Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8LiKyExS9yKyeuuVYA6WBSbIbnY.roa
File: 8LiKyExS9yKyeuuVYA6WBSbIbnY.roa (raw, json)
Hash identifier: RB436KqkjHTmxSSzIRYR38pGLg6GsnctCMOI8v0caHw=
Subject key identifier: F0:B8:8A:C8:4C:52:F7:22:B2:7A:EB:95:60:0E:96:05:26:C8:6E:76
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01985715E38635BCC4C23AC2295689473089
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8LiKyExS9yKyeuuVYA6WBSbIbnY.roa
Signing time: Tue 29 Jul 2025 16:48:28 +0000
ROA not before: Tue 29 Jul 2025 16:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213775
IP address blocks: 5.57.36.0/24 maxlen: 24
178.239.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Aug 2025 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:15:e3:86:35:bc:c4:c2:3a:c2:29:56:89:47:30:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jul 29 16:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0b88ac84c52f722b27aeb95600e960526c86e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:93:bc:8f:7f:68:19:8a:e4:0c:3a:c0:e9:6d:
f7:77:b2:e7:33:5e:af:ca:25:29:29:24:7c:f6:7a:
5a:02:c6:16:18:34:91:9b:72:59:df:58:82:68:fd:
16:79:33:f8:f5:ce:bd:bc:2d:d1:1e:21:c5:12:f5:
ce:99:f2:e0:ab:dd:c0:a5:ea:22:78:de:a7:35:ee:
98:3f:bf:f1:09:b3:19:b9:07:14:7f:2a:46:2f:3e:
54:82:b0:97:07:4e:75:b0:90:6e:74:7e:e6:3c:6e:
5b:bf:54:cf:4a:0f:18:3d:98:07:f0:da:57:4c:c1:
44:b2:59:df:09:9e:ae:b1:ad:7d:e2:ab:a2:2a:91:
8e:bf:ef:e3:43:d6:1d:be:15:65:90:1c:76:9d:9c:
b0:00:85:1e:d7:4a:ce:b5:ea:bf:f7:e5:11:17:a4:
9e:b2:30:85:b5:db:ac:9d:a3:45:25:09:f1:88:d0:
73:39:94:82:40:3b:9c:32:96:d3:6f:c9:3b:42:f0:
bf:2c:1a:26:8b:78:26:80:5e:3d:f1:d5:aa:9e:39:
73:33:a2:b5:02:46:4d:5d:a8:5d:8d:26:ae:64:4e:
61:3f:9a:d5:12:94:a6:ca:1e:c1:9c:57:aa:ad:30:
83:ba:7b:d5:b5:f5:94:c2:ed:f8:7d:64:04:92:42:
0e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B8:8A:C8:4C:52:F7:22:B2:7A:EB:95:60:0E:96:05:26:C8:6E:76
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8LiKyExS9yKyeuuVYA6WBSbIbnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.36.0/24
178.239.154.0/24
Signature Algorithm: sha256WithRSAEncryption
86:ed:a8:3d:34:d3:a7:16:13:4a:71:e1:4c:97:90:88:07:fa:
76:13:64:a3:56:71:97:42:e4:eb:e9:e1:be:e3:6e:38:f3:10:
03:50:1e:61:12:a6:18:57:65:9e:b1:e0:76:9d:11:f8:05:a9:
bd:34:17:c3:6a:76:14:08:05:e9:65:10:70:af:06:8a:1c:65:
6e:46:9d:dd:fe:02:36:4c:5c:e5:d1:82:37:0d:48:92:9c:a3:
6a:81:bd:e3:21:cd:20:fe:32:af:5a:ed:b9:1f:3f:73:c7:ad:
fa:b5:54:ea:fe:3d:48:01:a7:6f:07:c2:40:8c:40:53:36:9a:
52:c4:c5:a3:82:7d:df:1b:65:d7:ae:34:9e:74:64:0f:e5:b1:
ee:09:82:8b:3f:d1:eb:70:83:5a:45:33:17:a0:fd:0c:68:48:
67:4d:82:50:87:ba:1d:30:45:de:7e:97:e4:ae:45:07:ec:61:
3f:c7:ca:d5:b1:39:16:5f:6d:16:da:7f:16:46:a5:d1:da:ee:
c5:02:61:99:e6:dc:43:50:38:f5:06:05:dd:50:6c:c3:59:f5:
cd:d8:8b:e1:c0:7b:2e:63:70:fa:df:d9:bf:6f:d3:f1:47:78:
c4:3a:6f:2b:8b:7b:bf:86:99:51:e4:cc:45:fd:55:ea:df:74:
86:d5:aa:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 22:50:06 2025 by rpki-client