Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/RAu8NiHpx-KQdu3vcuo0hAqzcBY.roa
File: RAu8NiHpx-KQdu3vcuo0hAqzcBY.roa (raw, json)
Hash identifier: TvBy/Hr3oNAjZZF+wN/4+8BRq8bhVBTAjV9303cZWTU=
Subject key identifier: 44:0B:BC:36:21:E9:C7:E2:90:76:ED:EF:72:EA:34:84:0A:B3:70:16
Certificate issuer: /CN=7b88d4a4ab18a59b664dabafdb3880dc35b22b91
Certificate serial: 0198E0CCA429303FD786BD1A3B5D637F256E
Authority key identifier: 7B:88:D4:A4:AB:18:A5:9B:66:4D:AB:AF:DB:38:80:DC:35:B2:2B:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/RAu8NiHpx-KQdu3vcuo0hAqzcBY.roa
Signing time: Mon 25 Aug 2025 10:36:04 +0000
ROA not before: Mon 25 Aug 2025 10:36:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57814
IP address blocks: 195.80.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e0:cc:a4:29:30:3f:d7:86:bd:1a:3b:5d:63:7f:25:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b88d4a4ab18a59b664dabafdb3880dc35b22b91
Validity
Not Before: Aug 25 10:36:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=440bbc3621e9c7e29076edef72ea34840ab37016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:47:bd:99:c1:26:ad:56:df:6e:50:a9:1a:42:
54:0a:7f:76:42:07:71:35:e1:65:07:9c:ab:ec:bd:
56:be:29:93:6f:f1:42:20:55:68:ef:0d:95:f6:de:
b3:84:46:f3:e6:10:0a:f6:cf:6b:86:df:44:16:2a:
2a:9a:a0:22:2e:a7:8f:06:e9:69:90:a9:a0:41:e2:
64:23:b1:c1:8f:3c:79:92:b6:d3:33:c5:a7:e5:e1:
d5:c5:87:37:c5:75:56:3d:06:67:8b:03:2c:43:4b:
07:c7:fb:0d:66:c0:f8:fc:76:60:c8:d5:a2:67:9d:
b4:e7:f6:c8:5a:5c:dc:91:69:3c:5c:0e:1f:c1:3c:
ce:08:46:ca:e5:b4:b4:d8:b2:2d:85:e0:45:35:f1:
5f:da:9d:de:b8:2d:ea:98:79:2a:3b:39:64:2b:fb:
86:05:27:6d:1c:28:b2:8e:7e:93:31:28:f8:e7:36:
38:6b:20:a8:4e:12:ea:ea:3f:89:f8:84:4f:21:1b:
01:48:4d:a3:ed:df:70:b9:dc:fd:42:4d:84:00:3e:
b8:03:56:01:3f:16:ff:a0:d3:6d:e1:b8:a0:42:72:
55:69:ff:37:09:5f:f8:9a:07:c4:50:14:6e:32:f5:
90:eb:47:38:7f:54:46:5f:d9:68:33:0b:19:37:53:
98:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0B:BC:36:21:E9:C7:E2:90:76:ED:EF:72:EA:34:84:0A:B3:70:16
X509v3 Authority Key Identifier:
keyid:7B:88:D4:A4:AB:18:A5:9B:66:4D:AB:AF:DB:38:80:DC:35:B2:2B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/RAu8NiHpx-KQdu3vcuo0hAqzcBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.80.233.0/24
Signature Algorithm: sha256WithRSAEncryption
29:3f:42:00:ac:bb:74:6a:2a:42:24:73:7c:39:7f:f4:f4:bc:
26:97:cd:d7:52:73:f0:46:a5:0d:79:ce:9e:3b:03:30:e5:1a:
3d:96:89:ec:91:49:d1:b6:dc:f0:1d:be:e1:3a:f4:6c:17:9c:
6f:d0:9f:11:41:df:53:5c:67:38:01:35:63:5c:82:06:5c:35:
bb:7d:dd:33:9a:8e:0b:1e:b2:d6:ed:e5:dd:5e:c5:c0:58:16:
ed:dc:f2:53:44:9c:65:ff:4e:c9:af:b1:91:e2:45:f2:89:37:
98:73:e1:52:d6:19:72:94:2d:54:a1:92:84:43:e8:f3:63:63:
9d:4c:c3:ca:e1:ff:4e:f4:8a:2f:e9:25:9b:19:68:84:5b:46:
4b:2e:8c:87:0b:9f:35:50:60:74:48:d3:76:01:bb:f3:8e:7f:
df:eb:72:30:92:da:b9:7c:a0:ac:06:4d:f4:31:cf:44:02:56:
59:dd:0c:2c:63:b1:16:5a:0d:b3:12:d2:75:d5:80:3b:82:26:
b7:6e:02:f0:fe:8e:35:a5:4d:c8:01:71:d6:25:c0:6f:fe:63:
b4:d4:3f:a2:66:06:99:51:f6:d6:2b:32:69:15:d9:31:d1:ad:
1b:de:93:63:56:1d:1e:92:d5:ff:5d:57:45:4d:1d:b2:28:71:
eb:94:19:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:38:40 2025 by rpki-client