Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/sk8pbQYZNOfeSY0DtBIzcY4rPAk.roa
File: sk8pbQYZNOfeSY0DtBIzcY4rPAk.roa (raw, json)
Hash identifier: 40BWZYluRIAPPzncJGNkiBWdmBIHVZqa8JYBz4tlV0g=
Subject key identifier: B2:4F:29:6D:06:19:34:E7:DE:49:8D:03:B4:12:33:71:8E:2B:3C:09
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01980D6179BD4816B3E120B051EABC94EB4A
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/sk8pbQYZNOfeSY0DtBIzcY4rPAk.roa
Signing time: Tue 15 Jul 2025 09:19:08 +0000
ROA not before: Tue 15 Jul 2025 09:19:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209183
IP address blocks: 193.233.100.0/24 maxlen: 24
193.233.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0d:61:79:bd:48:16:b3:e1:20:b0:51:ea:bc:94:eb:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jul 15 09:19:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b24f296d061934e7de498d03b41233718e2b3c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5b:fc:e5:9a:b7:12:d4:41:c6:3e:41:51:34:
e9:78:b7:33:3d:7e:4d:07:f8:3f:5a:58:d0:33:77:
44:74:aa:29:9c:46:c0:99:94:c8:ae:dd:f4:cd:fb:
1e:61:90:ad:df:dd:6a:c5:50:ad:ff:0a:c9:8e:3e:
5c:3a:47:8f:48:9f:94:b0:67:f4:7b:a7:7b:91:5b:
40:cf:19:f3:c0:fc:49:a5:7e:25:98:9b:a1:f2:7c:
03:b3:96:48:c4:c0:f8:b3:a6:97:04:07:61:fc:38:
91:f2:82:a7:6b:f7:48:5c:9a:41:ee:6d:cb:35:0e:
00:58:8f:bb:01:e8:48:6c:26:64:79:ef:bb:34:e4:
1e:cd:d3:fc:c4:27:f7:a3:9a:d2:71:61:ea:5a:58:
b8:82:65:1e:eb:2f:cb:c2:3d:bf:e2:7e:73:fe:4e:
e1:b3:eb:2c:59:67:f2:d8:fe:e0:0f:0e:8c:7a:3e:
d2:31:c5:0f:0e:78:5b:32:7b:9b:4b:70:2d:58:47:
fe:86:f2:1a:14:d6:35:d1:4f:dc:5b:9e:dd:98:e1:
03:6c:43:28:6c:1e:d0:7a:95:c1:25:12:97:fa:55:
c0:5d:62:c3:9e:8e:19:17:f7:50:6a:ec:f6:3d:4d:
30:7a:93:21:17:c5:db:9c:7d:f8:3f:83:1e:90:7c:
76:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4F:29:6D:06:19:34:E7:DE:49:8D:03:B4:12:33:71:8E:2B:3C:09
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/sk8pbQYZNOfeSY0DtBIzcY4rPAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.100.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:59:ec:a2:40:ff:01:23:16:02:45:7c:72:0f:ee:9d:d1:1e:
9c:d7:cd:2d:b6:30:3e:a7:fd:9e:39:4c:10:a6:ab:ba:0f:f6:
38:40:e5:c0:38:18:58:7b:a2:48:ce:d9:a0:8b:b8:80:4e:80:
16:e6:f2:69:fa:7e:a2:ba:d1:8e:de:c8:b8:93:80:ce:88:da:
37:96:28:7c:26:a2:22:59:64:45:6d:5c:e1:60:82:4c:c5:bc:
5c:28:fd:17:dd:20:24:58:34:00:0d:e5:f6:87:16:2b:fa:03:
a0:fe:de:07:e8:a9:2d:d8:28:52:5e:e7:81:9a:66:fc:d4:43:
fc:cd:a8:da:12:a9:d7:92:7c:3e:c9:ab:7e:92:ed:dc:1a:c8:
40:e8:c1:20:a6:72:df:b7:42:56:0f:c9:c6:64:91:e3:97:a9:
a1:60:b6:eb:3c:bd:89:62:d4:0c:1c:55:2f:5d:9a:a5:ed:92:
a0:6e:5b:3e:e7:33:2e:97:d6:95:7b:44:e7:bc:9c:bc:0f:23:
50:f3:27:51:51:c4:9b:02:b5:ea:8c:00:78:a1:bc:07:90:af:
18:ce:0c:e5:92:52:59:66:0c:fc:1e:14:81:45:3a:b3:a6:8b:
14:e5:b2:c8:3a:85:8a:6c:ce:4a:16:fd:7a:ef:1b:e3:89:df:
eb:48:2e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:36:39 2025 by rpki-client