Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/ykCEDMwt0gSfj-8Dck34ZSuRxP4.roa
File: ykCEDMwt0gSfj-8Dck34ZSuRxP4.roa (raw, json)
Hash identifier: Al22oIYh8E5aXL0ywXKSqrnxU2vRdMQS4zIM1t7Q1JQ=
Subject key identifier: CA:40:84:0C:CC:2D:D2:04:9F:8F:EF:03:72:4D:F8:65:2B:91:C4:FE
Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Certificate serial: 019856D6B7BD0B8EF2BF503BB4409AB265D5
Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/ykCEDMwt0gSfj-8Dck34ZSuRxP4.roa
Signing time: Tue 29 Jul 2025 15:39:29 +0000
ROA not before: Tue 29 Jul 2025 15:39:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 185.114.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:d6:b7:bd:0b:8e:f2:bf:50:3b:b4:40:9a:b2:65:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Validity
Not Before: Jul 29 15:39:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca40840ccc2dd2049f8fef03724df8652b91c4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:33:53:c1:76:c7:13:a0:9f:ba:2a:a3:13:fb:
62:3e:d6:64:88:8c:45:da:e1:d2:2e:e2:11:d9:c3:
bd:8d:48:6e:10:45:b7:9b:20:74:79:3d:b0:e6:48:
dc:19:9e:57:91:10:ef:61:c9:18:9d:16:b1:6b:9c:
de:b9:1e:1d:ef:0d:bb:4b:5a:c6:c1:70:85:b7:8a:
f8:91:5d:7b:b7:57:04:77:d7:32:8e:48:73:7d:07:
8b:80:e6:76:53:aa:29:fc:be:30:f6:97:a9:5f:59:
b1:fd:a7:29:44:73:80:26:d1:4b:fc:ec:a3:d9:bf:
92:96:42:0f:bd:23:eb:bf:ec:77:5b:7f:a6:b9:5b:
7b:15:77:70:be:f3:17:67:d7:2f:76:34:21:2a:cf:
55:3f:e4:64:d0:76:bf:2e:bc:ad:a7:e8:d5:1d:ce:
9b:83:7a:97:02:6d:81:7c:2e:22:90:9f:37:18:fb:
17:29:a6:29:7b:a8:39:fa:fc:3a:31:e4:ff:a6:e3:
8e:c7:a7:77:53:bb:e0:9b:22:6c:b2:8c:5f:5d:f7:
0d:5b:09:3b:22:0f:60:da:f6:6b:57:b5:73:05:cb:
8a:50:de:1d:92:66:00:bc:bb:f6:5c:c4:31:12:a0:
29:ec:73:02:e2:fa:1e:ba:f8:90:a9:7e:04:90:7c:
c6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:40:84:0C:CC:2D:D2:04:9F:8F:EF:03:72:4D:F8:65:2B:91:C4:FE
X509v3 Authority Key Identifier:
keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/ykCEDMwt0gSfj-8Dck34ZSuRxP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.35.0/24
Signature Algorithm: sha256WithRSAEncryption
93:30:08:aa:4f:6d:61:8b:2a:c9:bc:18:e6:a6:02:5e:4e:10:
4e:d7:71:ed:87:2d:e6:b1:82:d2:8b:f8:3c:24:c3:bd:88:ef:
5c:6a:84:5d:5b:cc:09:ad:fa:72:11:b0:aa:b4:6e:b7:a6:da:
c9:41:19:cf:a7:3d:de:4b:89:16:9b:ea:87:18:40:b6:e8:1c:
4a:2e:c1:fb:7d:29:33:5f:62:d3:36:28:ed:83:97:30:99:fb:
ef:a8:f5:03:3c:ef:e8:e2:dd:22:fd:d4:86:bb:13:9f:ba:52:
4b:f1:29:54:3f:ce:ea:f3:85:35:50:79:ea:bc:37:2d:13:69:
26:8b:c3:78:0f:56:fe:a1:ed:e2:07:5f:86:cf:0e:fe:16:51:
ee:50:34:6b:17:bb:1e:65:65:df:85:01:8a:89:b3:91:7c:6f:
8b:8b:30:32:4d:3c:a8:96:d4:d6:59:06:b2:d3:26:2f:00:7e:
96:43:01:50:48:38:70:b1:59:29:e2:19:3f:dc:54:4d:20:80:
85:2f:de:d1:99:30:6c:ae:7b:fa:27:05:38:16:c9:7e:b2:37:
b5:e5:6e:af:11:a1:95:6b:dd:ac:5b:ec:26:bc:88:12:90:47:
9c:6d:6a:bf:a7:65:0e:6e:62:e7:a5:09:f4:df:2c:d9:dc:32:
65:19:aa:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:10:27 2025 by rpki-client