Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8pblZF1HegCKcYRKVV9MkfMS6X8.roa
File: 8pblZF1HegCKcYRKVV9MkfMS6X8.roa (raw, json)
Hash identifier: gqqm+LzOxhWy62iAGDBBhHsiQy5+rPReYpJhTp9llMc=
Subject key identifier: F2:96:E5:64:5D:47:7A:00:8A:71:84:4A:55:5F:4C:91:F3:12:E9:7F
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 0197E53E1DF8E18FFFCFE98DC36AEE44769D
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8pblZF1HegCKcYRKVV9MkfMS6X8.roa
Signing time: Mon 07 Jul 2025 14:15:42 +0000
ROA not before: Mon 07 Jul 2025 14:15:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216169
IP address blocks: 185.26.32.0/24 maxlen: 24
185.26.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e5:3e:1d:f8:e1:8f:ff:cf:e9:8d:c3:6a:ee:44:76:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jul 7 14:15:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f296e5645d477a008a71844a555f4c91f312e97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:80:2c:6c:d7:76:81:03:54:e2:3a:e8:97:99:
fe:3b:3f:62:e5:44:2c:68:dc:ac:ab:5b:8f:79:de:
fd:49:d7:75:60:c5:5b:a2:1b:96:3f:83:f5:21:6f:
36:91:f1:59:52:d6:e0:59:a0:3a:66:aa:93:00:c5:
f4:e7:b0:23:7f:e9:07:93:3e:e4:ca:d2:ae:de:6c:
ab:69:f6:e7:75:61:d3:0c:bc:e6:60:f0:79:21:31:
67:c8:67:4c:e8:8f:11:38:3f:1f:4e:d1:6b:7f:c2:
5a:38:69:95:af:28:59:3b:2b:50:41:05:41:f1:f6:
48:1c:94:8e:a3:3c:1b:71:1c:07:63:2a:da:d1:cd:
16:a8:ae:13:7e:de:13:96:14:6d:62:4d:b9:26:c9:
cc:fe:c3:b7:ea:c9:b4:18:6b:7b:78:23:37:eb:32:
d6:f4:dc:47:2a:99:eb:4f:0a:b8:00:ed:b1:c6:cd:
df:f1:e2:61:8f:95:e0:42:4a:53:c7:73:bf:0b:a0:
6e:17:6b:bb:66:54:30:ba:07:63:6a:08:28:7f:2f:
22:27:8b:1a:32:4a:f5:2a:30:d6:ef:00:a5:74:63:
8e:24:5b:ac:95:bb:71:bf:0e:b6:e1:c5:da:07:75:
36:4a:5e:3a:1d:ba:e1:6b:86:56:01:e7:ac:8a:e0:
95:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:96:E5:64:5D:47:7A:00:8A:71:84:4A:55:5F:4C:91:F3:12:E9:7F
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8pblZF1HegCKcYRKVV9MkfMS6X8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.32.0/23
Signature Algorithm: sha256WithRSAEncryption
10:49:47:ad:1e:53:12:5c:ac:c8:ba:2a:d4:e3:42:d8:d8:36:
44:10:f1:d3:00:50:8f:cc:7d:86:cd:86:70:56:9e:c1:ba:6b:
36:33:c9:52:83:9b:7b:17:18:34:0e:2f:2f:43:63:6a:40:cd:
48:04:c1:51:1f:0a:8d:1e:7a:f9:a0:82:9f:0e:71:aa:03:8b:
e1:82:b6:ac:d7:c5:6c:d4:48:1a:43:72:d6:c5:f4:37:af:e1:
68:bb:3f:17:40:a8:33:87:74:86:97:68:0e:44:19:7a:05:d0:
a3:3f:76:aa:37:4c:65:56:08:0e:af:91:63:ca:89:6d:52:74:
7c:1b:e9:8c:32:80:f8:04:1d:93:67:32:19:ae:47:a2:73:ea:
54:f6:e5:a5:06:a4:43:08:d5:1a:c5:e5:94:22:65:5c:75:a4:
4b:31:0f:a0:72:8b:f2:72:9e:8f:92:f8:16:ec:f3:28:70:d2:
80:fd:ca:45:4a:8b:8c:77:7a:66:26:65:15:f5:bd:b3:92:ae:
6e:ae:95:44:d9:f7:12:87:54:3f:3d:1c:9c:31:a8:32:e0:99:
e6:13:d4:b4:70:30:eb:9e:c3:dc:7f:46:35:49:af:4b:d0:83:
0d:dc:cd:c1:02:91:02:6c:20:10:9d:71:28:83:14:55:be:9e:
71:31:68:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:16:26 2025 by rpki-client