Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/OcyVVi-jBM0G3opoob8aVpqeL7k.roa
File: OcyVVi-jBM0G3opoob8aVpqeL7k.roa (raw, json)
Hash identifier: Lmj/ERqEQsOvuljDrquPNBuk7nAamhzs4Ctv+M+OeMk=
Subject key identifier: 39:CC:95:56:2F:A3:04:CD:06:DE:8A:68:A1:BF:1A:56:9A:9E:2F:B9
Certificate issuer: /CN=e11ce6b7dd9a6ac0b324ba5ad873b0af46a392d4
Certificate serial: 01982C48CE7B927AE82C91D2CAC0634C40DE
Authority key identifier: E1:1C:E6:B7:DD:9A:6A:C0:B3:24:BA:5A:D8:73:B0:AF:46:A3:92:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/OcyVVi-jBM0G3opoob8aVpqeL7k.roa
Signing time: Mon 21 Jul 2025 09:20:25 +0000
ROA not before: Mon 21 Jul 2025 09:20:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215047
IP address blocks: 185.218.225.0/24 maxlen: 24
2a14:5fc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2c:48:ce:7b:92:7a:e8:2c:91:d2:ca:c0:63:4c:40:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e11ce6b7dd9a6ac0b324ba5ad873b0af46a392d4
Validity
Not Before: Jul 21 09:20:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39cc95562fa304cd06de8a68a1bf1a569a9e2fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d4:c3:a7:a3:09:bf:64:97:3d:33:5a:d7:58:
87:24:47:59:c0:c7:44:f2:a1:52:d6:c2:29:71:d0:
20:bf:e1:10:18:ed:61:1e:60:78:71:9b:c3:82:92:
64:fc:3a:90:a3:4d:11:b0:22:9c:cb:76:db:4c:83:
65:f9:f8:77:38:69:fc:42:c9:4f:53:91:3f:80:74:
8c:dd:48:b9:a9:70:88:2f:0c:e2:83:02:0c:f5:6b:
37:4a:5c:4c:8f:bb:7e:2e:e1:29:42:eb:94:9f:79:
98:72:eb:e4:f0:e0:67:12:11:ec:29:5e:7a:04:88:
00:48:50:3e:bd:71:2d:b2:ea:c2:29:0a:d2:f8:06:
1c:e2:b3:76:f3:50:7a:44:48:d3:ad:48:19:99:7a:
83:8c:b1:98:62:00:69:b3:e4:39:4b:fd:03:7d:06:
95:c9:2c:f2:07:07:82:f3:a2:a0:c7:e5:7c:eb:56:
8e:68:bd:dc:88:a9:98:90:46:d7:17:23:14:17:30:
91:4d:23:ec:e1:b2:4b:19:df:75:00:e5:68:aa:2b:
9c:75:c2:ad:39:ea:93:ee:36:66:4e:a6:55:f3:88:
43:48:69:b4:86:f2:48:db:2f:ec:7b:e8:1d:1e:e6:
98:e8:ef:25:a1:7a:1c:0e:e1:ae:13:d1:26:43:53:
47:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CC:95:56:2F:A3:04:CD:06:DE:8A:68:A1:BF:1A:56:9A:9E:2F:B9
X509v3 Authority Key Identifier:
keyid:E1:1C:E6:B7:DD:9A:6A:C0:B3:24:BA:5A:D8:73:B0:AF:46:A3:92:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/OcyVVi-jBM0G3opoob8aVpqeL7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.225.0/24
IPv6:
2a14:5fc0::/29
Signature Algorithm: sha256WithRSAEncryption
48:8d:97:5b:7e:36:70:ec:70:63:70:19:55:6f:f0:82:62:4f:
c8:2b:aa:46:8a:14:3c:bf:d4:a9:c9:f7:b1:85:61:1d:ac:4a:
15:67:cb:39:1a:75:b5:ab:da:9a:2f:7f:07:3a:e6:a0:29:2c:
4a:69:86:f3:eb:9d:14:fa:86:8b:b0:77:68:de:5b:3b:40:83:
0c:d4:34:bc:86:74:c0:c4:fc:10:1a:55:90:84:80:76:14:99:
be:f3:fb:a4:6d:5a:dd:55:a6:93:ec:b9:3f:99:6a:bd:bd:02:
a5:da:f5:5e:cd:76:3b:9d:2e:54:17:43:54:4a:ab:25:7a:70:
0f:f6:4d:c7:59:74:92:09:60:dd:e8:36:4e:e1:f0:36:f4:36:
cf:9f:cc:31:09:b7:97:6a:0e:5d:6a:ed:ac:0a:41:aa:cb:3c:
1d:79:e2:db:17:0b:12:30:ce:45:ca:3d:82:ce:db:81:07:2f:
df:66:c2:af:ed:b3:ba:c0:52:cc:c2:b7:1a:79:14:3f:b2:86:
c0:72:70:71:49:f3:6b:43:49:cb:30:10:8b:74:fe:71:0c:0e:
12:e6:9f:9e:48:d9:52:16:8f:97:ec:40:52:f8:e1:37:8a:c1:
e9:9e:df:c8:9a:77:e8:aa:d6:b8:2d:97:23:83:19:f2:20:0b:
56:75:f1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 04:24:08 2025 by rpki-client