Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/8TJR1HyAwg6k7vxm3-38XYPiUhs.roa
File: 8TJR1HyAwg6k7vxm3-38XYPiUhs.roa (raw, json)
Hash identifier: UlmTtzmR+/FZGoYwPXPmvRp8bd7Kee7FHaH8ivwDixM=
Subject key identifier: F1:32:51:D4:7C:80:C2:0E:A4:EE:FC:66:DF:ED:FC:5D:83:E2:52:1B
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 0198220628F52015A5BDE7FFAF5AEC5ABD00
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/8TJR1HyAwg6k7vxm3-38XYPiUhs.roa
Signing time: Sat 19 Jul 2025 09:31:25 +0000
ROA not before: Sat 19 Jul 2025 09:31:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 212.81.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 14:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:22:06:28:f5:20:15:a5:bd:e7:ff:af:5a:ec:5a:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Jul 19 09:31:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f13251d47c80c20ea4eefc66dfedfc5d83e2521b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:35:e4:22:bb:e6:21:22:76:17:0b:33:8b:19:
cc:2e:0f:fb:47:96:47:8b:7e:6f:eb:b5:aa:1d:95:
ec:60:de:11:a1:15:39:a3:7c:91:30:54:de:87:90:
f2:2b:2e:5a:5d:1e:6e:86:f1:17:cf:71:87:b4:44:
6e:6b:61:17:60:6f:8a:94:3c:b2:c6:d6:d8:73:5f:
ce:94:6b:f1:0c:bf:e7:d9:45:fc:f4:1b:45:8f:43:
f5:31:8e:a0:92:60:ca:68:f3:70:ba:ed:67:76:91:
8f:16:c6:b1:5e:58:14:a2:6d:c8:9b:28:40:e7:db:
9c:64:02:52:80:e0:3d:00:9d:b0:c4:a2:1e:7f:29:
ba:d9:c3:50:41:21:51:77:53:ff:5a:f7:e9:5c:5e:
5a:44:e4:ba:f1:ce:83:f7:4a:b6:44:21:59:7e:a7:
77:d8:84:39:ba:9f:7a:a1:7c:2a:bc:48:9e:8c:e8:
eb:64:4c:d7:2a:7e:0a:08:a6:a8:6c:d5:d0:57:2f:
e0:78:01:a8:cb:0d:9f:30:03:be:bc:c5:72:f9:62:
25:22:55:24:b3:ce:c3:2e:26:5e:4a:28:5c:a5:9e:
f7:13:b5:8a:da:a7:a2:bd:09:8f:c2:ff:ed:62:0a:
54:2b:68:eb:26:97:0a:7a:db:f3:01:3e:9d:a6:a4:
03:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:32:51:D4:7C:80:C2:0E:A4:EE:FC:66:DF:ED:FC:5D:83:E2:52:1B
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/8TJR1HyAwg6k7vxm3-38XYPiUhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.81.45.0/24
Signature Algorithm: sha256WithRSAEncryption
05:f5:38:1a:c0:30:93:7d:15:bd:9e:b9:f6:e9:f0:86:5f:ca:
2c:b3:d0:29:32:99:64:f4:9e:d9:c7:24:3c:bc:b9:2f:c4:ef:
55:d0:47:bf:12:b0:d2:6e:eb:2e:39:87:8e:f5:9e:75:0a:69:
d6:33:4d:23:64:a7:0f:ab:19:45:90:26:71:35:9a:b7:89:44:
ae:8b:e4:af:0c:35:23:72:a9:4b:73:56:e3:bf:0b:b8:bd:3e:
88:00:4d:3a:7f:4e:09:10:6f:5a:81:ca:fb:98:9f:2a:56:96:
de:1b:c8:94:10:64:d7:a5:67:f2:3d:20:26:28:d9:2f:f4:e5:
68:8b:6e:28:31:be:65:42:53:19:46:af:da:25:26:af:79:fb:
e1:1b:58:73:19:10:8c:a3:02:34:2d:c3:33:6b:a9:7b:6a:a0:
6d:cd:4c:8e:d0:02:e3:ac:0b:36:3f:69:51:ca:e7:23:2d:d8:
5c:2d:73:ad:99:9d:d7:2f:44:b0:8f:7c:0c:67:dd:2d:62:78:
74:0f:71:ca:ed:cd:50:7b:a7:c6:10:65:72:b2:eb:e5:86:39:
c1:fc:fb:50:d6:dc:39:fa:82:87:d1:93:3f:82:60:fd:0a:d9:
01:f5:72:b8:7b:b7:4e:29:c3:4a:ac:80:ca:8c:59:fd:64:f7:
b6:0c:2f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:10:52 2025 by rpki-client