Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/j8oNt9hANamkwiamin0TpTWazBY.roa
File: j8oNt9hANamkwiamin0TpTWazBY.roa (raw, json)
Hash identifier: subsEJxSVKPKyiPGritcz7aS2vI4yQ6MWbUH2Gn9VAA=
Subject key identifier: 8F:CA:0D:B7:D8:40:35:A9:A4:C2:26:A6:8A:7D:13:A5:35:9A:CC:16
Certificate issuer: /CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Certificate serial: 01981D29F4AD9F08EB0488883C5294B07FDC
Authority key identifier: 84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/j8oNt9hANamkwiamin0TpTWazBY.roa
Signing time: Fri 18 Jul 2025 10:52:25 +0000
ROA not before: Fri 18 Jul 2025 10:52:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202561
IP address blocks: 188.125.161.0/24 maxlen: 24
188.125.167.0/24 maxlen: 24
188.125.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1d:29:f4:ad:9f:08:eb:04:88:88:3c:52:94:b0:7f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Validity
Not Before: Jul 18 10:52:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fca0db7d84035a9a4c226a68a7d13a5359acc16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c2:19:1b:6e:8f:7a:ad:38:5d:d6:ef:a8:43:
fd:52:a8:65:73:89:a8:a9:19:fd:d0:aa:f1:8c:67:
6b:e9:b5:ef:ff:6d:99:aa:49:41:6f:ed:03:68:7a:
60:6f:88:af:f2:32:4d:ab:00:da:18:87:51:4e:bb:
be:d8:19:d9:8f:49:33:f2:0b:40:10:57:43:99:0c:
bb:bc:07:92:b5:b0:69:6c:0e:7c:ca:36:31:e5:80:
79:4e:57:db:cb:67:f3:a5:24:e8:11:ef:ce:06:24:
fa:69:60:84:d1:a3:cd:0f:b2:ac:b9:55:5b:e4:bf:
3d:aa:b5:e4:80:3c:44:ff:a5:19:62:5f:83:75:18:
9e:2e:89:f6:67:b4:fb:17:83:80:f5:7f:eb:3e:6c:
e3:f7:c5:dc:54:97:36:1c:ae:46:2d:03:be:85:5e:
19:91:14:6c:d8:f6:97:5d:82:c8:48:48:b3:c3:b6:
a4:06:86:7f:06:d1:60:6e:1b:05:6b:7f:5f:6d:4c:
1b:c4:32:7e:e8:f7:9b:5d:e7:06:c0:c7:39:95:85:
3e:5f:d1:13:45:12:fe:6b:83:69:47:ce:76:04:a8:
30:cd:14:0c:ff:e9:7c:b0:03:43:71:fe:48:e5:18:
26:65:c0:58:67:bf:ce:5b:eb:24:33:92:90:9a:8c:
ac:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CA:0D:B7:D8:40:35:A9:A4:C2:26:A6:8A:7D:13:A5:35:9A:CC:16
X509v3 Authority Key Identifier:
keyid:84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/j8oNt9hANamkwiamin0TpTWazBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.125.161.0/24
188.125.167.0/24
188.125.169.0/24
Signature Algorithm: sha256WithRSAEncryption
51:8a:d5:21:b2:39:de:3a:35:c7:58:f3:89:05:12:5e:94:ad:
21:8d:b6:d4:0b:e6:51:bb:0b:67:cc:51:76:78:39:3a:d3:2d:
b4:df:79:83:10:8f:0d:63:6d:79:c5:64:fd:c2:ed:1b:c0:cc:
7b:4d:a3:be:87:77:35:73:50:50:d2:77:32:a1:1e:ee:61:e8:
91:04:32:80:ed:75:57:22:fa:e6:0f:33:74:b4:77:73:98:09:
d0:7e:d0:f7:9c:86:81:76:34:14:78:7e:b1:3f:01:da:aa:f5:
35:2c:39:50:0a:a4:46:0d:11:71:cd:0a:10:dd:d2:b4:fd:e6:
f4:05:9e:cb:9e:35:c0:a4:31:63:36:99:ed:06:30:41:00:38:
e0:48:df:49:1e:07:ae:3c:08:06:ea:e2:04:9f:27:da:74:8f:
41:dd:63:95:03:fd:fa:23:72:2a:bb:95:d1:0c:40:22:2d:0d:
3a:ca:d7:b0:dd:c8:82:04:58:a7:95:75:f6:0f:58:1d:59:0b:
1c:f0:a3:3a:61:ed:c4:cc:bb:cc:8f:59:27:68:68:3a:09:18:
b5:ee:70:1d:7b:71:bf:62:53:f1:40:5b:a4:ab:27:48:0d:91:
95:37:18:d6:cd:0d:b2:89:ae:d4:c0:c6:fa:e8:67:16:d2:aa:
0a:36:e2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:04:49 2025 by rpki-client