Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/8rwWZi4spjQVqa4jtS9v8fqNE5I.roa
File: 8rwWZi4spjQVqa4jtS9v8fqNE5I.roa (raw, json)
Hash identifier: mh6barGghhF0GUA74ZJ5iP4OJOtYcuU25+Ys7lgbD7E=
Subject key identifier: F2:BC:16:66:2E:2C:A6:34:15:A9:AE:23:B5:2F:6F:F1:FA:8D:13:92
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 0198ED844094061E77CE350BC56133C4590C
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/8rwWZi4spjQVqa4jtS9v8fqNE5I.roa
Signing time: Wed 27 Aug 2025 21:52:04 +0000
ROA not before: Wed 27 Aug 2025 21:52:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61087
IP address blocks: 2a0e:4007:fff4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ed:84:40:94:06:1e:77:ce:35:0b:c5:61:33:c4:59:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Aug 27 21:52:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2bc16662e2ca63415a9ae23b52f6ff1fa8d1392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:57:05:f0:e5:15:1a:25:f3:99:98:05:a3:4f:
88:9c:fd:90:66:08:4f:4f:c3:05:d6:31:9b:63:08:
52:99:d5:fa:a4:ba:75:36:47:5f:8e:0f:ae:e3:e1:
70:fb:4c:f0:3f:23:c5:ce:a9:7f:88:d0:82:1f:ad:
2f:55:7a:5e:9b:eb:76:cf:67:58:d7:d7:c1:01:f7:
a3:fd:c1:b0:22:7a:d3:57:b7:5e:ef:6e:09:9c:f9:
4a:02:64:5b:0c:26:5b:5b:aa:a2:7c:be:d8:14:91:
68:94:87:f9:c8:0d:21:69:62:c5:3f:b3:99:41:28:
3e:39:45:6f:cb:b0:c2:dd:3b:e6:24:c1:ce:60:49:
1c:39:c2:19:ef:6e:d6:ff:f0:2b:bd:08:48:77:fa:
8c:77:d4:3c:20:f4:26:26:35:9f:84:2a:c3:5d:ee:
4c:73:28:88:a5:cc:4e:c9:e3:fe:1f:62:67:ad:7d:
26:a5:7b:c9:b1:59:89:cd:e6:ec:af:65:74:31:14:
b5:ca:a2:c5:00:1a:42:5a:d9:97:a1:c1:2a:9f:dc:
69:67:7f:8a:1f:1b:0b:e4:7f:fb:2f:1f:2f:e9:7d:
53:94:08:a4:00:8e:56:e2:d5:29:6a:db:5a:a6:2e:
81:ff:05:69:14:77:d6:e7:2e:16:9b:45:77:39:f6:
13:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BC:16:66:2E:2C:A6:34:15:A9:AE:23:B5:2F:6F:F1:FA:8D:13:92
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/8rwWZi4spjQVqa4jtS9v8fqNE5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4007:fff4::/48
Signature Algorithm: sha256WithRSAEncryption
b6:d7:ba:b9:fe:4b:ca:1c:d2:f9:fa:17:10:df:0f:96:2f:9b:
e0:7a:b1:24:48:fc:6e:11:dc:e9:46:f4:a8:f1:b7:f9:53:a5:
c4:cc:19:54:b7:42:2a:50:a9:24:ff:f8:c7:49:05:ad:81:d3:
19:94:ed:c1:43:aa:59:b7:83:48:20:cc:75:c1:d0:7c:39:5c:
3d:8f:d1:18:ea:bc:c9:99:ae:3d:d0:9a:5a:eb:27:0c:1a:cf:
7a:d4:fd:18:74:b0:5f:ed:55:ee:c5:0c:ff:54:00:d1:52:ae:
14:01:cf:ef:f6:a3:0c:4c:ec:c5:2a:34:d1:62:c7:74:4d:d4:
7e:db:a7:65:00:7c:c1:7e:60:86:52:b7:13:8a:8e:2a:dc:01:
1f:8d:5b:f6:ad:0e:9e:b4:4f:9c:80:71:08:82:30:f8:fd:d4:
81:c4:a4:a7:91:26:5f:2a:4c:d5:d4:c2:ba:92:71:88:38:69:
87:cd:fc:b4:1a:5f:e3:36:e7:2b:1c:a1:52:aa:0a:12:b6:c0:
a3:7b:bb:25:19:d7:62:47:da:8e:94:d4:96:84:97:90:ec:a1:
05:5f:6f:4b:7e:94:14:4f:f8:1d:ab:3f:51:0b:be:cd:95:46:
5e:9f:e9:2a:6a:9f:b8:99:20:08:f0:7a:8a:a7:f0:3e:eb:54:
f3:ad:0f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 09:24:44 2025 by rpki-client