AE:78:8F:55:0C:87:A8:CA:73
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/OcWVip6DgX4MYHqueI9VDIeoynM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.101.0/24
208.123.187.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:4f:9e:16:34:21:6c:0e:3b:1c:b9:e9:17:85:13:65:e5:2a:
da:18:34:d5:29:4e:e1:b7:ef:e7:63:0d:3e:ac:3f:6a:30:41:
e7:5f:07:b2:68:01:e1:50:67:23:69:ed:8f:88:a0:f4:ae:61:
63:02:98:ff:c4:5d:a7:3d:4b:8d:e3:7e:55:fa:84:79:22:7a:
ce:ba:2a:04:72:84:ae:e6:b9:54:c4:b1:4e:eb:6e:eb:41:b5:
03:26:9a:3c:db:e9:05:46:b5:ff:aa:5c:40:b6:93:a2:b2:54:
54:9a:5f:7e:9a:26:b0:36:7d:18:36:d6:db:29:41:82:be:ff:
ec:e1:fd:90:dc:1a:f6:4a:29:9c:40:94:63:fc:bd:4b:ae:f0:
da:12:10:c7:89:42:e0:57:45:33:49:8c:02:25:7f:51:c8:6c:
81:0c:1b:e7:84:d7:42:04:f2:c9:9f:a8:bd:3a:63:4d:8d:7f:
21:87:2d:2b:bb:65:e3:82:3d:34:06:bf:2c:a3:b7:97:53:ba:
72:fb:88:6f:02:0e:e9:33:0b:19:4f:1a:a6:64:e4:c7:0d:24:
f5:3a:c2:bc:77:53:d0:c9:a9:00:80:34:6d:ba:e2:04:7e:d5:
b7:ed:c9:e2:36:a7:c3:bd:11:ee:91:c0:09:36:6a:d1:44:1c:
51:7b:d6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:24:57 2025 by rpki-client