Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/bE8Ho3jzn5ez3wNgEgsfXEX5CVE.roa
File: bE8Ho3jzn5ez3wNgEgsfXEX5CVE.roa (raw, json)
Hash identifier: eJjvEgOEH8QmE+x4otf72HZmDOo9rzbz4V41257+u/g=
Subject key identifier: 6C:4F:07:A3:78:F3:9F:97:B3:DF:03:60:12:0B:1F:5C:45:F9:09:51
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 01983B6F94A763A6B3A4FDA2B87FE411DE5C
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/bE8Ho3jzn5ez3wNgEgsfXEX5CVE.roa
Signing time: Thu 24 Jul 2025 07:57:04 +0000
ROA not before: Thu 24 Jul 2025 07:57:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 178.236.32.0/24 maxlen: 24
185.118.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3b:6f:94:a7:63:a6:b3:a4:fd:a2:b8:7f:e4:11:de:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Jul 24 07:57:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c4f07a378f39f97b3df0360120b1f5c45f90951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:86:fa:cd:c4:59:e9:8c:48:1e:ed:39:d2:45:
f3:fc:64:81:37:14:a4:c8:0f:a8:0d:4e:98:a9:19:
dd:f8:57:c3:3c:b5:58:62:20:ed:42:e1:a8:52:a5:
41:01:79:be:30:ce:fd:d0:99:23:bd:a5:e4:b9:ab:
57:bd:42:82:a6:6d:cd:49:2d:03:54:34:0d:b4:95:
00:e3:c7:fd:3b:b1:4b:a9:19:28:c9:e2:15:5e:ea:
b0:de:a4:d4:3a:40:5e:2c:8c:21:dc:48:94:f2:3f:
79:5d:85:0a:05:9b:ea:68:13:63:0d:23:9a:24:11:
57:52:3e:ed:cd:74:7e:67:8f:93:44:ed:35:90:0b:
71:2b:2a:4c:7a:66:06:78:05:62:71:3d:64:ee:24:
c3:5b:a0:e3:73:39:6a:64:bc:96:b7:f5:44:6f:d2:
86:7a:02:c0:d9:a2:e7:52:c8:e1:c3:8f:f6:fc:b5:
ce:b1:a6:33:ba:fb:3f:17:04:36:5c:99:9b:1a:1d:
4f:38:a0:5c:f7:c3:47:22:b3:d7:0a:e1:2b:3e:f6:
98:da:8d:06:3f:37:18:9b:0e:17:95:75:81:ec:ed:
6e:1b:11:e7:c3:33:81:db:db:55:be:b8:bb:4f:90:
98:e5:ab:04:f6:29:e3:49:4d:c7:33:9a:2b:e8:ac:
4a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4F:07:A3:78:F3:9F:97:B3:DF:03:60:12:0B:1F:5C:45:F9:09:51
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/bE8Ho3jzn5ez3wNgEgsfXEX5CVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.32.0/24
185.118.12.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:2a:d4:cf:9d:55:50:62:dc:59:43:94:31:61:3d:39:d9:ee:
41:9c:83:8a:7b:19:f3:fd:e8:f0:b8:8e:07:75:f3:7b:b3:26:
67:2a:e9:ba:88:1a:6d:ea:9d:6c:d8:78:73:56:b6:ce:be:51:
28:0b:2e:6f:e6:36:95:9f:a2:75:f3:fa:a0:25:1c:d0:3e:db:
c9:7d:0e:91:b8:73:ad:85:ea:5b:41:e1:61:28:aa:0c:31:c2:
26:fd:26:2c:00:57:a9:4a:9f:a9:35:33:9a:bc:1c:69:4d:e8:
ea:12:23:b1:06:0c:6e:f5:15:72:24:df:13:dc:c0:70:21:d8:
cd:40:9f:a5:3f:7d:ab:56:3d:9b:90:40:60:0f:6b:82:aa:80:
b9:19:47:4d:a6:35:a6:5b:3d:e3:0b:5d:b4:1b:12:80:e6:00:
74:ed:d5:a3:f3:65:ed:92:27:44:c3:dc:82:b1:e5:3c:7f:3f:
3f:95:c7:3c:41:0c:b0:e2:c5:d8:8a:13:e0:44:df:75:4e:0d:
20:e6:f5:fa:ba:2c:92:49:8d:a8:f9:17:af:2b:91:ad:f7:85:
aa:96:2a:a6:e4:66:49:fa:a6:ef:cb:7a:24:72:06:33:34:d8:
a2:8e:9c:f2:34:47:c1:8a:c7:7b:90:86:a5:63:27:48:05:5d:
4c:42:c3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:34:13 2025 by rpki-client