Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/oGmMcixnFrTKBjPCjzK3BYL36gY.roa
File: oGmMcixnFrTKBjPCjzK3BYL36gY.roa (raw, json)
Hash identifier: FD7RUVxklHsYtfKlfJFF8XR25F5RtIC9RhaY+pNkfWM=
Subject key identifier: A0:69:8C:72:2C:67:16:B4:CA:06:33:C2:8F:32:B7:05:82:F7:EA:06
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 019809B53DAC8F8AC5D8F1D39C8D889C8B75
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/oGmMcixnFrTKBjPCjzK3BYL36gY.roa
Signing time: Mon 14 Jul 2025 16:12:09 +0000
ROA not before: Mon 14 Jul 2025 16:12:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206044
IP address blocks: 185.212.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:b5:3d:ac:8f:8a:c5:d8:f1:d3:9c:8d:88:9c:8b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Jul 14 16:12:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0698c722c6716b4ca0633c28f32b70582f7ea06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:95:e8:1a:92:21:e6:37:4d:be:f1:99:8d:be:
0e:36:a7:93:d3:e5:79:1f:96:38:0b:fd:39:4f:d7:
c4:d5:89:f8:0b:c9:eb:dc:4f:4a:0f:29:f0:0a:8c:
03:58:c7:a0:09:6f:9d:ec:ec:ba:db:bc:e9:46:7e:
b3:63:86:eb:01:86:b7:c3:9e:4c:62:90:e3:9b:a4:
89:c1:ed:e0:67:93:08:1d:3c:3c:89:66:cd:8e:2b:
7d:0b:bc:49:53:41:53:09:78:5f:0e:98:83:fa:98:
3a:76:41:21:ab:ae:e9:2c:23:39:f4:80:96:0d:cd:
af:26:bb:fa:87:93:88:e2:d3:f4:c8:66:72:f2:60:
06:8c:37:10:67:47:83:1a:fb:95:ae:9f:13:d2:ba:
85:26:84:67:b6:85:d8:10:c6:0a:46:14:b8:b6:7d:
20:52:e5:e6:20:7b:31:a5:aa:0c:86:50:e0:ed:d0:
2a:50:79:1e:a6:7c:48:c9:35:c6:e9:96:bb:aa:63:
78:d3:2a:94:e0:75:7c:67:3c:db:c6:e8:ad:a0:8a:
11:0d:e4:4f:5a:75:b2:2f:a7:f5:fa:12:17:72:66:
f9:3d:33:55:e6:bb:5e:8d:6e:38:c1:27:d7:b0:ae:
a3:11:be:37:20:af:00:72:c5:e0:a3:b1:c9:de:be:
25:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:69:8C:72:2C:67:16:B4:CA:06:33:C2:8F:32:B7:05:82:F7:EA:06
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/oGmMcixnFrTKBjPCjzK3BYL36gY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.150.0/24
Signature Algorithm: sha256WithRSAEncryption
05:5c:1f:89:f3:73:89:a0:eb:72:fd:b6:6f:07:4b:b1:f4:70:
b2:bf:dc:1a:b4:fe:6a:45:73:78:8e:67:b6:44:0b:1d:ca:a8:
85:d9:b0:7a:ca:27:57:b9:62:97:44:e4:1f:cc:e9:e4:80:c3:
df:0e:7a:b4:79:16:52:bf:bb:06:87:9b:c3:90:d5:c1:60:41:
14:7d:5f:a4:f7:24:62:64:c5:da:13:d8:6c:79:c5:66:22:5e:
08:e6:2f:70:e9:b0:2b:6d:43:e5:ba:bf:ca:92:a3:87:11:a0:
b6:aa:6a:30:4e:04:80:a1:28:40:07:70:ed:a5:42:23:b9:b2:
d9:20:5b:ef:e3:b2:f2:72:69:be:ba:3a:19:86:78:e5:aa:9e:
f8:c2:73:c0:18:08:ae:34:1e:2a:7f:b9:55:a1:74:31:fb:cb:
59:b1:0e:02:b1:04:95:42:6e:5c:fd:ba:cb:7d:22:be:2d:1f:
d9:0a:63:ca:89:65:e5:27:88:11:db:03:2b:98:fd:da:52:94:
16:ce:39:af:03:2a:04:ca:3c:26:da:b0:27:4a:53:e8:cd:99:
55:79:8d:6b:d7:34:c0:34:a1:8b:36:c3:85:67:91:8a:bd:9c:
71:42:82:36:d0:04:91:0b:90:02:d0:44:fb:4a:87:c5:8c:18:
20:3a:83:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:06:01 2025 by rpki-client