Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/8pYmn7TAGaMCMkGbuhyzK9IB1Gw.roa
File: 8pYmn7TAGaMCMkGbuhyzK9IB1Gw.roa (raw, json)
Hash identifier: MiQ9nf6ClXhcte8AL3HSxhfAjgaZoJoXSOwTUDNQ6GU=
Subject key identifier: F2:96:26:9F:B4:C0:19:A3:02:32:41:9B:BA:1C:B3:2B:D2:01:D4:6C
Certificate issuer: /CN=74309aa0148cc90fced9943eb1a81946e9adae5e
Certificate serial: 0197F5D94DC28F4010ECD77354AA3D255ED4
Authority key identifier: 74:30:9A:A0:14:8C:C9:0F:CE:D9:94:3E:B1:A8:19:46:E9:AD:AE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/8pYmn7TAGaMCMkGbuhyzK9IB1Gw.roa
Signing time: Thu 10 Jul 2025 19:39:08 +0000
ROA not before: Thu 10 Jul 2025 19:39:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209783
IP address blocks: 185.238.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 10:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f5:d9:4d:c2:8f:40:10:ec:d7:73:54:aa:3d:25:5e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74309aa0148cc90fced9943eb1a81946e9adae5e
Validity
Not Before: Jul 10 19:39:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f296269fb4c019a30232419bba1cb32bd201d46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f5:36:12:50:3a:a3:b5:f8:1b:4a:b7:0c:3f:
e6:45:cc:65:41:66:03:76:a2:76:03:89:90:ee:6f:
aa:86:5d:aa:ae:50:f2:df:a5:b5:4f:91:be:61:bb:
0d:a3:4f:70:74:ed:44:d9:a6:e6:b5:0d:2d:08:44:
52:92:a2:c0:ab:91:fd:81:ea:cb:d1:e8:10:0d:14:
ab:3c:53:12:0b:88:5e:ab:a2:d9:85:34:f0:2d:b3:
0e:a3:16:bc:cb:4b:0f:e0:5c:89:fc:52:89:55:0e:
b9:2c:7b:56:30:25:9c:48:d0:36:cf:92:5e:a5:b4:
6c:c3:58:50:6f:6e:c2:3d:21:ae:13:85:17:1a:73:
bc:83:d6:63:61:48:06:0d:30:42:36:3b:6a:6f:03:
87:25:14:e4:e4:a6:e9:7a:a3:6c:d9:f4:33:b4:f3:
28:74:53:24:23:d7:60:a0:96:30:23:50:d5:33:eb:
14:ae:f1:1c:2e:ac:07:6e:05:05:0b:d0:d9:1d:f2:
4a:f6:ca:62:0d:eb:fc:ac:d3:c1:5e:e9:7c:ce:d1:
74:d8:b3:15:ee:42:16:e4:66:f4:cc:74:a1:86:5e:
30:47:24:7d:9e:11:97:67:7a:8d:87:24:86:51:58:
a0:16:42:eb:8f:77:26:f6:8f:12:84:8a:79:d7:52:
39:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:96:26:9F:B4:C0:19:A3:02:32:41:9B:BA:1C:B3:2B:D2:01:D4:6C
X509v3 Authority Key Identifier:
keyid:74:30:9A:A0:14:8C:C9:0F:CE:D9:94:3E:B1:A8:19:46:E9:AD:AE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/8pYmn7TAGaMCMkGbuhyzK9IB1Gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.140.0/24
Signature Algorithm: sha256WithRSAEncryption
39:9b:36:a1:fd:4b:7b:a5:d4:43:44:9a:a0:5c:9d:cc:19:23:
