Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/oKDIWV_7Y8ktJ4d_lro3RzUpAzE.roa
File: oKDIWV_7Y8ktJ4d_lro3RzUpAzE.roa (raw, json)
Hash identifier: txEsmpmbkyHZufJHl2J4dFHRxGpSRd6FBOFojmw5rsw=
Subject key identifier: A0:A0:C8:59:5F:FB:63:C9:2D:27:87:7F:96:BA:37:47:35:29:03:31
Certificate issuer: /CN=31d4ee4afff55e67444d47d49b512a8368bf9ef6
Certificate serial: 0198126A0587EF9C611172F36163E2ECE7B3
Authority key identifier: 31:D4:EE:4A:FF:F5:5E:67:44:4D:47:D4:9B:51:2A:83:68:BF:9E:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/oKDIWV_7Y8ktJ4d_lro3RzUpAzE.roa
Signing time: Wed 16 Jul 2025 08:46:34 +0000
ROA not before: Wed 16 Jul 2025 08:46:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.50.140.0/24 maxlen: 24
185.50.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:12:6a:05:87:ef:9c:61:11:72:f3:61:63:e2:ec:e7:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d4ee4afff55e67444d47d49b512a8368bf9ef6
Validity
Not Before: Jul 16 08:46:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0a0c8595ffb63c92d27877f96ba374735290331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:39:5f:ee:60:2a:5a:b7:3d:5e:0e:bc:3a:33:
91:25:12:4a:94:c2:b9:38:39:ea:8e:79:1c:9b:4c:
73:8e:ac:4c:ec:cd:89:40:77:fc:f1:c9:32:6b:8c:
a9:1a:ee:fa:e2:27:4e:03:6a:d9:d3:1c:e8:2e:87:
2f:c8:ea:31:02:2d:40:02:a0:92:7a:cc:7a:e2:2f:
33:1d:88:42:2e:4a:b5:78:00:a0:d2:aa:dc:60:9d:
b6:55:ca:fe:8b:5c:38:d6:5a:e3:5c:47:5b:fa:1e:
10:82:5e:3f:9e:d3:6b:8c:a8:d9:4d:9f:9d:f3:b6:
9c:5a:6c:3d:c9:a4:8d:51:56:83:8d:60:a0:38:5f:
0b:78:ae:fa:9a:3a:37:c6:24:86:5f:f7:f2:4b:72:
a4:16:e4:5b:48:d9:98:30:c5:fb:b5:e5:05:6f:7f:
b3:35:e6:cd:e2:d5:06:ff:39:c1:f9:a1:56:2e:ae:
39:c4:bb:19:3d:02:9f:8e:b2:e0:0a:f3:ab:d9:30:
63:66:c2:b1:2f:ff:eb:dc:c4:15:8a:fd:46:6f:50:
43:74:43:9b:b4:ff:b0:8e:e0:09:06:b1:cd:19:a2:
8e:4a:ed:ce:29:fc:8a:94:27:fc:48:a3:0e:9c:18:
05:dd:cc:28:2d:de:b7:70:7b:d0:1c:7b:0f:d8:da:
b7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A0:C8:59:5F:FB:63:C9:2D:27:87:7F:96:BA:37:47:35:29:03:31
X509v3 Authority Key Identifier:
keyid:31:D4:EE:4A:FF:F5:5E:67:44:4D:47:D4:9B:51:2A:83:68:BF:9E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/oKDIWV_7Y8ktJ4d_lro3RzUpAzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.140.0/24
185.50.142.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:41:1e:fd:cd:d6:7e:ea:c4:6f:9e:88:aa:d9:c3:b3:ba:9f:
1f:45:29:e0:0b:b6:6d:0e:6d:6f:79:72:c8:d4:0e:42:35:70:
8b:16:5f:2c:99:8f:9d:1c:a5:7d:f5:8e:11:32:bc:54:f7:d7:
e2:ba:e6:f8:99:48:25:8e:90:b4:88:33:7f:8b:15:4f:58:92:
63:1d:c4:1a:4f:58:ab:f3:ba:20:ad:18:3a:7c:e5:9b:4b:77:
b8:8b:d7:e5:43:00:3e:16:4d:2e:a0:1e:c3:dc:f1:e7:de:f5:
df:a9:49:18:c7:29:d1:aa:9b:6c:2c:e2:9a:7e:39:66:72:9c:
e5:7b:7a:a2:7d:22:14:87:e2:b1:79:95:b7:85:61:35:ef:74:
59:dd:44:9d:0d:41:99:ce:e0:16:66:5e:41:96:19:0c:6e:75:
24:ad:64:d2:be:42:f2:1e:4b:b7:85:30:6e:cd:69:9e:1a:09:
3f:df:b7:9b:99:75:7d:2c:db:23:1b:33:1d:bf:ce:cd:a7:b1:
bd:09:33:7e:70:c4:5c:37:c8:af:17:8b:14:ee:75:d5:56:9d:
f6:3e:35:6b:e5:97:77:5f:8f:84:23:d7:90:16:44:34:3f:fd:
a3:47:1e:8b:ea:2e:37:ba:ea:e4:66:44:f6:36:98:b4:34:50:
e7:3b:64:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:35:26 2025 by rpki-client