Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/8XNaaQLcyRXLRD6S2MD84w0TfaU.roa
File: 8XNaaQLcyRXLRD6S2MD84w0TfaU.roa (raw, json)
Hash identifier: wJweyews2QzPyCWiVzETDNuTs8G5FSS7/q5D7eGYmgM=
Subject key identifier: F1:73:5A:69:02:DC:C9:15:CB:44:3E:92:D8:C0:FC:E3:0D:13:7D:A5
Certificate issuer: /CN=05eb8cbbaaf25a71bf2fcab6e11057ebf91f01e3
Certificate serial: 0196FA0BBAA09B7ED406B403184BED90A31C
Authority key identifier: 05:EB:8C:BB:AA:F2:5A:71:BF:2F:CA:B6:E1:10:57:EB:F9:1F:01:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BeuMu6ryWnG_L8q24RBX6_kfAeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/8XNaaQLcyRXLRD6S2MD84w0TfaU.roa
Signing time: Thu 22 May 2025 22:09:54 +0000
ROA not before: Thu 22 May 2025 22:09:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8434
IP address blocks: 193.241.241.0/24 maxlen: 24
193.241.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/BeuMu6ryWnG_L8q24RBX6_kfAeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/BeuMu6ryWnG_L8q24RBX6_kfAeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BeuMu6ryWnG_L8q24RBX6_kfAeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fa:0b:ba:a0:9b:7e:d4:06:b4:03:18:4b:ed:90:a3:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05eb8cbbaaf25a71bf2fcab6e11057ebf91f01e3
Validity
Not Before: May 22 22:09:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1735a6902dcc915cb443e92d8c0fce30d137da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:35:4c:b4:dd:ee:61:18:e0:3e:95:8d:1b:d5:
90:4d:be:cd:53:b4:b1:f6:e8:df:b5:87:38:4e:93:
bf:5e:9b:dc:bb:f7:6a:98:62:1c:7f:27:76:83:16:
33:40:fd:8e:15:a5:98:c9:2c:18:64:84:46:75:46:
45:f9:43:6b:c6:20:cf:03:0b:9f:4f:31:4e:b1:f5:
b0:6b:16:50:db:49:a4:62:76:e4:47:e0:6d:ee:df:
1a:7a:ff:63:bb:a9:eb:d4:5e:9f:5a:b3:f1:5a:79:
97:e1:f9:3e:ec:51:1e:47:f0:aa:f4:79:5d:37:52:
a7:d7:a2:c9:ea:4c:27:ec:55:17:60:5b:2d:8f:a1:
89:5e:0f:a7:8b:ea:ab:69:d2:b6:af:6c:31:7b:94:
3e:79:8d:1b:56:39:f1:52:6b:4b:75:c4:48:05:9f:
41:45:7f:0c:ba:31:cd:3f:e3:79:1c:73:4a:a1:a7:
08:d2:73:94:b1:2e:38:6a:d1:0e:d9:18:ee:0e:91:
cc:30:7d:f0:5e:1e:f8:b1:0a:1e:a1:ab:80:2f:d1:
4d:3f:19:03:6d:aa:99:9d:67:bc:1b:00:88:ee:cb:
36:74:31:be:a0:b9:a9:89:6e:87:9d:3b:d6:3e:80:
45:4c:47:e7:bb:64:a9:d8:a4:d4:80:43:db:9b:5f:
dd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:73:5A:69:02:DC:C9:15:CB:44:3E:92:D8:C0:FC:E3:0D:13:7D:A5
X509v3 Authority Key Identifier:
keyid:05:EB:8C:BB:AA:F2:5A:71:BF:2F:CA:B6:E1:10:57:EB:F9:1F:01:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BeuMu6ryWnG_L8q24RBX6_kfAeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/8XNaaQLcyRXLRD6S2MD84w0TfaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/BeuMu6ryWnG_L8q24RBX6_kfAeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.241.241.0/24
