Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/ojHiQO19UWzWeZWUnpfHf7I7cMc.roa
File: ojHiQO19UWzWeZWUnpfHf7I7cMc.roa (raw, json)
Hash identifier: 9VsVu1Joj/Zh9nV4rRjBb7OhHCDd3dk9hkqFPQjM6n0=
Subject key identifier: A2:31:E2:40:ED:7D:51:6C:D6:79:95:94:9E:97:C7:7F:B2:3B:70:C7
Certificate issuer: /CN=155f4949bf7cdacf3e9d4657b08cd84780d41745
Certificate serial: 01974599826D40268F8C040EE0C3CF11DC53
Authority key identifier: 15:5F:49:49:BF:7C:DA:CF:3E:9D:46:57:B0:8C:D8:47:80:D4:17:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FV9JSb982s8-nUZXsIzYR4DUF0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/ojHiQO19UWzWeZWUnpfHf7I7cMc.roa
Signing time: Fri 06 Jun 2025 14:16:17 +0000
ROA not before: Fri 06 Jun 2025 14:16:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203376
IP address blocks: 185.136.200.0/22 maxlen: 22
185.136.200.0/23 maxlen: 23
185.136.200.0/24 maxlen: 24
185.136.202.0/24 maxlen: 24
185.136.203.0/24 maxlen: 24
2a06:ffc0::/29 maxlen: 29
2a06:ffc0::/30 maxlen: 30
2a06:ffc4::/31 maxlen: 31
2a06:ffc6::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/FV9JSb982s8-nUZXsIzYR4DUF0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:99:82:6d:40:26:8f:8c:04:0e:e0:c3:cf:11:dc:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=155f4949bf7cdacf3e9d4657b08cd84780d41745
Validity
Not Before: Jun 6 14:16:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a231e240ed7d516cd67995949e97c77fb23b70c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:58:f2:93:7c:78:85:95:38:77:24:4d:be:ce:
6b:de:91:dd:89:51:df:43:97:55:a1:c0:5a:f9:e0:
c9:0b:58:43:8e:43:d2:d0:7d:f5:bf:dc:b5:bf:d4:
9d:e7:99:2a:c4:9d:9c:77:1d:49:83:6b:19:f0:06:
ee:70:9e:fa:c0:9b:22:d4:41:75:f8:8d:a6:c3:68:
4b:e6:15:dd:5d:e9:3a:57:d8:41:03:a0:09:f4:49:
7c:fb:51:00:98:96:43:88:12:e3:40:6f:f1:2c:d1:
82:4d:1e:16:b6:1f:a7:fa:3d:ad:2f:cc:f1:9b:ab:
5a:19:5d:35:6c:e6:f2:cc:dc:e2:19:56:87:33:4c:
88:93:5b:e1:be:49:3e:0a:5e:19:35:70:01:84:ef:
0e:92:a4:a5:82:d0:8d:73:d2:94:d9:de:84:a8:1e:
e4:14:5a:eb:c8:23:78:0f:d7:88:de:99:85:51:45:
85:84:87:68:9e:a5:04:1c:6f:82:29:fc:79:f7:94:
e7:34:63:32:79:ff:fa:ec:93:d8:d5:9d:5d:8e:3b:
44:54:00:00:1a:e1:49:03:1d:13:c0:c3:7e:2a:13:
31:7a:56:a0:6e:87:b1:27:4f:91:30:86:5e:b7:ea:
f2:f0:6e:2c:66:9d:7b:a7:cd:98:ae:22:2b:a9:fc:
9a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:31:E2:40:ED:7D:51:6C:D6:79:95:94:9E:97:C7:7F:B2:3B:70:C7
X509v3 Authority Key Identifier:
keyid:15:5F:49:49:BF:7C:DA:CF:3E:9D:46:57:B0:8C:D8:47:80:D4:17:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FV9JSb982s8-nUZXsIzYR4DUF0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/ojHiQO19UWzWeZWUnpfHf7I7cMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.200.0/22
