
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/i8QIKVr-kmlvuCkuizAIONLnhdk.roa
File: i8QIKVr-kmlvuCkuizAIONLnhdk.roa (raw, json)
Hash identifier: lZwDrQJtzhhuKCMK/UZyBAvEUgDI4pYdH5FvuBB4DJU=
Subject key identifier: 8B:C4:08:29:5A:FE:92:69:6F:B8:29:2E:8B:30:08:38:D2:E7:85:D9
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019816B4841B58300F2C6755D931BEBC6A35
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/i8QIKVr-kmlvuCkuizAIONLnhdk.roa
Signing time: Thu 17 Jul 2025 04:46:25 +0000
ROA not before: Thu 17 Jul 2025 04:46:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205220
IP address blocks: 46.102.237.0/24 maxlen: 24
94.176.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:16:b4:84:1b:58:30:0f:2c:67:55:d9:31:be:bc:6a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 17 04:46:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8bc408295afe92696fb8292e8b300838d2e785d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2a:5d:a5:14:3b:09:39:4f:92:88:b9:87:7d:
e2:99:41:b4:c4:75:22:6b:9a:c7:50:83:7e:e7:18:
d5:03:1f:14:8c:b4:0c:77:fd:68:1c:c6:3a:f0:52:
1b:7a:04:5e:62:9c:22:fa:46:a1:72:27:65:0f:31:
3c:ae:a4:d6:a3:66:a7:da:ba:58:53:0e:8b:d9:ed:
b7:43:9e:54:f5:30:3d:77:6e:83:59:17:82:79:ef:
f0:dd:dd:1e:15:bc:f6:cb:b8:70:f1:6f:03:ff:42:
38:d4:e6:e8:46:3b:c6:1c:96:fc:e5:bf:d8:0b:89:
13:b2:77:1d:92:31:66:45:a2:a7:39:a6:6c:75:b5:
94:24:9d:f6:55:c0:da:31:58:91:bc:61:52:f2:f1:
26:e8:31:e5:a0:34:75:83:4b:a0:6a:db:d1:7e:d4:
78:5f:3b:1e:e9:90:c5:f6:c8:e9:12:39:a3:81:32:
1e:c6:6f:23:86:01:9a:aa:ad:a2:75:96:d1:e6:47:
e2:8a:8d:44:72:b3:e0:9f:9a:e7:ae:82:80:0e:9f:
e8:b1:1d:6f:e5:de:19:f8:18:ae:49:e0:c2:b3:6a:
c3:db:a2:49:3d:de:2f:de:07:cf:26:eb:2d:05:95:
f1:4f:b2:a1:64:42:2c:22:c1:96:a5:b7:f2:5c:97:
c5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C4:08:29:5A:FE:92:69:6F:B8:29:2E:8B:30:08:38:D2:E7:85:D9
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/i8QIKVr-kmlvuCkuizAIONLnhdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.237.0/24
94.176.215.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:98:60:b1:7b:94:57:f5:67:72:87:71:93:9d:19:d2:95:12:
2a:71:e0:c3:db:4e:e8:9f:a5:aa:90:0d:27:c0:58:f5:71:e9:
a5:d2:16:93:7d:e3:64:fa:66:8a:45:3a:53:40:fb:b0:c6:3b:
93:ea:76:14:fb:e3:92:f6:8d:dc:e7:bf:e8:e1:18:67:02:42:
6c:ae:32:a7:47:90:61:36:9f:23:1a:63:21:bc:0d:3a:cf:3c:
fb:88:4e:46:94:24:e9:bf:28:4b:f8:7b:81:6e:4e:0e:84:1e:
5b:22:3d:eb:18:40:ab:c7:ce:46:1d:5b:86:8a:9a:6f:66:42:
f1:2d:bd:1e:e9:8d:62:1a:e3:24:a4:a1:e4:b1:d5:6f:61:f1:
d6:15:78:95:ec:ba:f2:8f:16:96:3f:62:ab:ba:e3:4f:17:8b:
10:85:71:5c:1a:12:42:9d:17:49:15:d2:01:07:95:2c:9b:e4:
2a:ff:db:76:f7:30:bc:7c:f4:59:07:c5:9f:2e:80:dc:fa:57:
cb:3c:82:b5:e2:43:06:20:93:b2:46:83:3f:86:1f:9c:09:53:
c4:62:29:ef:fa:bb:5d:66:9b:b3:79:46:2f:88:f2:4b:7a:e6:
12:5d:06:62:72:52:47:3e:0f:2d:32:48:d4:95:8a:9c:3e:2c:
99:c3:d8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:56:10 2025 by rpki-client