Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/OCK0xPSUR6N0XAXrrNIoVZTtCb8.roa
File: OCK0xPSUR6N0XAXrrNIoVZTtCb8.roa (raw, json)
Hash identifier: zJFIUz1mYifZofZ0Na7vRc0V1qQdfg8lAP69hFan3Gw=
Subject key identifier: 38:22:B4:C4:F4:94:47:A3:74:5C:05:EB:AC:D2:28:55:94:ED:09:BF
Certificate issuer: /CN=6c890ef6a88ab33fa5a206760768dd3251c238af
Certificate serial: 019A16E42A2199B7F18B5B014D29490D5D70
Authority key identifier: 6C:89:0E:F6:A8:8A:B3:3F:A5:A2:06:76:07:68:DD:32:51:C2:38:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/OCK0xPSUR6N0XAXrrNIoVZTtCb8.roa
Signing time: Fri 24 Oct 2025 15:44:03 +0000
ROA not before: Fri 24 Oct 2025 15:44:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41652
IP address blocks: 185.212.224.0/22 maxlen: 22
193.93.181.0/24 maxlen: 24
2a0b:7cc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 06:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:e4:2a:21:99:b7:f1:8b:5b:01:4d:29:49:0d:5d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c890ef6a88ab33fa5a206760768dd3251c238af
Validity
Not Before: Oct 24 15:44:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3822b4c4f49447a3745c05ebacd2285594ed09bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:95:62:f3:e0:4d:26:0e:4c:38:6e:2f:7d:bd:
6a:90:63:4e:b0:ac:26:d6:f5:30:ff:88:b1:0e:29:
98:5b:af:9e:5d:02:72:f4:00:38:9b:d4:61:a1:dd:
cd:c1:3c:d7:5e:b5:15:9b:6c:54:97:80:48:8f:08:
74:1d:27:84:f8:d3:72:f2:72:8a:ae:38:32:f2:5d:
27:57:bb:38:b3:5d:1e:f1:10:8c:1a:dc:68:fe:8e:
5a:54:42:2f:79:a1:49:24:4a:6d:33:fd:ed:ef:40:
5b:f3:54:c9:f6:fa:b3:8e:22:ee:da:fa:75:6d:9e:
e1:db:89:ff:36:cf:54:0e:27:c4:0d:61:2a:2e:4d:
bb:43:8f:7d:6a:6d:9c:9a:d0:ec:b8:98:da:da:aa:
81:b6:10:ff:77:34:8b:43:0e:7e:a7:b0:ab:86:86:
35:05:eb:3b:82:c4:d4:c3:f3:74:ed:40:3b:eb:10:
2d:bc:ed:88:43:10:d6:3b:cd:06:d0:67:32:de:8f:
a2:69:21:b4:10:5c:a3:ff:41:99:76:07:92:0a:1d:
4f:67:fb:e9:45:03:f1:33:7b:32:8a:06:3c:bb:8d:
f0:cd:b3:39:a7:a7:99:76:22:2b:24:2d:e5:99:5a:
35:fa:b3:f9:77:5d:de:53:42:7b:ce:93:00:df:17:
2d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:22:B4:C4:F4:94:47:A3:74:5C:05:EB:AC:D2:28:55:94:ED:09:BF
X509v3 Authority Key Identifier:
keyid:6C:89:0E:F6:A8:8A:B3:3F:A5:A2:06:76:07:68:DD:32:51:C2:38:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/OCK0xPSUR6N0XAXrrNIoVZTtCb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.224.0/22
193.93.181.0/24
IPv6:
2a0b:7cc0::/29
Signature Algorithm: sha256WithRSAEncryption
9a:ba:03:0e:1e:a4:b4:6e:a3:d0:c1:d9:cf:74:ed:35:dd:35:
3d:10:ed:c4:8a:c9:41:63:fe:d0:1e:c4:1a:da:17:c0:dc:a6:
e9:ac:20:d2:5c:5c:a0:e3:bd:29:1f:33:ec:b3:bd:da:3e:2c:
e9:7c:0e:58:88:d8:0e:96:c4:29:35:b8:e7:c7:e8:01:47:0b:
13:1d:a0:2b:33:10:8f:67:51:81:65:84:f8:9a:d5:5e:d9:5d:
9e:ec:df:09:8c:96:56:a6:3e:10:c3:8f:5b:17:33:cf:93:31:
cb:a5:65:72:cc:6e:aa:e0:a9:ed:c3:36:a3:bc:67:f9:ab:20:
fd:d6:fa:e5:fd:27:67:f0:20:b8:ed:35:80:8a:a1:f8:ef:ca:
9f:37:11:78:b1:19:ee:ee:9d:02:4d:3f:bd:db:d3:08:ce:f2:
ec:76:aa:50:cd:48:18:df:c3:a7:93:5d:a3:90:06:e0:32:f6:
ca:ac:34:71:b1:09:11:4f:85:ce:08:c1:e4:59:de:fa:d9:a0:
f0:78:b0:63:4e:68:4c:ae:00:1c:e9:6f:d8:ae:52:d3:f6:cf:
85:86:c9:c8:54:28:6e:a4:3a:ee:ed:23:1f:bd:78:61:28:1d:
0e:61:5e:65:11:90:e2:5b:76:14:1b:df:1b:ed:e4:15:87:ce:
1e:32:41:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:35:41 2025 by rpki-client