Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/Dex_n_k-87_gKk-kcEbrOiGhsDE.roa
File: Dex_n_k-87_gKk-kcEbrOiGhsDE.roa (raw, json)
Hash identifier: I+5HrvSZROiMeA2q8oaiOPlDXynPqoc3wBpebl+G13s=
Subject key identifier: 0D:EC:7F:9F:F9:3E:F3:BF:E0:2A:4F:A4:70:46:EB:3A:21:A1:B0:31
Certificate issuer: /CN=14e16846d7c22d0fc3ad884c94c034dd7bb35f79
Certificate serial: 0198E1E873A03C88F3CD223F7273D1FC28E6
Authority key identifier: 14:E1:68:46:D7:C2:2D:0F:C3:AD:88:4C:94:C0:34:DD:7B:B3:5F:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOFoRtfCLQ_DrYhMlMA03XuzX3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/Dex_n_k-87_gKk-kcEbrOiGhsDE.roa
Signing time: Mon 25 Aug 2025 15:46:04 +0000
ROA not before: Mon 25 Aug 2025 15:46:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206522
IP address blocks: 185.184.12.0/24 maxlen: 24
185.184.13.0/24 maxlen: 24
185.184.14.0/24 maxlen: 24
185.184.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FOFoRtfCLQ_DrYhMlMA03XuzX3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e1:e8:73:a0:3c:88:f3:cd:22:3f:72:73:d1:fc:28:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14e16846d7c22d0fc3ad884c94c034dd7bb35f79
Validity
Not Before: Aug 25 15:46:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0dec7f9ff93ef3bfe02a4fa47046eb3a21a1b031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:32:d9:d4:32:b8:8f:47:38:e5:da:ca:db:66:
b3:26:4d:0a:93:02:d2:af:cf:86:11:04:28:ac:92:
12:ea:9f:2b:4a:bc:96:10:38:eb:35:ea:8c:c3:41:
f9:3f:b5:55:62:db:f5:08:be:85:26:13:32:f9:91:
e5:26:32:9c:94:7a:d4:b7:7c:ea:1d:d1:e2:f5:44:
11:22:40:43:59:14:13:95:87:51:3a:89:3b:00:36:
97:0f:b9:14:1a:b2:cd:23:5e:eb:fa:f4:ea:a1:16:
fb:6c:e9:e4:ac:54:77:41:59:26:aa:fb:9b:d4:d6:
49:c8:5a:e3:99:37:96:07:3e:b8:ae:7e:50:90:ec:
ee:3a:e9:4c:5b:be:4e:54:69:02:4e:d8:9b:22:76:
36:66:cd:7e:cf:3f:b7:68:78:cf:0b:c8:5c:f9:07:
01:6c:6e:2e:cc:74:b5:7d:a4:d2:e0:ca:68:92:d5:
0d:89:24:da:f3:56:dc:7b:06:18:e1:20:e4:14:0d:
c0:30:31:0e:28:d7:ad:bc:56:99:ee:e6:d4:a1:83:
c4:35:07:75:ce:cd:9b:18:d3:71:f8:46:b3:a9:33:
4f:49:10:d9:1f:e7:2e:26:34:9a:c5:e0:13:f0:5d:
f5:28:58:8f:7a:47:a2:94:63:f5:e8:ca:5a:62:bf:
af:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EC:7F:9F:F9:3E:F3:BF:E0:2A:4F:A4:70:46:EB:3A:21:A1:B0:31
X509v3 Authority Key Identifier:
keyid:14:E1:68:46:D7:C2:2D:0F:C3:AD:88:4C:94:C0:34:DD:7B:B3:5F:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOFoRtfCLQ_DrYhMlMA03XuzX3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/Dex_n_k-87_gKk-kcEbrOiGhsDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.12.0/22
Signature Algorithm: sha256WithRSAEncryption
44:3d:86:e6:ae:37:75:b5:0f:d9:29:17:af:73:3a:b5:6c:09:
f3:26:a1:4e:8a:6d:43:1b:a7:db:e1:55:39:3b:12:0e:ad:c6:
42:e8:ed:0e:79:fb:08:4b:89:57:03:7b:60:7f:29:af:03:a8:
e1:18:fd:6e:88:d5:a9:77:3d:fb:27:c3:8b:f2:b9:b1:8f:fb:
0d:c3:62:fe:da:c5:d8:c2:99:4d:65:ad:64:4f:59:4d:f7:44:
ef:e0:83:f5:6c:a6:eb:e9:fe:66:80:74:d5:d1:07:c8:8d:7e:
8c:8c:e0:a0:eb:f7:53:cf:49:12:78:15:ae:a3:94:cb:21:6b:
62:7f:55:27:5d:b6:b6:03:ca:c7:6a:77:b3:d9:9c:b9:2e:69:
07:2d:0f:02:a7:78:13:94:a8:75:12:61:54:21:f3:7e:b0:21:
23:b7:05:53:fc:4a:c2:12:f6:21:42:ce:01:a4:4a:9a:f8:b9:
5e:26:3d:72:46:08:f5:6e:a2:a6:d0:15:ca:8b:41:90:d5:17:
5f:5e:1f:c6:9e:6c:8c:10:48:80:71:46:b6:49:68:02:02:36:
ff:97:7f:b1:2c:13:ee:c9:ec:af:2b:7f:92:be:72:1e:61:c2:
0b:ab:e3:37:b0:40:0c:a6:42:30:7a:ab:9f:3e:09:53:0f:cf:
a8:a2:cc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 05:01:53 2025 by rpki-client