Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/8BItxdRwiz6e55f08Mt17mlwvV8.roa
File: 8BItxdRwiz6e55f08Mt17mlwvV8.roa (raw, json)
Hash identifier: cojnwxd3ILvAkZ0dYhgxffSNvY1zxZ63Duvu6PuvkIM=
Subject key identifier: F0:12:2D:C5:D4:70:8B:3E:9E:E7:97:F4:F0:CB:75:EE:69:70:BD:5F
Certificate issuer: /CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Certificate serial: 0198325F090EFD511E5500F25A19CE387A07
Authority key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/8BItxdRwiz6e55f08Mt17mlwvV8.roa
Signing time: Tue 22 Jul 2025 13:42:25 +0000
ROA not before: Tue 22 Jul 2025 13:42:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49981
IP address blocks: 188.208.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:32:5f:09:0e:fd:51:1e:55:00:f2:5a:19:ce:38:7a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Validity
Not Before: Jul 22 13:42:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0122dc5d4708b3e9ee797f4f0cb75ee6970bd5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:52:37:58:a1:c0:18:d1:4e:ad:b2:21:b7:f8:
5f:37:c1:37:2b:9c:a1:02:9f:c9:8e:b0:91:ae:79:
1c:72:20:05:91:f0:cf:c5:91:06:b3:f1:ce:0c:c0:
6d:fd:a8:13:13:b1:5d:42:03:3c:80:f1:e2:c6:92:
c7:b7:d7:b2:90:b0:83:8d:a9:c8:8b:35:77:be:ec:
09:ff:02:aa:40:da:2e:42:37:d7:fb:77:40:bd:e8:
ba:ea:cb:ff:ce:cf:09:72:cf:fa:ba:c7:e5:7c:c7:
46:dd:2f:1d:6b:b9:2d:13:c7:7a:5e:37:9f:8c:92:
4d:d0:40:23:9c:5d:02:95:f9:38:ef:61:21:39:1a:
1f:98:f5:1f:38:49:fe:2f:95:cb:ee:b5:72:4c:ef:
5d:e4:fd:27:67:73:b6:9c:4e:76:48:39:ef:bc:ba:
23:05:65:43:2b:04:73:ed:08:86:d3:99:c0:6f:4d:
67:a8:5b:85:06:86:3c:c6:8f:62:c5:0e:ea:ae:36:
29:b2:9f:e1:82:c2:7f:cd:36:14:2d:28:5a:19:10:
6b:03:52:97:a3:4a:c0:f5:b5:c0:75:71:e7:9f:ea:
c1:24:25:70:6e:be:83:79:d4:d4:87:be:63:e0:5c:
9c:fc:bc:79:57:3e:7f:1e:30:a5:89:b8:57:93:53:
a4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:12:2D:C5:D4:70:8B:3E:9E:E7:97:F4:F0:CB:75:EE:69:70:BD:5F
X509v3 Authority Key Identifier:
keyid:FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/8BItxdRwiz6e55f08Mt17mlwvV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.208.196.0/24
Signature Algorithm: sha256WithRSAEncryption
16:48:37:3b:4e:6e:ae:91:ff:2d:94:c3:8d:4b:30:1e:a9:9c:
d5:e2:0a:4d:a0:82:7e:64:1a:09:83:b0:d6:53:eb:75:8d:22:
e6:3a:e9:37:c6:57:87:f6:b4:00:17:16:ab:07:25:ec:e8:0a:
