Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/uG7dOE8txFbtA083hqiiPmz-wNo.roa
File: uG7dOE8txFbtA083hqiiPmz-wNo.roa (raw, json)
Hash identifier: +Kjd4p0Rj4WqNIufiKEaL7E/obgt+Fkv7edrXdKmLVo=
Subject key identifier: B8:6E:DD:38:4F:2D:C4:56:ED:03:4F:37:86:A8:A2:3E:6C:FE:C0:DA
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019813BBD1AB38BDEFA2085617EFDEB17777
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/uG7dOE8txFbtA083hqiiPmz-wNo.roa
Signing time: Wed 16 Jul 2025 14:55:32 +0000
ROA not before: Wed 16 Jul 2025 14:55:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210956
IP address blocks: 170.168.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:13:bb:d1:ab:38:bd:ef:a2:08:56:17:ef:de:b1:77:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Jul 16 14:55:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b86edd384f2dc456ed034f3786a8a23e6cfec0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:86:9f:eb:dc:9c:d2:27:1d:08:39:2e:b9:0f:
c3:30:e0:4e:dd:90:6b:3b:97:63:b7:36:2d:cc:12:
05:5d:29:47:3a:c6:1d:42:57:2e:35:93:d6:14:a0:
1c:60:9a:82:81:61:24:8f:ba:fb:71:e5:51:a2:13:
92:b2:5d:80:09:ae:27:62:78:21:da:29:4d:bb:06:
a3:6f:23:21:f8:a1:9c:da:f7:d2:b9:19:f6:ba:83:
1e:85:46:8c:ee:84:a5:31:bc:e3:01:d8:53:e6:49:
3f:a9:df:93:22:ce:4a:a7:50:42:26:a3:72:99:77:
21:98:fb:b5:58:ee:73:21:49:03:1e:9c:36:94:32:
07:f9:52:6b:70:85:12:3c:95:10:a5:6e:5d:ea:70:
6c:8a:a8:73:18:5a:56:fc:ab:b9:1c:49:f1:3a:39:
15:91:62:6e:f6:e4:95:1f:4d:96:3f:d5:56:b7:2b:
81:9e:fb:b5:82:5e:b5:f2:d2:75:0c:4a:c5:88:df:
6f:1f:f8:15:e9:6a:22:f6:65:d6:b2:f5:73:d9:0a:
e4:0a:b8:0d:70:6b:b6:1b:ae:a3:aa:d4:0f:dd:1d:
f0:87:6c:90:d2:b1:f5:82:1f:7c:b3:f3:ae:9f:89:
54:29:6b:33:61:4c:2c:84:a3:a0:4f:c2:9f:0e:3d:
ec:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6E:DD:38:4F:2D:C4:56:ED:03:4F:37:86:A8:A2:3E:6C:FE:C0:DA
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/uG7dOE8txFbtA083hqiiPmz-wNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.8.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:78:2e:ab:0f:c6:bb:5a:db:08:53:90:5d:81:ea:d6:76:2b:
de:f0:e4:e2:a4:e3:a9:02:27:6f:06:ea:07:d1:5f:75:21:d4:
52:12:ba:28:b3:83:4b:4e:31:f4:9c:18:75:db:c9:81:62:d3:
75:40:77:24:fb:36:77:56:33:8e:1f:6f:39:10:85:89:32:65:
a0:2b:ae:dc:a0:d4:59:e2:33:46:e2:fe:56:a3:b7:fe:5f:40:
c8:d8:7c:f7:01:69:c2:25:39:d6:52:4a:61:bf:74:3a:13:73:
0c:a9:11:77:13:26:a1:6a:42:0b:8b:d9:6e:45:ab:95:4a:4b:
dd:ad:4d:cf:ea:bc:32:0b:6f:37:c0:f4:26:06:d4:b2:9d:84:
4b:5a:b6:bf:c9:4d:67:24:36:c2:8d:5a:a1:f9:43:75:ad:73:
3e:2e:ad:66:d4:d2:57:be:a2:33:95:a9:79:a3:b9:d3:38:8a:
cb:d2:95:7e:27:b2:f3:f2:3a:82:bd:3c:5e:60:9e:6e:85:78:
c2:a8:59:5e:e2:af:11:4c:c8:ec:0a:8a:54:d8:3e:05:49:c7:
46:4d:17:cb:05:d0:03:79:c2:ff:13:f1:09:dc:ed:65:d2:72:
47:0a:b4:21:c1:d5:6d:22:98:8f:2c:f0:e2:78:cb:5f:e8:a0:
b3:2c:0a:26
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZgTu9GrOL3voghWF+/esXd3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh
MGYwY2UwHhcNMjUwNzE2MTQ1NTMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODZlZGQzODRmMmRjNDU2ZWQwMzRmMzc4NmE4YTIzZTZjZmVjMGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4af69yc0icdCDkuuQ/DMOBO3ZBr
O5djtzYtzBIFXSlHOsYdQlcuNZPWFKAcYJqCgWEkj7r7ceVRohOSsl2ACa4nYngh
2ilNuwajbyMh+KGc2vfSuRn2uoMehUaM7oSlMbzjAdhT5kk/qd+TIs5Kp1BCJqNy
mXchmPu1WO5zIUkDHpw2lDIH+VJrcIUSPJUQpW5d6nBsiqhzGFpW/Ku5HEnxOjkV
kWJu9uSVH02WP9VWtyuBnvu1gl618tJ1DErFiN9vH/gV6Woi9mXWsvVz2QrkCrgN
cGu2G66jqtQP3R3wh2yQ0rH1gh98s/Oun4lUKWszYUwshKOgT8KfDj3siwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLhu3ThPLcRW7QNPN4aooj5s/sDaMB8GA1UdIwQY
MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et
YTY2N2JiNzY1MDYwLzEvdUc3ZE9FOHR4RmJ0QTA4M2hxaWlQbXotd05vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw
LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqqgIMA0G
CSqGSIb3DQEBCwUAA4IBAQBNeC6rD8a7WtsIU5BdgerWdive8OTipOOpAidvBuoH
0V91IdRSEroos4NLTjH0nBh128mBYtN1QHck+zZ3VjOOH285EIWJMmWgK67coNRZ
4jNG4v5Wo7f+X0DI2Hz3AWnCJTnWUkphv3Q6E3MMqRF3EyahakILi9luRauVSkvd
rU3P6rwyC283wPQmBtSynYRLWra/yU1nJDbCjVqh+UN1rXM+Lq1m1NJXvqIzlal5
o7nTOIrL0pV+J7Lz8jqCvTxeYJ5uhXjCqFle4q8RTMjsCopU2D4FScdGTRfLBdAD
ecL/E/EJ3O1l0nJHCrQhwdVtIpiPLPDieMtf6KCzLAom
-----END CERTIFICATE-----
Generated at Wed Jul 23 12:15:41 2025 by rpki-client