Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/8-kkwcK7J3DxZVf5MGzOJYHQ7BI.roa
File: 8-kkwcK7J3DxZVf5MGzOJYHQ7BI.roa (raw, json)
Hash identifier: rhq0p1ekXajroUDi/6gbWVszGGw1Hl0Cw7VvrAiAjNE=
Subject key identifier: F3:E9:24:C1:C2:BB:27:70:F1:65:57:F9:30:6C:CE:25:81:D0:EC:12
Certificate issuer: /CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Certificate serial: 019813F772155242EC4E4AC70F5840E0CF46
Authority key identifier: 1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/8-kkwcK7J3DxZVf5MGzOJYHQ7BI.roa
Signing time: Wed 16 Jul 2025 16:00:40 +0000
ROA not before: Wed 16 Jul 2025 16:00:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200296
IP address blocks: 213.108.240.0/24 maxlen: 24
213.108.241.0/24 maxlen: 24
213.108.242.0/24 maxlen: 24
213.108.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:13:f7:72:15:52:42:ec:4e:4a:c7:0f:58:40:e0:cf:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Validity
Not Before: Jul 16 16:00:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3e924c1c2bb2770f16557f9306cce2581d0ec12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:30:d3:ee:ac:1f:2f:eb:8a:eb:bd:6f:ea:62:
2d:af:90:a6:c1:a4:f0:50:72:13:e6:ad:b6:7e:3c:
9e:d6:fb:03:a8:1b:26:ba:32:2e:a8:a4:0d:57:ee:
cc:8c:f5:22:82:1c:94:ec:8b:39:96:33:ed:f9:a7:
29:48:bf:a4:80:83:fa:9d:33:e0:cb:a2:04:f8:d3:
a2:c3:60:3b:c9:fd:00:c5:0b:79:f2:52:ca:3a:b1:
bc:35:2b:c2:85:e3:ea:c7:a9:f3:d4:df:68:88:bf:
3a:72:1e:ef:76:fb:1d:eb:c4:a9:57:eb:4e:0c:a3:
59:66:5a:a3:6a:16:ea:45:c9:26:e5:35:6a:9d:0d:
12:ff:01:50:be:47:45:7a:22:70:c8:13:5a:8f:23:
17:4c:65:0a:53:7c:f9:b2:9b:d6:1b:80:c4:0e:69:
9c:c6:b7:c6:85:a6:b8:51:59:52:70:10:4d:56:84:
90:ed:50:28:29:00:0a:45:cd:82:02:4d:38:09:a2:
d4:75:c7:e2:87:c8:9e:23:49:fc:1b:2a:76:6c:72:
66:98:96:9b:4c:1b:d5:1f:9d:1b:36:da:72:d9:98:
00:6c:78:0c:b8:0a:a3:8b:00:e8:ee:17:47:04:fb:
fa:bf:51:d9:42:53:d2:61:b7:d0:f1:f1:1c:a0:6c:
f3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E9:24:C1:C2:BB:27:70:F1:65:57:F9:30:6C:CE:25:81:D0:EC:12
X509v3 Authority Key Identifier:
keyid:1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/8-kkwcK7J3DxZVf5MGzOJYHQ7BI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.108.240.0/22
Signature Algorithm: sha256WithRSAEncryption
12:f7:52:c4:3b:d5:82:db:4c:a6:e6:4f:a0:0d:1d:b3:8c:0b:
90:fc:e9:d3:c6:70:a7:9b:af:a5:08:65:87:37:84:17:78:d4:
6f:58:6d:f7:63:ff:41:6b:35:2f:92:55:06:36:0b:4b:66:3e:
1d:e1:03:af:50:06:ea:71:08:2f:8e:12:4d:98:10:2a:c1:23:
6a:9c:45:39:be:13:06:b9:8d:10:91:d2:c0:c5:90:12:07:4c:
db:30:8e:26:fe:0b:36:b1:0c:a3:df:58:20:27:84:3e:a6:71:
3c:a8:90:78:08:11:ef:b8:97:e5:db:2c:a7:be:76:eb:4b:a6:
fa:8b:27:eb:36:19:77:0c:2e:30:f8:be:75:21:33:93:b1:33:
af:1a:ba:ab:5e:db:c8:4e:37:4d:c8:49:a1:0a:3b:e0:99:d7:
84:5a:d5:ca:75:c2:e0:e7:b4:8a:25:88:17:a1:73:b0:96:15:
62:70:eb:f7:90:83:5d:5a:a8:ac:b1:a2:dd:db:d5:59:43:bc:
ff:f6:4a:be:d3:ac:99:1b:7d:d4:89:a0:16:55:9d:a5:87:5d:
89:19:47:8f:93:6c:47:8a:eb:19:7a:f6:d7:bb:51:72:e9:62:
13:3f:e5:6f:b3:d2:ed:f2:9f:33:d6:1f:c6:0e:3e:18:a7:b6:
b3:f8:1a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:24:07 2025 by rpki-client