Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i18UwsW836pXDqDI-_udK1tEZ-Y.roa
File: i18UwsW836pXDqDI-_udK1tEZ-Y.roa (raw, json)
Hash identifier: 7PmqUHR5yopsMl3jKYP4Y7Ciu3sTdxWLAQhutkIC9xo=
Subject key identifier: 8B:5F:14:C2:C5:BC:DF:AA:57:0E:A0:C8:FB:FB:9D:2B:5B:44:67:E6
Certificate issuer: /CN=8b82433ffe94bf3536fec327543d396158202072
Certificate serial: 019817711CFA504E85511EE62D6FF0E8730E
Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i18UwsW836pXDqDI-_udK1tEZ-Y.roa
Signing time: Thu 17 Jul 2025 08:12:25 +0000
ROA not before: Thu 17 Jul 2025 08:12:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49988
IP address blocks: 85.198.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:17:71:1c:fa:50:4e:85:51:1e:e6:2d:6f:f0:e8:73:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b82433ffe94bf3536fec327543d396158202072
Validity
Not Before: Jul 17 08:12:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b5f14c2c5bcdfaa570ea0c8fbfb9d2b5b4467e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9c:a0:d7:a2:ba:a0:a5:6a:e7:0c:e8:62:a1:
34:cb:a7:6a:85:e2:d7:93:f5:c6:b3:dd:41:5c:db:
f6:ff:da:d8:72:d1:b7:64:db:ab:b5:3d:3e:37:95:
07:6d:10:38:3a:33:36:d8:7d:3e:af:91:0e:be:f1:
2c:27:29:61:21:66:65:2c:a5:2a:e7:65:c7:26:8c:
38:1b:d1:c2:52:7a:50:6e:f2:8b:82:61:ea:78:37:
34:e1:86:e1:be:53:15:d1:64:d3:8a:fd:36:e8:6d:
af:c3:12:db:e9:0b:7b:c1:24:22:d0:1b:71:d4:e8:
14:8c:2e:a5:2c:ce:1a:87:ef:22:3d:89:83:61:0a:
29:07:36:c9:aa:37:71:41:c8:74:e5:b8:70:04:b2:
7e:a6:a5:7e:52:92:0d:e8:39:62:0f:24:35:df:32:
9b:3b:40:86:60:10:c3:94:ab:51:19:63:62:fa:ca:
80:18:6c:ee:0c:d1:32:09:d9:c7:0d:5c:f6:d7:68:
96:f0:72:0f:df:06:ef:c4:78:7f:76:4d:94:c5:a0:
32:2a:7d:7b:9a:b6:10:ac:e7:b0:f4:66:64:b1:07:
c7:aa:6d:21:d1:6c:d3:3e:dc:d4:9c:53:fe:5f:09:
e4:f1:78:89:19:c4:ca:86:40:7d:99:8a:d3:eb:44:
8b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5F:14:C2:C5:BC:DF:AA:57:0E:A0:C8:FB:FB:9D:2B:5B:44:67:E6
X509v3 Authority Key Identifier:
keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i18UwsW836pXDqDI-_udK1tEZ-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.198.107.0/24
Signature Algorithm: sha256WithRSAEncryption
37:4a:c4:77:7c:d9:8d:0c:bf:0c:64:ce:33:92:8d:f7:37:ac:
f0:81:58:1e:c1:b8:18:ca:6f:a9:96:9e:ff:32:d1:ab:95:4c:
9b:7d:1f:86:59:9e:86:04:4e:09:b4:af:12:41:f5:b8:b4:a6:
9e:40:f4:ae:84:01:a9:7c:a3:da:86:e5:4a:26:d8:d7:fa:a5:
5e:e9:dc:c4:6c:1d:5e:9b:13:59:d6:ab:ba:04:df:14:b2:44:
15:fb:0e:33:78:9b:ad:3a:f2:7d:26:86:a0:24:c6:b5:a1:b4:
36:b5:cb:a6:22:5d:64:0b:17:fc:60:f7:75:77:a8:19:85:6f:
78:4a:40:73:16:db:1d:da:de:91:0e:44:3f:43:16:1e:2d:17:
35:49:52:31:6c:50:43:8c:4d:02:b6:83:a7:21:b6:cd:e4:fd:
fd:9a:55:f0:90:22:ac:be:96:70:99:10:b1:34:09:d9:81:a6:
11:68:ac:8e:63:78:df:17:fe:4f:e5:58:79:e4:68:d2:a2:29:
f0:f9:28:18:8c:68:95:53:66:4d:1a:69:5f:77:cf:45:02:88:
54:dd:96:77:f9:b6:4e:5f:c7:87:4d:11:a9:1d:e7:3a:7f:20:
d3:2d:36:d2:2a:60:83:29:81:18:3d:b1:78:ad:43:aa:8d:a1:
99:82:20:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:54:51 2025 by rpki-client