Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/8tkE_UoEzTGGvSS_bgTvrWx6MpM.roa
File: 8tkE_UoEzTGGvSS_bgTvrWx6MpM.roa (raw, json)
Hash identifier: ocveRvdKmq2/uNW55ltBS2tVePO3vLCP/eERUMjU3Xk=
Subject key identifier: F2:D9:04:FD:4A:04:CD:31:86:BD:24:BF:6E:04:EF:AD:6C:7A:32:93
Certificate issuer: /CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e
Certificate serial: 019A004EF9CF5ACAFF3722B5A892EC7D05C3
Authority key identifier: 98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/8tkE_UoEzTGGvSS_bgTvrWx6MpM.roa
Signing time: Mon 20 Oct 2025 06:29:27 +0000
ROA not before: Mon 20 Oct 2025 06:29:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56655
IP address blocks: 45.88.200.0/24 maxlen: 24
45.88.201.0/24 maxlen: 24
45.88.202.0/24 maxlen: 24
185.14.97.0/24 maxlen: 24
185.125.168.0/22 maxlen: 22
185.181.60.0/22 maxlen: 22
185.243.216.0/24 maxlen: 24
185.243.217.0/24 maxlen: 24
185.243.218.0/24 maxlen: 24
193.200.221.0/24 maxlen: 24
193.200.229.0/24 maxlen: 24
193.200.238.0/24 maxlen: 24
193.243.189.0/24 maxlen: 24
194.32.107.0/24 maxlen: 24
194.110.207.0/24 maxlen: 24
195.16.73.0/24 maxlen: 24
198.140.141.0/24 maxlen: 24
2a03:94e0::/32 maxlen: 32
2a03:94e1::/32 maxlen: 32
2a03:94e2::/32 maxlen: 32
2a03:94e3::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft
rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:4e:f9:cf:5a:ca:ff:37:22:b5:a8:92:ec:7d:05:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e
Validity
Not Before: Oct 20 06:29:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2d904fd4a04cd3186bd24bf6e04efad6c7a3293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5b:62:04:c1:6c:78:2f:df:15:6e:ed:39:e9:
68:b5:5d:8a:4e:46:3a:a2:80:ce:87:b2:2d:00:23:
d6:23:45:66:27:97:76:34:c4:e0:cf:9a:b2:f6:e3:
20:4f:e6:1b:15:8d:04:ed:5b:20:54:64:b1:a6:01:
84:5c:7a:d9:b3:92:84:9f:a5:82:2a:94:5e:96:0c:
f0:7f:9c:4a:66:cb:e8:b5:33:dc:60:4f:9d:6c:f5:
10:c2:02:16:e4:b0:ed:8b:9f:60:23:9d:8e:62:42:
9f:2c:9d:66:69:19:e9:88:51:86:39:42:f9:d4:34:
ca:f1:a0:88:12:08:d8:dd:aa:f5:00:24:ad:bb:6b:
6a:0d:14:db:c2:66:94:15:15:14:a9:dc:63:27:43:
e3:e3:6c:46:84:a0:5f:83:68:a2:33:e4:a8:4b:1b:
96:95:83:fb:6f:8b:48:d4:c3:8c:4a:a0:c6:88:ab:
56:5c:59:00:81:c8:a3:7c:f2:e7:23:5b:15:22:4b:
b8:c2:45:8f:26:86:7b:28:c4:b1:19:bd:a6:74:cc:
03:9c:9f:11:df:88:6a:ae:c0:cd:b5:f7:66:c2:c5:
81:b6:f8:20:74:3c:b2:1a:50:a7:97:84:88:90:e6:
0c:cb:50:9d:09:30:3d:00:62:99:3c:b7:21:37:5e:
67:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D9:04:FD:4A:04:CD:31:86:BD:24:BF:6E:04:EF:AD:6C:7A:32:93
X509v3 Authority Key Identifier:
keyid:98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/8tkE_UoEzTGGvSS_bgTvrWx6MpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.200.0-45.88.202.255
185.14.97.0/24
185.125.168.0/22
185.181.60.0/22
185.243.216.0-185.243.218.255
193.200.221.0/24
193.200.229.0/24
193.200.238.0/24
193.243.189.0/24
194.32.107.0/24
194.110.207.0/24
195.16.73.0/24
198.140.141.0/24
IPv6:
2a03:94e0::/30
Signature Algorithm: sha256WithRSAEncryption
3b:2f:15:71:cb:1b:3c:7d:3c:19:38:29:32:c2:bd:20:8a:2f:
a7:b9:46:8f:f0:91:d5:c3:e5:d8:0a:52:8a:2f:46:01:84:a4:
a5:34:36:b0:99:1d:70:f9:90:43:73:56:f5:89:ed:cd:1d:b1:
17:72:43:28:18:89:0c:28:c2:18:8d:ee:e3:df:0d:dc:2f:71:
cd:09:d5:a8:a7:62:ec:79:18:49:7d:e0:05:e1:39:63:5c:13:
2e:e0:ee:cc:4f:a7:a9:15:5c:73:0b:0d:7e:4f:6d:dc:23:5f:
86:30:98:d9:22:fd:c0:62:61:a8:56:d9:a4:ee:20:49:ed:52:
e8:cf:3f:9b:f8:6e:35:5d:20:6d:40:39:0e:b5:04:fb:9a:9e:
b9:dc:c1:05:80:09:dd:51:41:2e:6f:44:98:c2:e1:99:3e:e2:
f5:dd:ab:f8:b9:2f:bc:79:0e:4f:6b:87:54:97:34:09:f5:8b:
84:20:d6:a7:20:82:d0:68:ed:3a:76:a2:27:88:a2:2a:0f:65:
06:93:21:e8:80:7e:e4:89:f4:73:90:b5:35:54:be:40:43:dd:
c2:a0:8f:68:44:bf:aa:a8:2a:1f:e9:3e:77:4e:90:25:10:8c:
0a:e2:ab:11:1d:dc:fe:70:f4:cc:ce:1c:f5:31:ff:f0:89:1d:
52:9f:af:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 16:46:22 2025 by rpki-client