Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/8PxOvmgBEGk1dvdpAuCMyuAS_zU.roa
File: 8PxOvmgBEGk1dvdpAuCMyuAS_zU.roa (raw, json)
Hash identifier: IZyNSWwzA8kml+4/83o4BNcAjIyr4gruiC7sv+HeyL8=
Subject key identifier: F0:FC:4E:BE:68:01:10:69:35:76:F7:69:02:E0:8C:CA:E0:12:FF:35
Certificate issuer: /CN=e8cfabb2b5d78ff9fbbdc1e37dd37b6fc34f11d9
Certificate serial: 01981D36C623192A7A769EE0D3389B85CE56
Authority key identifier: E8:CF:AB:B2:B5:D7:8F:F9:FB:BD:C1:E3:7D:D3:7B:6F:C3:4F:11:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6M-rsrXXj_n7vcHjfdN7b8NPEdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/8PxOvmgBEGk1dvdpAuCMyuAS_zU.roa
Signing time: Fri 18 Jul 2025 11:06:25 +0000
ROA not before: Fri 18 Jul 2025 11:06:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214273
IP address blocks: 45.94.184.0/24 maxlen: 24
45.94.185.0/24 maxlen: 24
194.164.176.0/24 maxlen: 24
194.164.177.0/24 maxlen: 24
2a01:f680:10::/48 maxlen: 48
2a01:f680:11::/48 maxlen: 48
2a01:f680:20::/48 maxlen: 48
2a01:f680:21::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6M-rsrXXj_n7vcHjfdN7b8NPEdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1d:36:c6:23:19:2a:7a:76:9e:e0:d3:38:9b:85:ce:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8cfabb2b5d78ff9fbbdc1e37dd37b6fc34f11d9
Validity
Not Before: Jul 18 11:06:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0fc4ebe680110693576f76902e08ccae012ff35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2b:fb:ec:48:a3:c5:7f:a3:cc:f1:7a:28:0f:
bd:4b:75:72:4b:29:a9:ae:a6:40:56:da:1e:ff:d6:
71:f9:c4:1a:d6:ae:3e:f9:f7:63:be:2a:ae:2a:72:
a5:00:ca:d4:ef:93:65:ba:41:0a:0c:a9:55:d6:10:
f8:df:ff:6f:50:06:be:f8:ca:71:19:03:e4:b1:4d:
74:6e:59:41:c1:6c:6a:b5:7a:4a:da:e3:68:99:ba:
fd:d3:b4:6c:71:6f:96:d8:59:2f:1c:93:8b:97:d0:
54:2f:bf:a3:47:87:32:c8:f9:9d:b2:82:df:be:f6:
6b:74:29:8f:e2:62:d2:6d:0c:4c:12:b8:f9:4d:50:
ec:8c:2f:8e:3d:bc:c0:3d:b5:83:70:57:67:dc:ec:
a2:a5:d6:3e:d8:01:ab:af:ee:36:04:1b:d6:81:73:
55:29:55:12:01:17:f9:79:ae:09:9c:e7:5e:67:27:
89:a5:17:4e:af:92:c7:49:b0:8d:8a:c9:3a:5f:16:
4a:31:3a:9c:27:7c:f6:c5:be:b3:10:1e:59:02:ca:
3a:6d:95:49:fc:fa:b4:3d:4e:89:f1:f5:2a:12:ed:
df:7d:59:80:e8:02:0c:24:00:d1:3f:10:12:5a:fe:
58:7b:a3:e9:e6:d3:02:c5:2e:b2:9c:af:10:49:cc:
1a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FC:4E:BE:68:01:10:69:35:76:F7:69:02:E0:8C:CA:E0:12:FF:35
X509v3 Authority Key Identifier:
keyid:E8:CF:AB:B2:B5:D7:8F:F9:FB:BD:C1:E3:7D:D3:7B:6F:C3:4F:11:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6M-rsrXXj_n7vcHjfdN7b8NPEdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/8PxOvmgBEGk1dvdpAuCMyuAS_zU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.184.0/23
194.164.176.0/23
IPv6:
2a01:f680:10::/47
2a01:f680:20::/47
Signature Algorithm: sha256WithRSAEncryption
68:17:db:40:1e:d3:9b:b6:2f:4b:f0:58:1e:e0:d2:88:a2:e1:
bf:d9:62:b9:f9:4a:37:10:57:0d:17:f4:ab:92:b3:e3:b0:55:
8c:09:3e:8e:70:40:43:76:17:5c:76:15:df:21:7b:49:a5:67:
b5:ae:19:e3:c7:ba:e5:23:20:f5:21:02:79:a2:3e:7d:77:63:
d1:7f:76:e0:f1:7d:27:a3:a9:25:e1:7a:6d:2c:9d:ad:b3:94:
c1:fe:02:59:ca:03:2c:c3:88:85:c7:df:46:c8:92:63:3b:28:
21:58:5d:ce:de:db:a1:32:fe:7b:5a:70:ad:6a:19:3c:c4:92:
5e:75:b2:ec:2d:90:dc:1d:cf:d7:1f:aa:0d:df:9b:c3:65:5e:
cc:5b:32:03:21:2e:ec:c2:d4:12:79:5f:76:79:ba:b2:b9:4a:
67:5f:c6:39:41:e9:c4:d7:90:84:77:01:63:82:54:15:27:93:
26:c1:65:e8:2f:3b:ff:e7:13:a9:3e:0f:8b:31:a0:33:32:d0:
1a:fd:9a:b8:70:af:76:97:7c:94:42:f4:0d:c5:5a:3d:4d:ee:
6c:fc:82:72:ca:bb:02:e8:83:b1:f3:cc:8f:54:a8:6f:8f:5f:
d6:e0:1b:15:64:87:e7:80:a5:3d:2d:fb:f6:72:a0:31:0d:76:
3b:19:e9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:49:03 2025 by rpki-client