Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8BjdKG8cg5aqMGGv0AYtAB-yAoc.roa
File: 8BjdKG8cg5aqMGGv0AYtAB-yAoc.roa (raw, json)
Hash identifier: qJodcjmdroObhfVWRmrA1qfawhkoN6W7ra9Hblsvu60=
Subject key identifier: F0:18:DD:28:6F:1C:83:96:AA:30:61:AF:D0:06:2D:00:1F:B2:02:87
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 0199104A62E81DA23A1381A91F79F325726B
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8BjdKG8cg5aqMGGv0AYtAB-yAoc.roa
Signing time: Wed 03 Sep 2025 15:55:34 +0000
ROA not before: Wed 03 Sep 2025 15:55:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8151
IP address blocks: 158.173.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:10:4a:62:e8:1d:a2:3a:13:81:a9:1f:79:f3:25:72:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Sep 3 15:55:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f018dd286f1c8396aa3061afd0062d001fb20287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e1:07:9b:c6:1a:a7:b6:b0:34:94:3d:90:f8:
c5:9f:d6:b5:ea:c1:2e:11:6c:3a:89:b2:91:6d:dc:
5e:9f:99:ab:ea:11:a6:2a:73:4a:28:c7:93:0f:bb:
ef:69:ff:28:6d:e9:7f:76:d7:3c:90:55:a1:31:a4:
03:6e:a0:53:6d:be:32:a2:27:11:4b:b4:7e:80:95:
04:b6:b4:30:a7:15:f0:e9:83:3c:2e:74:43:77:7d:
4a:14:83:d9:ce:4f:5e:bf:d3:39:18:39:9a:f8:03:
18:da:91:6e:47:66:f8:01:ea:fa:70:96:52:30:1a:
d0:36:cb:e8:ef:1c:fc:5c:13:69:64:01:a1:23:15:
50:61:21:e1:1d:11:bf:49:f7:59:ed:e9:ca:6c:62:
3d:e1:2c:53:67:bc:52:4f:6a:04:12:d0:6e:b9:59:
67:8a:7f:2b:89:32:7c:e7:af:5b:76:41:48:60:15:
49:54:a6:e2:47:4e:99:f8:fc:48:d5:8e:e5:d5:b2:
b4:88:9c:bc:02:d1:95:6c:f3:51:4f:82:bb:e1:0f:
06:01:07:a1:0c:10:35:0a:31:5f:a2:d2:e8:66:64:
98:6f:80:5d:90:21:9f:de:42:94:6b:01:e3:8a:43:
d8:49:18:5f:e9:83:0f:46:d6:80:ea:0c:5a:af:49:
51:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:18:DD:28:6F:1C:83:96:AA:30:61:AF:D0:06:2D:00:1F:B2:02:87
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8BjdKG8cg5aqMGGv0AYtAB-yAoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.133.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:2a:f9:8e:1c:96:f7:35:35:67:76:2a:f0:24:a2:ee:6c:9c:
d0:ed:81:34:15:49:e4:6c:d3:a6:27:1f:ca:d9:51:da:16:88:
f6:2a:9f:fd:3b:e7:49:00:84:9d:89:af:92:17:b3:65:f3:95:
3b:9f:76:e5:cb:63:75:46:aa:de:de:39:f6:a5:a7:b0:59:40:
06:0a:91:85:4c:62:62:dd:11:55:3f:cf:01:f7:1c:96:08:6c:
4d:16:32:98:ba:68:69:67:80:3d:2d:a3:93:4f:55:e0:e9:5d:
b7:01:fe:ca:43:37:76:bf:87:eb:cc:d0:c3:a9:5c:ed:73:0f:
cd:20:41:05:6a:a1:7c:fb:03:65:6f:f6:6d:17:11:7f:52:73:
48:1e:93:81:0b:9e:f2:37:47:75:29:e5:67:8c:26:80:4b:2e:
c6:a5:3a:e8:5e:42:5c:41:d4:b7:ea:42:3a:f2:24:c7:51:0d:
91:82:08:28:a8:b4:42:c3:10:fd:2c:e8:5c:9d:fc:4a:45:f9:
ab:b0:9e:0e:03:fc:a1:4a:44:d6:9a:03:0c:87:97:4a:76:f6:
81:82:f3:3d:2b:c8:1b:4d:65:dc:76:df:50:c5:b7:f0:bf:72:
7a:bc:b3:8a:ea:62:50:07:fb:1f:23:9e:0f:18:49:74:6c:09:
ff:b5:ac:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 11:49:07 2025 by rpki-client