Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/rkIPvHIufbwOu-FRJgP9G66-3w0.roa
File: rkIPvHIufbwOu-FRJgP9G66-3w0.roa (raw, json)
Hash identifier: hME8qBgEoqk0HX2Ob9xc7hNEC72YuwxTDwDbWd+KQQQ=
Subject key identifier: AE:42:0F:BC:72:2E:7D:BC:0E:BB:E1:51:26:03:FD:1B:AE:BE:DF:0D
Certificate issuer: /CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
Certificate serial: 0198439B0DED9C706B20B9BF3E6895A86F71
Authority key identifier: 81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/rkIPvHIufbwOu-FRJgP9G66-3w0.roa
Signing time: Fri 25 Jul 2025 22:01:31 +0000
ROA not before: Fri 25 Jul 2025 22:01:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208273
IP address blocks: 185.140.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9b:0d:ed:9c:70:6b:20:b9:bf:3e:68:95:a8:6f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
Validity
Not Before: Jul 25 22:01:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae420fbc722e7dbc0ebbe1512603fd1baebedf0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:33:1e:df:9a:88:dc:3a:9e:06:c5:55:43:
3e:57:cf:a9:a7:dc:27:ca:35:fe:2c:e4:6e:aa:c3:
0b:3a:82:6f:6d:39:e2:7a:fa:e3:3d:cd:9b:47:ce:
0d:c5:2a:a0:95:d3:ca:e8:58:db:ee:ff:39:b3:1a:
8a:26:80:97:55:3e:62:b0:5f:6a:74:50:ca:4f:3a:
f4:d3:c1:37:d7:e6:f9:0c:84:bf:a7:67:54:84:d6:
97:1a:63:05:e1:55:23:8d:e5:60:42:3a:09:21:08:
d7:7c:85:b5:1b:03:9f:f9:ce:58:b4:b0:6c:d4:8a:
2c:f1:21:64:d6:48:84:00:34:a8:f5:9f:9e:89:6c:
60:77:30:f5:64:81:54:e2:3f:ed:04:e7:13:5c:91:
f1:9d:e1:77:c2:1b:a0:8e:16:24:f8:c5:1c:6b:e7:
72:85:2b:e4:90:cb:41:a3:93:96:74:93:34:27:97:
66:08:79:b2:6a:68:b5:99:71:2c:95:da:74:fc:4d:
c0:54:00:79:9c:03:9c:f3:81:b3:8c:a6:34:6f:a3:
2b:e7:95:2a:c5:3b:89:9f:cd:ab:d2:ae:03:5c:b5:
91:ab:df:bb:7e:36:b6:63:55:4a:af:10:ad:eb:fd:
96:ee:3f:3b:10:b2:d8:a7:ca:ca:97:b5:3c:55:ca:
5c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:42:0F:BC:72:2E:7D:BC:0E:BB:E1:51:26:03:FD:1B:AE:BE:DF:0D
X509v3 Authority Key Identifier:
keyid:81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/rkIPvHIufbwOu-FRJgP9G66-3w0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.55.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:55:14:66:97:ff:d5:d7:97:75:03:9c:7a:3a:6b:f7:63:62:
4d:5c:48:8c:5b:2c:e6:b1:7c:0e:b3:4e:38:a7:09:13:8b:a7:
31:d4:cd:7d:ac:19:50:f8:93:66:f6:e1:1d:20:70:6b:7b:34:
8c:0e:8a:1d:12:bb:a7:3d:8c:23:96:28:78:19:ab:48:71:fb:
f3:f4:60:41:ef:eb:d9:4f:c1:fb:1f:e1:50:a6:84:6a:46:30:
ee:e0:2c:85:bb:02:d5:ee:68:41:f2:10:c6:0f:dd:45:86:e0:
f1:e4:f5:cb:d5:07:9f:4a:f4:e3:a9:a3:6c:d5:9b:1c:0f:1b:
3c:11:8f:1c:27:66:c4:b0:c4:84:d6:29:62:d6:97:3e:9e:dc:
3f:fe:c4:1c:91:e9:78:df:79:65:e7:5a:4a:13:73:d5:fa:29:
81:91:42:07:94:eb:52:28:eb:69:3f:be:8a:98:d8:58:df:ad:
73:ab:43:18:93:7e:43:b8:c4:36:91:5f:af:1b:f1:00:38:6b:
39:2e:c9:f0:fd:dd:3e:63:d7:50:bd:80:46:3d:c9:c5:8b:c0:
96:75:ef:58:26:cc:74:10:ee:55:2f:0e:2e:4c:ae:23:26:07:
95:16:ae:a2:ed:8d:93:62:c2:53:cf:bd:1d:75:d5:1e:f9:a8:
b5:8f:61:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:47:58 2025 by rpki-client