Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/8b8XZgUbZkWVFARpp7m9ZlqzKIQ.roa
File: 8b8XZgUbZkWVFARpp7m9ZlqzKIQ.roa (raw, json)
Hash identifier: 06IYEhQv7ltXVIjI7b9mEeuvOzSH0qVlwKSUK1Gp94c=
Subject key identifier: F1:BF:17:66:05:1B:66:45:95:14:04:69:A7:B9:BD:66:5A:B3:28:84
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 0197350A9EC51002952B66C29E91DF452386
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/8b8XZgUbZkWVFARpp7m9ZlqzKIQ.roa
Signing time: Tue 03 Jun 2025 09:06:17 +0000
ROA not before: Tue 03 Jun 2025 09:06:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208161
IP address blocks: 81.12.52.0/23 maxlen: 24
87.107.10.0/23 maxlen: 24
87.107.12.0/24 maxlen: 24
87.107.54.0/23 maxlen: 24
87.107.104.0/23 maxlen: 24
87.107.146.0/23 maxlen: 24
87.107.154.0/24 maxlen: 24
87.107.155.0/24 maxlen: 24
87.107.164.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:35:0a:9e:c5:10:02:95:2b:66:c2:9e:91:df:45:23:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jun 3 09:06:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1bf1766051b664595140469a7b9bd665ab32884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:48:4e:8b:3d:b8:59:e6:92:52:76:3c:6d:5b:
3b:c2:cb:a3:89:a0:42:e0:fc:21:d1:2c:24:36:64:
ef:9a:5f:90:1b:97:6e:63:65:a0:7b:40:4f:c7:c2:
d7:f1:21:4f:76:ae:3b:47:e2:6a:86:7b:19:a0:8b:
31:36:a1:6a:60:90:f3:65:ff:d2:07:ea:96:ef:62:
13:00:51:dc:e1:37:76:91:66:5f:34:33:21:a0:64:
19:1e:64:b0:0d:88:f9:f3:70:ed:21:93:94:c9:d6:
e2:98:8a:f2:ce:39:91:ee:fc:f8:f7:11:3c:c0:32:
56:53:1f:dc:a7:df:9f:be:f0:89:6c:d2:a6:de:5a:
59:26:6b:59:f8:6d:50:ac:c1:c6:5b:4e:ea:e3:42:
46:a6:0d:2d:b1:73:e7:bb:11:a1:97:65:ee:cb:1e:
e7:a7:aa:f8:db:28:a0:28:31:22:a2:57:27:78:70:
53:9c:d3:7d:6e:a0:f4:2a:47:ac:be:4b:30:ed:6f:
fc:4d:ad:ce:7f:dc:db:69:d5:fc:53:aa:7d:19:22:
87:8f:29:99:e3:d2:9f:17:40:41:d2:36:52:8e:ed:
c2:47:83:e1:3c:d8:ec:7d:6c:d7:bb:31:54:b6:a2:
6d:5a:70:a9:7a:08:a9:80:aa:c3:0f:3b:e0:77:4c:
a4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BF:17:66:05:1B:66:45:95:14:04:69:A7:B9:BD:66:5A:B3:28:84
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/8b8XZgUbZkWVFARpp7m9ZlqzKIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.52.0/23
87.107.10.0-87.107.12.255
87.107.54.0/23
87.107.104.0/23
87.107.146.0/23
87.107.154.0/23
87.107.164.0/23
Signature Algorithm: sha256WithRSAEncryption
50:51:4c:e6:26:c4:9f:87:7d:78:cb:8c:61:a0:43:25:66:e5:
e6:59:a0:23:c7:e5:e8:62:4b:03:de:5b:e1:86:bb:1e:94:f6:
3d:fc:df:d5:26:05:28:97:b4:cf:26:56:a8:dc:1d:d6:eb:dc:
91:fa:2e:35:31:81:81:fb:5e:4c:4b:1c:9c:cf:c3:38:3a:b8:
2f:58:18:77:2e:c5:9c:ff:39:66:4c:13:5b:37:70:e0:88:ab:
21:50:da:47:e4:92:46:c3:34:70:a7:3c:b3:eb:79:ab:98:94:
dc:15:e8:23:12:4c:1f:7a:3b:85:d6:8f:a0:f6:2f:f1:a7:9a:
f2:8a:ea:c3:a1:b0:9c:ab:c9:b7:c3:a6:41:67:d0:98:8f:a7:
58:70:84:45:86:7f:ba:17:c6:96:cc:d4:85:6e:91:d6:2a:aa:
74:53:95:8f:61:f1:6f:33:29:d3:22:6d:83:c2:a1:8c:e1:cd:
ba:c6:6c:4d:9c:ec:5f:17:e5:8b:28:db:5e:c9:42:2a:91:30:
75:e5:7e:07:4c:a5:f9:ec:b1:5f:98:74:9e:f4:46:c8:bd:28:
b9:f8:c5:77:98:a4:2f:37:05:76:a8:38:22:14:55:12:a0:fe:
d5:3f:3d:f3:8b:66:16:ce:2a:74:26:64:76:23:0f:43:f7:2c:
cf:10:55:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:05:37 2025 by rpki-client