Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/2oXhmPmJrKT6T-roBJE29dyf8hU.roa
File: 2oXhmPmJrKT6T-roBJE29dyf8hU.roa (raw, json)
Hash identifier: k+a97zn87AfkOaB22DmhsTeTkt/L2YZttGTGllHrraQ=
Subject key identifier: DA:85:E1:98:F9:89:AC:A4:FA:4F:EA:E8:04:91:36:F5:DC:9F:F2:15
Certificate issuer: /CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Certificate serial: 01992B0FDD15956E58B8C3585829977599CE
Authority key identifier: 8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/2oXhmPmJrKT6T-roBJE29dyf8hU.roa
Signing time: Mon 08 Sep 2025 20:41:23 +0000
ROA not before: Mon 08 Sep 2025 20:41:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56495
IP address blocks: 31.40.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:0f:dd:15:95:6e:58:b8:c3:58:58:29:97:75:99:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Validity
Not Before: Sep 8 20:41:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da85e198f989aca4fa4feae8049136f5dc9ff215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:fd:d9:67:76:f1:a4:c1:1d:85:ff:04:1d:22:
92:c5:55:d3:25:2b:7e:cd:72:5b:68:e5:df:73:e2:
7b:f1:d1:4b:4d:fe:4a:36:fd:20:39:fe:f1:32:94:
01:5e:8c:54:54:d5:e4:04:5f:d0:41:ae:7f:3a:e7:
9e:7a:99:ac:2e:f1:2a:63:bd:fd:96:b8:cf:46:f0:
b2:c8:67:53:9d:3e:3b:6d:5d:ca:52:a9:d5:aa:39:
4e:2c:41:1b:ce:48:3a:8a:86:ed:6a:95:3c:ec:f5:
88:27:40:af:ed:b9:88:a1:ba:46:55:3f:c0:8f:a3:
26:e8:01:cc:53:3b:24:8b:66:0b:25:e7:c9:75:c2:
35:56:ac:18:ca:82:f4:28:b6:7e:cd:d2:df:27:9c:
7d:2e:a0:ea:c5:6f:12:7c:43:ce:54:7a:49:b5:30:
89:a7:5a:cd:04:d9:88:a3:28:61:08:f2:c7:22:9e:
18:80:11:99:82:34:b8:6d:1e:25:22:9a:0d:00:09:
35:ec:8d:d3:c2:94:08:30:c8:ee:28:59:2d:e3:3e:
c8:f2:a1:4b:c2:02:a4:70:14:20:65:34:39:5c:6a:
dc:15:c8:29:80:47:2f:46:d3:0b:2b:b8:f5:ef:e4:
b7:65:5a:28:b4:80:a2:88:22:cd:2f:35:a0:09:81:
c9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:85:E1:98:F9:89:AC:A4:FA:4F:EA:E8:04:91:36:F5:DC:9F:F2:15
X509v3 Authority Key Identifier:
keyid:8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/2oXhmPmJrKT6T-roBJE29dyf8hU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.7.0/24
Signature Algorithm: sha256WithRSAEncryption
88:44:17:fd:f0:1c:0e:b3:6c:de:68:f1:6b:23:c5:1a:b8:1b:
c0:da:3b:71:5a:c5:b5:c9:c9:d1:4e:0b:d6:25:52:00:05:37:
be:9d:c3:f0:d0:b8:e2:f7:71:c4:f0:cf:e1:f8:2f:31:6a:da:
c1:79:47:34:92:94:6f:18:3a:d9:46:ee:d0:4c:46:61:7a:c7:
a9:2b:0a:a0:81:8a:e8:7a:3c:b4:5d:97:70:d9:9a:14:ec:df:
8e:a4:fe:de:17:82:3d:7a:86:55:b6:22:77:ea:6f:3e:82:f2:
39:34:02:dd:29:0e:8a:aa:d7:82:21:05:70:fe:d5:c3:ec:0f:
88:21:31:59:46:27:95:46:3a:91:40:cb:6f:4d:37:90:f4:43:
ad:c9:af:09:97:a7:df:14:67:d4:d7:f1:a7:0f:a7:20:c4:01:
a4:24:27:6f:41:02:57:48:b2:95:7e:01:30:79:f5:c5:15:10:
4e:43:77:ea:c7:f1:9f:fd:01:11:06:5d:df:08:0d:e9:4a:62:
60:b0:70:1e:70:d2:6c:28:8c:bc:b1:29:14:f0:73:4d:b7:4a:
60:ef:22:a5:40:73:8c:d4:5d:15:93:c4:91:d0:df:ca:42:b5:
55:b2:b5:c5:21:d2:8d:ea:de:b9:e3:09:c4:10:43:8b:6d:38:
a0:d9:c7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 20:37:21 2025 by rpki-client