Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/8n8zo5rtakZ1whW9-uc5uUrGQWs.roa
File: 8n8zo5rtakZ1whW9-uc5uUrGQWs.roa (raw, json)
Hash identifier: aqUj+0Ybl2fHs4Ve+OniwJ/DSH+hH1A2s4EAgpbtDzc=
Subject key identifier: F2:7F:33:A3:9A:ED:6A:46:75:C2:15:BD:FA:E7:39:B9:4A:C6:41:6B
Certificate issuer: /CN=e482fd07e20d406ea4152e492b000e554ebfcc80
Certificate serial: 0199DDA14700077B36F3CBA58F04534F8EB9
Authority key identifier: E4:82:FD:07:E2:0D:40:6E:A4:15:2E:49:2B:00:0E:55:4E:BF:CC:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5IL9B-INQG6kFS5JKwAOVU6_zIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/8n8zo5rtakZ1whW9-uc5uUrGQWs.roa
Signing time: Mon 13 Oct 2025 12:52:38 +0000
ROA not before: Mon 13 Oct 2025 12:52:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41625
IP address blocks: 89.31.240.0/21 maxlen: 21
89.31.242.0/24 maxlen: 24
89.31.246.0/24 maxlen: 24
185.219.90.0/24 maxlen: 24
2a00:8900::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5IL9B-INQG6kFS5JKwAOVU6_zIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:dd:a1:47:00:07:7b:36:f3:cb:a5:8f:04:53:4f:8e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e482fd07e20d406ea4152e492b000e554ebfcc80
Validity
Not Before: Oct 13 12:52:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f27f33a39aed6a4675c215bdfae739b94ac6416b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:01:a4:53:1b:2f:b8:57:b9:29:6d:c8:51:9b:
7a:d4:fc:57:96:14:6c:7f:f3:34:1d:62:5d:5b:3a:
d0:bc:d6:da:f2:56:51:e8:47:8d:53:27:5d:29:c9:
fd:f2:12:6c:5c:8f:34:b9:24:0d:c2:e2:47:5e:c3:
87:e3:49:67:11:09:1e:96:c4:49:61:26:e8:e3:4b:
90:d1:de:5c:8c:70:9e:8d:8f:75:0d:3b:3a:47:04:
4f:e8:b9:43:01:58:cd:ae:22:3f:05:9f:34:53:57:
46:e3:49:17:01:84:df:a9:e4:ca:b3:cc:48:77:15:
10:c4:97:a3:c2:26:2a:1f:af:2c:96:e5:76:6b:ee:
e5:c3:f2:47:e2:79:dd:c6:71:79:1e:89:07:30:d3:
64:61:f5:3f:6c:b5:5e:bb:16:3d:9d:0c:b9:8c:7f:
f2:f3:61:72:8b:f7:3a:ba:d2:7f:4f:59:4b:3d:4a:
18:af:1d:90:b6:f1:c6:6a:e5:ff:16:2b:ae:c5:1c:
b2:3c:31:e4:24:45:8d:cd:c4:44:0a:17:ae:fe:9e:
a9:b5:ac:47:4c:04:8b:e0:2c:dc:b1:72:ed:0c:cb:
37:4c:78:c9:f7:dc:b0:3f:b5:52:d4:49:23:0c:98:
54:5a:f8:19:70:18:a4:0f:b2:f5:5f:17:16:3e:60:
1a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7F:33:A3:9A:ED:6A:46:75:C2:15:BD:FA:E7:39:B9:4A:C6:41:6B
X509v3 Authority Key Identifier:
keyid:E4:82:FD:07:E2:0D:40:6E:A4:15:2E:49:2B:00:0E:55:4E:BF:CC:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5IL9B-INQG6kFS5JKwAOVU6_zIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/8n8zo5rtakZ1whW9-uc5uUrGQWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/5IL9B-INQG6kFS5JKwAOVU6_zIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.31.240.0/21
185.219.90.0/24
IPv6:
2a00:8900::/32
Signature Algorithm: sha256WithRSAEncryption
67:0d:9f:54:84:95:ac:96:86:d6:32:e1:14:58:68:0d:97:5f:
07:32:b1:6e:62:02:55:c1:75:f4:7b:fe:f4:fa:7e:45:20:23:
cc:70:81:bd:7f:ae:74:00:ad:9b:50:11:30:23:52:a7:67:b4:
06:8b:2b:71:b6:fd:a5:c9:70:3f:e0:0f:aa:e9:d1:98:23:91:
a1:71:c8:b3:98:b0:12:65:ac:3b:60:c4:59:e3:a1:d5:0f:d3:
a3:36:a0:df:31:c8:dc:54:0b:b8:a9:a0:c1:07:6d:ae:65:e2:
ff:f9:90:9e:28:16:1f:40:c2:2c:d6:f5:b5:63:bf:2e:d1:c5:
9a:e1:d7:3a:85:90:89:36:94:15:34:bb:09:e0:eb:b4:12:40:
b9:40:73:01:a9:0f:3c:6a:d3:f6:b8:17:e3:70:1a:9a:ec:71:
c1:b4:41:51:02:f5:fe:03:11:a8:93:33:03:45:5a:b0:64:73:
04:83:53:dc:fd:8d:b0:94:c9:e3:fb:ea:c1:db:9b:ec:22:30:
ca:2c:f5:dd:79:8b:9a:bf:9a:9d:c5:52:32:54:c1:58:85:f1:
0f:cc:96:73:12:c7:5a:a8:49:b1:0d:6c:0e:e2:a1:0e:de:d0:
48:ba:37:27:ad:80:36:58:81:61:3f:cd:40:03:d6:34:0c:07:
bc:ba:45:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 15:22:46 2025 by rpki-client