Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/i8Bk_Z-8KSuz8vQ1jubTpKMT59M.roa
File: i8Bk_Z-8KSuz8vQ1jubTpKMT59M.roa (raw, json)
Hash identifier: v5GClXo0hTRItLv1LLR9D2MpJboOBKsEHK/lxMtobJ4=
Subject key identifier: 8B:C0:64:FD:9F:BC:29:2B:B3:F2:F4:35:8E:E6:D3:A4:A3:13:E7:D3
Certificate issuer: /CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Certificate serial: 0197F463EEB6DEBDD73D7901DE5EBB2E63C7
Authority key identifier: 8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/i8Bk_Z-8KSuz8vQ1jubTpKMT59M.roa
Signing time: Thu 10 Jul 2025 12:51:19 +0000
ROA not before: Thu 10 Jul 2025 12:51:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206002
IP address blocks: 91.199.103.0/24 maxlen: 24
185.187.28.0/22 maxlen: 22
2a0b:9380::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f4:63:ee:b6:de:bd:d7:3d:79:01:de:5e:bb:2e:63:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Validity
Not Before: Jul 10 12:51:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8bc064fd9fbc292bb3f2f4358ee6d3a4a313e7d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:3a:3f:e5:5a:4c:80:6a:8a:47:cd:ac:e1:a1:
27:bf:e7:10:1e:d1:31:df:9a:8f:a0:4d:6a:7f:37:
5d:15:c8:ca:27:5a:26:8d:be:4f:12:8d:32:1f:73:
4f:29:ce:c8:d3:52:8a:f4:25:a8:fb:38:e9:86:59:
2f:36:c6:9e:04:08:1b:7a:af:6b:cb:d9:db:6f:92:
6f:b2:fc:a3:c2:7e:be:0c:90:9c:74:70:94:59:3d:
8b:77:95:d3:4a:6a:bf:07:7c:d5:8d:f0:2d:e8:28:
84:60:66:0e:47:0e:ff:74:b7:a4:28:09:1a:82:da:
a5:f4:16:41:e9:f0:fb:1d:a1:21:3e:00:e2:14:50:
c2:7e:dc:04:a9:89:d5:50:d0:f8:d1:ce:d3:ec:21:
23:b6:ca:04:29:de:bc:48:ea:33:4d:ca:80:79:09:
c6:3e:1e:d0:38:28:2f:9b:d1:af:bf:3a:a9:9e:cc:
f2:3f:50:90:da:cf:79:e3:b5:5a:77:b1:4e:28:90:
e9:23:ea:1f:76:95:dd:46:3b:fe:fc:7c:d4:55:d0:
2b:3d:ba:93:f1:44:23:40:4d:21:1a:ed:e5:d8:74:
48:6b:4d:d8:58:5e:61:9d:14:61:83:4e:ec:4a:d4:
9b:a1:67:41:4f:42:c7:44:fb:05:79:33:26:48:60:
ac:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C0:64:FD:9F:BC:29:2B:B3:F2:F4:35:8E:E6:D3:A4:A3:13:E7:D3
X509v3 Authority Key Identifier:
keyid:8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/i8Bk_Z-8KSuz8vQ1jubTpKMT59M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.103.0/24
185.187.28.0/22
IPv6:
2a0b:9380::/32
Signature Algorithm: sha256WithRSAEncryption
aa:37:7c:75:a6:b8:d0:af:d3:52:de:85:b8:d7:20:6f:67:7b:
15:d3:bb:10:08:be:b4:59:26:b3:28:84:43:d1:4b:43:a5:5b:
7d:c4:0e:6d:3d:f5:e0:46:95:f9:a9:2e:d0:87:60:19:b8:3c:
1a:bc:1f:04:31:1c:c0:96:fd:0b:e4:e5:e9:5a:6e:72:fb:d5:
2c:a1:9c:4c:67:be:50:90:5b:d8:2e:fb:3e:f2:cf:1b:52:9d:
48:31:ff:85:9f:9c:4c:33:ae:25:d1:12:4c:02:05:42:a3:d2:
3e:2a:5c:1f:77:70:7e:a6:07:ad:94:76:57:55:ee:93:5a:da:
ae:1e:2b:df:3f:1b:0d:98:1f:c4:d4:48:1e:52:93:8d:e2:4e:
35:83:85:78:8d:58:af:bf:22:0c:dd:51:a5:9d:e3:1a:7c:f4:
2d:90:61:27:96:d3:d4:df:fd:61:6c:c4:77:51:6b:93:10:e8:
9e:1d:6b:f5:68:46:dd:ac:b7:1d:ae:9d:1b:4b:aa:47:0f:75:
1b:08:b1:63:9a:d1:d8:b1:76:a5:15:57:58:91:28:83:91:14:
84:07:64:66:2b:eb:80:ed:2e:5a:84:b2:58:02:ba:5d:cf:37:
de:21:d4:b2:e4:6e:50:34:13:26:45:d7:54:26:0a:61:b1:94:
28:a8:7b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:54:42 2025 by rpki-client