Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/ohlIUqQ3eDQtmUwSu9Kl2M35sw8.roa
File: ohlIUqQ3eDQtmUwSu9Kl2M35sw8.roa (raw, json)
Hash identifier: dhBdHXgrEk65slUOAf0TCN0qQFeQcRa2buvDnBjrTtI=
Subject key identifier: A2:19:48:52:A4:37:78:34:2D:99:4C:12:BB:D2:A5:D8:CD:F9:B3:0F
Certificate issuer: /CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Certificate serial: 01981D60E33B084FDF545DF886EFD16A3043
Authority key identifier: A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/ohlIUqQ3eDQtmUwSu9Kl2M35sw8.roa
Signing time: Fri 18 Jul 2025 11:52:25 +0000
ROA not before: Fri 18 Jul 2025 11:52:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205386
IP address blocks: 185.220.8.0/24 maxlen: 24
185.220.10.0/24 maxlen: 24
185.220.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1d:60:e3:3b:08:4f:df:54:5d:f8:86:ef:d1:6a:30:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Validity
Not Before: Jul 18 11:52:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2194852a43778342d994c12bbd2a5d8cdf9b30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d4:9b:4a:ce:c2:af:c3:aa:89:f0:b9:17:d4:
00:cc:1c:09:0b:68:60:83:9b:91:ee:1c:f1:dc:49:
11:c3:ae:9c:aa:4b:ed:fb:85:07:b1:b1:4d:aa:4c:
cc:d7:4c:f2:a4:2e:8a:38:04:74:f5:d9:02:18:dc:
f0:38:04:66:9d:5d:42:2f:13:ce:8f:56:4a:e4:7b:
15:31:78:06:b6:88:18:43:f2:d9:e9:74:cb:d9:6c:
18:14:b7:7d:fa:e8:49:fe:68:f9:35:61:33:c9:14:
15:85:71:10:7f:79:07:92:3a:c5:cb:92:fd:55:ac:
fa:2d:26:37:d8:5e:fd:d3:d0:e0:d6:e4:f1:8e:0c:
51:58:9e:f2:b3:61:ed:59:4d:71:b6:ee:77:de:bd:
de:fc:86:49:a6:e7:4e:dc:96:c2:f7:87:45:f9:8c:
3a:fb:42:7b:20:75:1e:7a:23:05:44:b0:cc:02:e4:
db:89:e6:56:a4:70:0e:7b:07:9b:d4:51:d8:8a:38:
11:76:98:4d:9e:70:1e:06:a7:03:32:a3:98:3d:32:
76:a7:61:14:11:1d:e8:1e:33:56:d1:11:f5:fe:0c:
3c:6e:56:09:ef:1a:94:a9:a7:d2:09:6b:04:9f:f5:
17:1b:c1:47:25:6c:bf:a3:f4:21:73:4c:49:72:8f:
3c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:19:48:52:A4:37:78:34:2D:99:4C:12:BB:D2:A5:D8:CD:F9:B3:0F
X509v3 Authority Key Identifier:
keyid:A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/ohlIUqQ3eDQtmUwSu9Kl2M35sw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.8.0/24
185.220.10.0/23
Signature Algorithm: sha256WithRSAEncryption
20:d9:d0:96:2a:a2:3e:b0:c8:ad:9c:3b:ce:b0:c7:b2:4b:8d:
a3:90:88:ef:f9:b1:31:77:04:bd:48:ca:a8:d2:89:9a:a5:f8:
1f:c6:65:45:aa:4f:72:f3:1a:68:a7:1f:59:ef:af:be:a1:0a:
ad:04:47:76:aa:1d:6b:68:f0:42:51:5e:11:39:59:8f:7d:1e:
0f:11:c7:c3:3b:6f:45:4c:7b:62:ab:de:ba:30:58:34:73:cf:
7e:2e:3a:28:4e:2e:ca:4e:43:ed:89:3b:1a:ee:39:70:14:de:
17:61:f4:75:4b:ff:09:d0:40:26:a9:1d:3f:27:3e:fd:3b:9e:
8f:88:76:2b:75:58:59:3a:e0:e8:52:dc:69:d7:7e:e0:e7:1f:
e6:5b:f0:8e:46:fb:78:0d:7a:85:ba:0e:b4:a4:88:b0:5f:95:
c6:04:a0:8f:3c:a1:b8:1b:33:e3:cf:a0:20:4b:fb:12:b5:f5:
64:53:e5:33:c0:4d:e2:9f:84:21:ec:73:d5:58:15:89:db:f6:
2d:bb:78:e3:49:90:47:1c:3e:4d:9a:89:bf:87:f3:b4:33:53:
6d:97:05:f6:18:45:fd:bd:a3:26:10:d0:3f:5a:e9:41:22:ce:
e2:de:66:d0:a9:c3:ee:ff:e3:a7:c8:4d:b9:be:d6:b6:8d:18:
50:cb:11:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:49:35 2025 by rpki-client