6d:ec:d6:0f:b3:58:8c:d9:b0:32:24:2d:55:2e:e0:80:1b:54:
83:b2:2b:09:88:f6:ed:6c:30:5f:43:d2:fe:8a:95:91:86:be:
a0:f6:2d:87:34:b5:db:8f:49:9c:df:6a:e7:10:0f:e1:a8:a5:
28:25:5c:a8:e2:7e:33:21:b7:0e:85:9d:1f:8a:50:63:ee:9b:
98:b1:cb:b5:f4:09:0b:7e:73:0f:e0:4e:98:f5:f4:75:d7:89:
bc:3c:e6:b9:f0:9f:e4:6f:f2:3d:99:ec:02:52:c2:f4:0d:55:
c5:2f:73:90:0f:62:85:7f:61:75:a1:e2:52:0a:69:24:46:c2:
fe:f0:f5:46:93:73:45:d7:ed:e4:94:3a:2a:59:fc:09:7d:a5:
29:f2:34:2c:8d:80:27:a2:eb:ac:ca:c9:7f:8a:30:68:eb:ba:
93:91:0c:13:89:b2:1d:ed:0e:b6:89:19:19:ae:53:08:7f:94:
41:56:37:f1:3e:06:9e:b0:ce:66:e9:31:1e:3b:a7:37:5a:ec:
0c:0c:5c:01
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZgyXwkO/VEeVQDyWhnOOHoHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMmFhNWFjZmM5YmIwZmU2YjkxMWYxZWNhZDNlYjU0ZDQ1
Y2IzNmYwHhcNMjUwNzIyMTM0MjI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDEyMmRjNWQ0NzA4YjNlOWVlNzk3ZjRmMGNiNzVlZTY5NzBiZDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklI3WKHAGNFOrbIht/hfN8E3K5yh
Ap/JjrCRrnkcciAFkfDPxZEGs/HODMBt/agTE7FdQgM8gPHixpLHt9eykLCDjanI
izV3vuwJ/wKqQNouQjfX+3dAvei66sv/zs8Jcs/6usflfMdG3S8da7ktE8d6Xjef
jJJN0EAjnF0Clfk472EhORofmPUfOEn+L5XL7rVyTO9d5P0nZ3O2nE52SDnvvLoj
BWVDKwRz7QiG05nAb01nqFuFBoY8xo9ixQ7qrjYpsp/hgsJ/zTYULShaGRBrA1KX
o0rA9bXAdXHnn+rBJCVwbr6DedTUh75j4Fyc/Lx5Vz5/HjClibhXk1Ok6QIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFPASLcXUcIs+nueX9PDLde5pcL1fMB8GA1UdIwQY
MBaAFPsqpaz8m7D+a5EfHsrT61TUXLNvMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS15cWxyUHlic1A1cmtSOGV5dFByVk5SY3MyOC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvZDllN2VkLTNjMGYtNGE5Mi04NzE2
LWVlMDU3Y2Y5YzE2MS8xLzhCSXR4ZFJ3aXo2ZTU1ZjA4TXQxN21sd3ZWOC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZjEvZDllN2VkLTNjMGYtNGE5Mi04NzE2LWVlMDU3Y2Y5YzE2
MS8xLzEteXFsclB5YnNQNXJrUjhleXRQclZOUmNzMjguY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC80MQw
DQYJKoZIhvcNAQELBQADggEBABZINztObq6R/y2Uw41LMB6pnNXiCk2ggn5kGgmD
sNZT63WNIuY66TfGV4f2tAAXFqsHJezoCm3s1g+zWIzZsDIkLVUu4IAbVIOyKwmI
9u1sMF9D0v6KlZGGvqD2LYc0tduPSZzfaucQD+GopSglXKjifjMhtw6FnR+KUGPu
m5ixy7X0CQt+cw/gTpj19HXXibw85rnwn+Rv8j2Z7AJSwvQNVcUvc5APYoV/YXWh
4lIKaSRGwv7w9UaTc0XX7eSUOipZ/Al9pSnyNCyNgCei66zKyX+KMGjrupORDBOJ
sh3tDraJGRmuUwh/lEFWN/E+Bp6wzmbpMR47pzda7AwMXAE=
-----END CERTIFICATE-----
Generated at Tue Jul 29 00:41:36 2025 by rpki-client