Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/8k6ClTzEe4SSsmZAgXUSnPK9Ii8.roa
File: 8k6ClTzEe4SSsmZAgXUSnPK9Ii8.roa (raw, json)
Hash identifier: m+6p5azzOSpvaAx4gZnWGAghzk+PpdZC6bfHiCkS+NQ=
Subject key identifier: F2:4E:82:95:3C:C4:7B:84:92:B2:66:40:81:75:12:9C:F2:BD:22:2F
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 0199095C20BFE0A8F8CC05873189C8A37F4E
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/8k6ClTzEe4SSsmZAgXUSnPK9Ii8.roa
Signing time: Tue 02 Sep 2025 07:37:36 +0000
ROA not before: Tue 02 Sep 2025 07:37:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 45.146.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 10:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:09:5c:20:bf:e0:a8:f8:cc:05:87:31:89:c8:a3:7f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Sep 2 07:37:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f24e82953cc47b8492b266408175129cf2bd222f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e8:06:c6:9a:88:34:46:12:82:9e:e9:45:6c:
ae:3d:7d:9b:14:36:ce:b1:ea:ba:db:13:c1:d7:83:
e1:d5:00:06:e1:e1:b2:0f:0d:09:d8:ac:9b:5d:91:
af:de:f9:d6:b9:50:46:08:33:03:fd:a8:61:6e:94:
e2:07:27:8e:d6:fd:76:94:43:07:b9:d2:c4:6a:cd:
c3:e3:0a:37:f9:c0:25:f9:a6:8d:1f:6d:22:59:e8:
c3:03:86:90:b9:c3:b3:f2:7a:9d:e1:ed:74:28:db:
f6:e3:53:88:2e:58:0e:f0:ac:b9:e6:4b:8a:5d:6b:
73:c2:ee:37:17:81:6e:5c:74:ea:cc:fc:a8:3a:34:
ef:84:7f:e3:24:bc:59:5a:cd:64:7f:5b:9c:53:49:
db:c1:c3:f2:96:f7:6f:18:9f:c5:d5:3a:5d:7c:5b:
38:5c:8c:49:95:5a:36:1b:e1:0a:a5:00:67:54:5f:
ab:60:85:d5:f6:14:61:17:54:d0:f6:1e:2e:03:09:
1e:27:36:19:82:02:f9:dd:32:ad:1b:0a:45:72:6c:
03:8b:ca:91:86:16:4b:3a:6b:f6:db:64:34:ec:d9:
6f:76:b2:43:4d:1e:12:b2:a9:f2:87:11:04:62:d5:
06:02:f5:2f:ad:44:86:4b:ea:92:f9:d1:00:83:2f:
ce:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:4E:82:95:3C:C4:7B:84:92:B2:66:40:81:75:12:9C:F2:BD:22:2F
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/8k6ClTzEe4SSsmZAgXUSnPK9Ii8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.203.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:1a:93:28:a2:12:d8:dc:3c:f2:b7:d0:db:e0:f5:de:21:44:
7d:26:df:19:66:98:00:aa:7f:a2:1a:35:fe:82:3d:32:a5:03:
7c:71:85:e2:0e:3f:ce:2d:18:2c:88:88:24:43:ed:52:12:be:
d8:86:7b:1e:0e:0e:3d:ff:84:c6:68:bf:3b:76:73:f0:36:d9:
fe:af:4f:ea:6e:a7:29:c2:23:f3:c5:72:70:3f:61:64:b7:5e:
00:ff:61:7e:bc:3b:6f:40:02:64:58:e9:75:46:c0:d0:8f:44:
6f:f9:2b:ba:74:ab:19:b7:92:64:91:1f:14:72:53:ef:67:5b:
3c:21:d3:88:d0:81:01:f0:29:cf:29:b0:6a:ef:3d:8d:0d:bb:
63:61:75:4d:a4:0c:9a:2f:c5:8f:ad:7a:b5:d2:6b:dd:a4:af:
96:cb:94:3c:e2:07:a3:d9:64:c9:c9:07:15:6e:2a:4f:3b:e3:
00:e7:d1:a0:25:c3:1c:e0:9f:fa:03:f3:d6:55:a8:35:75:a5:
47:f1:d0:d9:72:97:4e:db:ed:b6:87:d5:8b:42:1a:91:3d:97:
f9:77:24:93:26:cd:0a:42:4d:68:df:be:89:ac:9e:9c:03:d5:
35:35:90:10:b4:95:39:13:38:1a:8c:23:37:db:05:3b:56:e0:
40:20:0e:72
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZkJXCC/4Kj4zAWHMYnIo39OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz
MGVhMTAwHhcNMjUwOTAyMDczNzM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjRlODI5NTNjYzQ3Yjg0OTJiMjY2NDA4MTc1MTI5Y2YyYmQyMjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+gGxpqINEYSgp7pRWyuPX2bFDbO
seq62xPB14Ph1QAG4eGyDw0J2KybXZGv3vnWuVBGCDMD/ahhbpTiByeO1v12lEMH
udLEas3D4wo3+cAl+aaNH20iWejDA4aQucOz8nqd4e10KNv241OILlgO8Ky55kuK
XWtzwu43F4FuXHTqzPyoOjTvhH/jJLxZWs1kf1ucU0nbwcPylvdvGJ/F1TpdfFs4
XIxJlVo2G+EKpQBnVF+rYIXV9hRhF1TQ9h4uAwkeJzYZggL53TKtGwpFcmwDi8qR
hhZLOmv222Q07NlvdrJDTR4SsqnyhxEEYtUGAvUvrUSGS+qS+dEAgy/OwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPJOgpU8xHuEkrJmQIF1EpzyvSIvMB8GA1UdIwQY
MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt
YWRkZjBlMTg0OWViLzEvOGs2Q2xUekVlNFNTc21aQWdYVVNuUEs5SWk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi
LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZLLMA0G
CSqGSIb3DQEBCwUAA4IBAQBsGpMoohLY3Dzyt9Db4PXeIUR9Jt8ZZpgAqn+iGjX+
gj0ypQN8cYXiDj/OLRgsiIgkQ+1SEr7YhnseDg49/4TGaL87dnPwNtn+r0/qbqcp
wiPzxXJwP2Fkt14A/2F+vDtvQAJkWOl1RsDQj0Rv+Su6dKsZt5JkkR8UclPvZ1s8
IdOI0IEB8CnPKbBq7z2NDbtjYXVNpAyaL8WPrXq10mvdpK+Wy5Q84gej2WTJyQcV
bipPO+MA59GgJcMc4J/6A/PWVag1daVH8dDZcpdO2+22h9WLQhqRPZf5dySTJs0K
Qk1o376JrJ6cA9U1NZAQtJU5EzgajCM32wU7VuBAIA5y
-----END CERTIFICATE-----
Generated at Thu Sep 18 17:55:30 2025 by rpki-client