IPv6:
2a06:ffc0::/29
Signature Algorithm: sha256WithRSAEncryption
55:92:72:b4:1a:2e:bd:f4:e7:40:df:69:a4:8a:41:76:92:4e:
ec:cd:ad:5a:31:c0:10:94:06:30:a1:03:32:d5:58:1c:cc:47:
4b:f5:d6:69:5d:32:f5:d4:fa:29:48:ce:e4:1e:43:c8:52:34:
fa:2a:c6:0c:65:1b:47:c4:79:49:fe:90:6f:c1:d0:09:f3:48:
7c:e5:2c:a2:8e:fa:6e:3d:20:b5:56:20:ad:4b:be:31:ae:4a:
71:aa:8e:f6:ee:5c:2f:39:97:a4:bc:f3:a5:fc:91:f3:e4:65:
03:27:16:8c:b3:60:67:97:a9:ad:51:4d:71:16:fa:e1:9b:b2:
d7:a8:6f:c8:50:57:4a:4d:f3:0c:00:e0:6f:5e:8e:09:65:ac:
96:23:2a:98:cd:a2:ab:e5:ed:0f:88:e9:82:d7:c9:3a:2d:02:
14:c8:46:ba:eb:83:37:52:25:f2:1b:cb:e9:89:1e:45:95:0d:
c0:83:86:ac:5b:b9:04:2c:0f:b2:3a:00:44:a4:ce:54:3a:f9:
be:74:60:1a:6e:c3:2a:90:2d:87:0a:5d:55:1d:22:68:85:2e:
c4:76:78:6f:80:64:ef:dd:0a:55:59:d5:fc:07:ea:d7:39:36:
e0:22:47:fd:c6:a0:ce:2f:81:80:91:8b:10:31:33:6c:cf:15:
3c:13:49:e5
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZdFmYJtQCaPjAQO4MPPEdxTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1NWY0OTQ5YmY3Y2RhY2YzZTlkNDY1N2IwOGNkODQ3ODBk
NDE3NDUwHhcNMjUwNjA2MTQxNjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjMxZTI0MGVkN2Q1MTZjZDY3OTk1OTQ5ZTk3Yzc3ZmIyM2I3MGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Vjyk3x4hZU4dyRNvs5r3pHdiVHf
Q5dVocBa+eDJC1hDjkPS0H31v9y1v9Sd55kqxJ2cdx1Jg2sZ8AbucJ76wJsi1EF1
+I2mw2hL5hXdXek6V9hBA6AJ9El8+1EAmJZDiBLjQG/xLNGCTR4Wth+n+j2tL8zx
m6taGV01bObyzNziGVaHM0yIk1vhvkk+Cl4ZNXABhO8OkqSlgtCNc9KU2d6EqB7k
FFrryCN4D9eI3pmFUUWFhIdonqUEHG+CKfx595TnNGMyef/67JPY1Z1djjtEVAAA
GuFJAx0TwMN+KhMxelagboexJ0+RMIZet+ry8G4sZp17p82YriIrqfyaeQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFKIx4kDtfVFs1nmVlJ6Xx3+yO3DHMB8GA1UdIwQY
MBaAFBVfSUm/fNrPPp1GV7CM2EeA1BdFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlY5SlNiOTgyczgtblVaWHNJellSNERVRjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC84ZjYwMWUtYzU2Zi00MGQ0LTlhZDUt
MWJjZTNiYzY3OGVkLzEvb2pIaVFPMTlVV3pXZVpXVW5wZkhmN0k3Y01jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC84ZjYwMWUtYzU2Zi00MGQ0LTlhZDUtMWJjZTNiYzY3OGVk
LzEvRlY5SlNiOTgyczgtblVaWHNJellSNERVRjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuYjIMA0E
AgACMAcDBQMqBv/AMA0GCSqGSIb3DQEBCwUAA4IBAQBVknK0Gi699OdA32mkikF2
kk7sza1aMcAQlAYwoQMy1VgczEdL9dZpXTL11PopSM7kHkPIUjT6KsYMZRtHxHlJ
/pBvwdAJ80h85SyijvpuPSC1ViCtS74xrkpxqo727lwvOZekvPOl/JHz5GUDJxaM
s2Bnl6mtUU1xFvrhm7LXqG/IUFdKTfMMAOBvXo4JZayWIyqYzaKr5e0PiOmC18k6
LQIUyEa664M3UiXyG8vpiR5FlQ3Ag4asW7kELA+yOgBEpM5UOvm+dGAabsMqkC2H
Cl1VHSJohS7EdnhvgGTv3QpVWdX8B+rXOTbgIkf9xqDOL4GAkYsQMTNszxU8E0nl
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:48:53 2025 by rpki-client