Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/omka6JZ3cxuqRg8okuBPziVBWRs.roa
File: omka6JZ3cxuqRg8okuBPziVBWRs.roa (raw, json)
Hash identifier: 5reM5Q1cDG1s+QskdXUc/zeFl29KsaBLiyNK/rBISK8=
Subject key identifier: A2:69:1A:E8:96:77:73:1B:AA:46:0F:28:92:E0:4F:CE:25:41:59:1B
Certificate issuer: /CN=724994bb7a6a3f4333d668c498fb965b172c3455
Certificate serial: 019819556D21E66C311578E161B13E60055A
Authority key identifier: 72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/omka6JZ3cxuqRg8okuBPziVBWRs.roa
Signing time: Thu 17 Jul 2025 17:01:25 +0000
ROA not before: Thu 17 Jul 2025 17:01:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203285
IP address blocks: 91.195.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:19:55:6d:21:e6:6c:31:15:78:e1:61:b1:3e:60:05:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724994bb7a6a3f4333d668c498fb965b172c3455
Validity
Not Before: Jul 17 17:01:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2691ae89677731baa460f2892e04fce2541591b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:47:e2:44:73:21:19:a4:dc:83:6c:de:aa:c7:
33:ea:f3:9a:f5:ba:3b:11:72:55:2a:3f:30:5b:62:
e8:30:05:b4:0d:fa:7f:d2:61:ef:50:0d:e8:46:b9:
35:14:44:05:bd:7c:42:ea:7f:e3:72:87:aa:2e:8d:
42:ca:d1:67:86:be:5a:b2:9e:5a:4d:f5:39:4d:29:
15:51:05:49:70:d0:39:49:b6:1d:0d:2f:91:ac:33:
a7:95:0e:7d:52:22:19:f9:40:a1:f9:da:71:30:cf:
56:22:a3:fa:12:87:18:99:12:4e:31:b3:11:d3:a2:
39:0f:65:21:ba:ce:53:19:77:dd:5d:6c:ad:53:eb:
07:66:7e:90:d9:65:77:91:74:ca:cd:2f:e2:e7:6b:
60:ce:16:57:9a:cd:bc:08:ca:69:ea:0b:b1:8a:da:
e9:b1:d0:64:73:a6:1e:e4:6e:0f:d3:f3:4d:82:c7:
9c:c6:af:8d:7a:19:a8:d1:79:ae:99:fc:32:50:b0:
35:c5:7a:af:2e:45:90:ef:1d:62:ec:f1:d2:46:c2:
d3:94:35:36:54:8d:1e:af:1c:1f:1c:bb:f2:8d:c2:
c4:af:e8:50:19:0e:15:38:1b:2e:b0:ea:93:11:d0:
b0:d7:43:57:ef:c7:07:0f:d1:61:4c:72:0b:c8:8d:
a7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:69:1A:E8:96:77:73:1B:AA:46:0F:28:92:E0:4F:CE:25:41:59:1B
X509v3 Authority Key Identifier:
keyid:72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/omka6JZ3cxuqRg8okuBPziVBWRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.36.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:3c:d2:27:13:36:73:1b:61:d2:e8:ea:72:64:ed:37:a0:f0:
25:b7:54:bb:9e:ce:6e:a8:59:97:fe:61:61:d5:3b:48:d2:b6:
e5:22:ce:d0:5b:11:a1:bb:7e:f1:9d:97:b5:03:32:e6:24:46:
63:8f:d0:bd:df:24:4e:c6:7d:43:1a:f1:8a:f6:b0:73:1e:44:
d0:2e:e1:ef:91:13:56:01:3c:ac:57:55:bd:39:9c:33:69:9b:
b4:f3:99:08:16:10:09:ce:2e:61:13:21:5d:87:bd:bc:81:f3:
8f:73:5d:dd:1b:23:6b:5f:15:a7:7b:5c:16:10:85:5b:a0:ba:
8f:a3:88:d1:5a:57:78:98:6d:1d:85:f3:90:64:14:68:1f:d8:
ec:0f:ef:2f:71:12:c8:17:74:52:b8:b7:2c:1f:a8:9d:51:87:
58:52:e2:95:6f:b5:c8:01:bb:44:cd:e9:1c:6a:15:8b:d3:1b:
48:95:5b:e6:0b:47:00:07:1d:28:f1:87:0a:47:3a:b1:12:41:
a5:3b:db:b6:10:6f:75:02:27:4d:3a:fa:db:91:c1:18:8a:88:
b0:3b:cf:54:45:ec:97:09:02:55:ad:cd:fa:ef:a9:72:47:54:
f6:1a:5d:db:71:99:c6:20:c9:d8:92:f8:1b:b7:bb:f0:c1:8f:
81:77:b7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:25:23 2025 by rpki-client