95:09:9e:49:39:23:f5:18:85:d8:40:fe:c5:e8:a6:27:3b:8d:
1c:ce:7e:8c:37:b3:a7:36:34:62:bc:e0:f3:bc:cc:42:e3:d1:
9e:4d:8d:76:de:75:af:fe:fb:cd:fc:e8:06:65:21:a1:74:38:
23:c1:ec:0d:3a:93:65:ac:3e:00:31:8f:b5:73:4f:11:f9:0d:
6a:69:fd:76:39:0a:98:19:bb:3f:67:94:75:6c:11:4b:6d:88:
8b:a9:66:16:3c:c2:48:03:3b:02:a2:e0:06:c8:5c:54:b6:78:
d3:10:69:0c:28:18:d8:d1:d9:68:8a:b5:a3:63:7a:a0:8f:e5:
e9:95:f1:97:0c:16:7f:3f:98:69:a6:a4:37:71:fc:92:20:00:
00:82:a7:a8:b4:1c:fb:8a:64:b4:ff:37:cc:fb:58:d5:b7:ca:
d6:57:d7:3a:8d:ce:19:50:e1:ed:29:7f:83:b6:f0:13:92:6e:
4b:a5:48:ca:14:de:bd:bb:55:b3:02:27:f9:d7:eb:22:2a:ee:
38:de:9f:a4:cb:9f:14:1d:c8:73:33:b2:35:4b:b3:a1:29:49:
b3:c0:9b:41:11:f5:f4:be:3b:84:b2:c0:ef:02:18:ce:73:e7:
6b:79:cf:56
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZf12U3Cj0AQ7NdzVKo9JV7UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MzA5YWEwMTQ4Y2M5MGZjZWQ5OTQzZWIxYTgxOTQ2ZTlh
ZGFlNWUwHhcNMjUwNzEwMTkzOTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjk2MjY5ZmI0YzAxOWEzMDIzMjQxOWJiYTFjYjMyYmQyMDFkNDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fU2ElA6o7X4G0q3DD/mRcxlQWYD
dqJ2A4mQ7m+qhl2qrlDy36W1T5G+YbsNo09wdO1E2abmtQ0tCERSkqLAq5H9gerL
0egQDRSrPFMSC4heq6LZhTTwLbMOoxa8y0sP4FyJ/FKJVQ65LHtWMCWcSNA2z5Je
pbRsw1hQb27CPSGuE4UXGnO8g9ZjYUgGDTBCNjtqbwOHJRTk5KbpeqNs2fQztPMo
dFMkI9dgoJYwI1DVM+sUrvEcLqwHbgUFC9DZHfJK9spiDev8rNPBXul8ztF02LMV
7kIW5Gb0zHShhl4wRyR9nhGXZ3qNhySGUVigFkLrj3cm9o8ShIp511I5dwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPKWJp+0wBmjAjJBm7ocsyvSAdRsMB8GA1UdIwQY
MBaAFHQwmqAUjMkPztmUPrGoGUbpra5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZERDYW9CU015UV9PMlpRLXNhZ1pSdW10cmw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lZGFmNjktYmM1ZC00OTRlLTlkODct
N2M3NDBlZjhhYTk1LzEvOHBZbW43VEFHYU1DTWtHYnVoeXpLOUlCMUd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9lZGFmNjktYmM1ZC00OTRlLTlkODctN2M3NDBlZjhhYTk1
LzEvZERDYW9CU015UV9PMlpRLXNhZ1pSdW10cmw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAue6MMA0G
CSqGSIb3DQEBCwUAA4IBAQA5mzah/Ut7pdRDRJqgXJ3MGSOVCZ5JOSP1GIXYQP7F
6KYnO40czn6MN7OnNjRivODzvMxC49GeTY123nWv/vvN/OgGZSGhdDgjwewNOpNl
rD4AMY+1c08R+Q1qaf12OQqYGbs/Z5R1bBFLbYiLqWYWPMJIAzsCouAGyFxUtnjT
EGkMKBjY0dloirWjY3qgj+XplfGXDBZ/P5hppqQ3cfySIAAAgqeotBz7imS0/zfM
+1jVt8rWV9c6jc4ZUOHtKX+DtvATkm5LpUjKFN69u1WzAif51+siKu443p+ky58U
HchzM7I1S7OhKUmzwJtBEfX0vjuEssDvAhjOc+drec9W
-----END CERTIFICATE-----
Generated at Mon Jul 28 20:17:55 2025 by rpki-client