193.241.249.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:7d:82:87:28:dd:34:03:94:c5:94:8e:ba:31:30:19:5b:eb:
0b:32:58:38:43:f7:4f:eb:b3:5a:f8:cc:e0:5d:4f:7a:cf:4a:
76:67:ee:0c:a9:ba:0b:21:78:0f:d5:76:18:62:5f:63:95:74:
8a:15:6f:74:d4:6d:e9:fa:a2:e5:07:85:af:51:83:3c:16:e0:
0d:d5:2b:d6:79:fc:15:cb:1e:6b:15:5e:09:34:d9:8f:7b:4e:
dc:0c:cb:ce:1b:6b:63:c5:19:2a:7a:6a:fe:6d:9e:c3:ac:22:
05:18:ed:65:d8:87:56:08:01:13:6a:83:d6:4e:ce:18:ad:18:
9e:33:68:4a:ea:96:40:99:40:43:0c:0c:45:bf:1f:65:25:e9:
fa:07:15:21:a6:b7:64:e4:27:1d:99:07:04:ed:59:25:9f:40:
4a:94:84:b9:d6:e5:15:35:7e:da:a9:f6:ca:f2:e8:a8:8c:db:
7b:f1:c9:dc:d8:7a:0f:26:1b:85:5f:ce:69:c8:f5:8d:e2:d2:
b5:c0:96:6f:f0:ac:47:2a:cb:4f:53:f5:f4:0e:38:b5:c6:5a:
0b:aa:0d:9b:ae:f5:24:c2:03:06:6f:7d:59:97:5f:ba:a4:dc:
ce:04:fe:93:6f:91:f6:bc:c0:e0:90:72:c1:3d:5b:5c:4d:a0:
fa:ad:4b:a6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZb6C7qgm37UBrQDGEvtkKMcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZWI4Y2JiYWFmMjVhNzFiZjJmY2FiNmUxMTA1N2ViZjkx
ZjAxZTMwHhcNMjUwNTIyMjIwOTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTczNWE2OTAyZGNjOTE1Y2I0NDNlOTJkOGMwZmNlMzBkMTM3ZGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzVMtN3uYRjgPpWNG9WQTb7NU7Sx
9ujftYc4TpO/Xpvcu/dqmGIcfyd2gxYzQP2OFaWYySwYZIRGdUZF+UNrxiDPAwuf
TzFOsfWwaxZQ20mkYnbkR+Bt7t8aev9ju6nr1F6fWrPxWnmX4fk+7FEeR/Cq9Hld
N1Kn16LJ6kwn7FUXYFstj6GJXg+ni+qradK2r2wxe5Q+eY0bVjnxUmtLdcRIBZ9B
RX8MujHNP+N5HHNKoacI0nOUsS44atEO2RjuDpHMMH3wXh74sQoeoauAL9FNPxkD
baqZnWe8GwCI7ss2dDG+oLmpiW6HnTvWPoBFTEfnu2Sp2KTUgEPbm1/dgwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPFzWmkC3MkVy0Q+ktjA/OMNE32lMB8GA1UdIwQY
MBaAFAXrjLuq8lpxvy/KtuEQV+v5HwHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmV1TXU2cnlXbkdfTDhxMjRSQlg2X2tmQWVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9kY2M4NmEtNWY1MS00ZDEyLTk2M2Qt
ZjI3YzYyOGI4MzUzLzEvOFhOYWFRTGN5UlhMUkQ2UzJNRDg0dzBUZmFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9kY2M4NmEtNWY1MS00ZDEyLTk2M2QtZjI3YzYyOGI4MzUz
LzEvQmV1TXU2cnlXbkdfTDhxMjRSQlg2X2tmQWVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwfHxAwQA
wfH5MA0GCSqGSIb3DQEBCwUAA4IBAQBMfYKHKN00A5TFlI66MTAZW+sLMlg4Q/dP
67Na+MzgXU96z0p2Z+4MqboLIXgP1XYYYl9jlXSKFW901G3p+qLlB4WvUYM8FuAN
1SvWefwVyx5rFV4JNNmPe07cDMvOG2tjxRkqemr+bZ7DrCIFGO1l2IdWCAETaoPW
Ts4YrRieM2hK6pZAmUBDDAxFvx9lJen6BxUhprdk5CcdmQcE7Vkln0BKlIS51uUV
NX7aqfbK8uiojNt78cnc2HoPJhuFX85pyPWN4tK1wJZv8KxHKstPU/X0Dji1xloL
qg2brvUkwgMGb31Zl1+6pNzOBP6Tb5H2vMDgkHLBPVtcTaD6rUum
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:58:53 2025 by rpki-client