Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/L8BLpkg4_ByhCbFcK7uHavm7f5g.roa
File: L8BLpkg4_ByhCbFcK7uHavm7f5g.roa (raw, json)
Hash identifier: e1aCzXYV4qmCe5iwORKEY38agwdUFZfW6yM8yoLYdTA=
Subject key identifier: 2F:C0:4B:A6:48:38:FC:1C:A1:09:B1:5C:2B:BB:87:6A:F9:BB:7F:98
Certificate issuer: /CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
Certificate serial: 0199B8C4813F0767B279B5452CC5FC826CA7
Authority key identifier: 55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/L8BLpkg4_ByhCbFcK7uHavm7f5g.roa
Signing time: Mon 06 Oct 2025 09:05:09 +0000
ROA not before: Mon 06 Oct 2025 09:05:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 167.150.18.0/24 maxlen: 24
167.150.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b8:c4:81:3f:07:67:b2:79:b5:45:2c:c5:fc:82:6c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
Validity
Not Before: Oct 6 09:05:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2fc04ba64838fc1ca109b15c2bbb876af9bb7f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7a:a7:3d:ca:b8:a7:7b:6b:e7:59:77:cc:34:
66:52:53:ec:c1:91:0b:a5:b2:a2:19:7b:93:9b:86:
2f:3b:50:c2:00:89:2e:ec:77:11:6e:32:b6:8c:ed:
0c:0d:83:03:9f:0e:74:26:62:06:16:22:f9:51:a0:
ea:a9:bc:75:0c:60:f7:79:6d:24:a0:46:21:a0:de:
b9:89:70:63:82:30:32:3e:fa:c4:68:21:5d:da:e5:
24:47:a7:e9:87:10:cd:f7:c6:dc:53:40:26:5e:aa:
3d:9a:9f:1c:ae:57:53:93:93:8e:50:e4:f4:9e:ad:
a3:c8:2b:b9:fb:aa:a3:ba:40:df:f1:e0:b2:d7:16:
a2:a6:8d:03:79:5d:d5:1e:1f:06:fa:a4:b0:34:0b:
9a:90:de:9a:bb:10:8d:1a:0e:8a:e6:49:6d:97:b8:
c0:6a:e0:ab:4b:14:b9:09:d2:c0:2e:c5:b4:f4:ec:
39:07:b9:97:66:7e:58:a8:fc:c0:e7:d9:f3:6f:41:
1d:08:53:60:2a:0e:01:d5:0a:49:46:bf:24:6b:9a:
70:5e:ba:50:39:b8:73:93:14:92:0a:95:34:a5:f8:
e7:60:41:12:f5:dd:69:55:4f:1f:6e:0e:ae:c5:74:
26:99:37:ca:69:02:b2:b6:88:df:f9:9b:7d:a4:e4:
f3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C0:4B:A6:48:38:FC:1C:A1:09:B1:5C:2B:BB:87:6A:F9:BB:7F:98
X509v3 Authority Key Identifier:
keyid:55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/L8BLpkg4_ByhCbFcK7uHavm7f5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.150.18.0/23
Signature Algorithm: sha256WithRSAEncryption
e8:37:e2:52:5f:72:60:7f:57:57:f0:74:ea:78:8f:4d:ae:58:
ba:59:aa:cb:8a:12:28:f6:7c:8d:ba:82:4c:d2:cb:ba:b9:ec:
3e:db:6c:19:ec:9e:97:cf:ea:24:4a:0a:02:51:0e:61:d3:40:
16:33:a8:ff:6e:70:76:a1:ee:28:10:2e:89:32:a5:47:7d:a2:
88:2b:b0:56:df:2f:8e:73:89:61:59:af:a6:d1:db:fe:5c:76:
82:4a:48:d3:ec:48:a3:a7:00:ae:b2:b9:6a:49:81:85:05:e9:
59:2b:b6:eb:a3:f9:8c:97:e6:af:b9:9b:ef:f3:bf:e9:29:71:
1e:65:02:b1:39:16:d3:51:87:22:f3:49:2b:d7:2f:0e:84:78:
21:50:47:04:38:c1:0e:e4:67:1e:69:0b:a9:09:11:b5:e1:da:
b5:c3:7a:82:df:b0:e3:a4:e0:ae:e4:de:e2:6e:34:81:c2:d3:
85:f7:b1:5d:55:3b:b3:ed:6e:9e:ba:e3:5a:a9:52:00:4f:ec:
76:91:bd:f6:99:47:59:2f:37:bc:0c:7c:63:a9:c5:bc:0e:36:
33:0c:1c:38:7c:bf:d1:c6:6b:00:da:66:cc:f3:5d:d0:ec:89:
e7:6f:5d:24:55:3a:04:ac:77:56:a5:67:c7:23:0b:3b:ad:e9:
3b:cb:07:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 13:20:38 2025 by rpki-client