Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/890a41-be76-434d-87cf-ccc82f2d57e0/1/8R7YPkWH5ZAK01MGxs__0nrLrxg.roa
File: 8R7YPkWH5ZAK01MGxs__0nrLrxg.roa (raw, json)
Hash identifier: rfeUdR+ncjatxCkAhvMnsRCgT5rqCaWEYWpsxW3Cs7Q=
Subject key identifier: F1:1E:D8:3E:45:87:E5:90:0A:D3:53:06:C6:CF:FF:D2:7A:CB:AF:18
Certificate issuer: /CN=644d731965489244a7bd28f893d0b3769afd996f
Certificate serial: 0198E0D30C50071EAD06DB6743EE74355770
Authority key identifier: 64:4D:73:19:65:48:92:44:A7:BD:28:F8:93:D0:B3:76:9A:FD:99:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/890a41-be76-434d-87cf-ccc82f2d57e0/1/8R7YPkWH5ZAK01MGxs__0nrLrxg.roa
Signing time: Mon 25 Aug 2025 10:43:04 +0000
ROA not before: Mon 25 Aug 2025 10:43:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48192
IP address blocks: 185.255.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/890a41-be76-434d-87cf-ccc82f2d57e0/1/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/890a41-be76-434d-87cf-ccc82f2d57e0/1/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e0:d3:0c:50:07:1e:ad:06:db:67:43:ee:74:35:57:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644d731965489244a7bd28f893d0b3769afd996f
Validity
Not Before: Aug 25 10:43:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f11ed83e4587e5900ad35306c6cfffd27acbaf18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:70:4a:8c:6b:64:cf:88:aa:46:d8:f8:37:83:
ea:5e:45:53:43:d8:42:9b:25:d9:0a:ec:31:97:41:
0e:1b:8b:0d:a5:16:f2:a8:af:2c:ea:59:8e:19:cc:
b6:75:c9:da:3a:23:d9:71:ce:8d:d4:28:8a:54:61:
f7:8c:77:64:ba:23:72:5d:2c:c9:1b:30:9b:c0:c4:
0a:8a:94:96:cb:e5:6c:07:07:4c:9d:07:76:72:da:
91:6e:dc:09:af:29:d0:3f:9f:69:23:ea:66:e2:56:
90:82:59:ec:c3:43:14:02:f5:40:3c:14:bd:b0:e1:
14:d8:6b:4e:4b:bd:25:a8:6d:67:c0:d4:f6:49:cd:
2b:74:54:2a:48:74:b4:29:9c:ee:a7:51:ea:18:27:
0e:9e:07:6a:45:ca:7d:8c:67:80:84:b6:c7:e6:cd:
a7:60:c2:f3:f7:21:79:32:ce:5b:d2:0a:8d:6e:7d:
bc:54:94:a9:af:a6:b6:e5:6b:a4:f3:ce:73:1b:6c:
51:8f:2b:4a:c2:27:9f:83:4a:41:cb:e9:51:3a:91:
d4:6c:da:91:33:15:16:70:22:8c:0c:1a:7d:15:e7:
38:52:b8:ef:47:71:d6:35:5b:3b:d7:85:9a:0a:c2:
30:40:9d:a0:c5:b6:e1:a3:5c:62:a1:2c:64:ec:7f:
74:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1E:D8:3E:45:87:E5:90:0A:D3:53:06:C6:CF:FF:D2:7A:CB:AF:18
X509v3 Authority Key Identifier:
keyid:64:4D:73:19:65:48:92:44:A7:BD:28:F8:93:D0:B3:76:9A:FD:99:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/890a41-be76-434d-87cf-ccc82f2d57e0/1/8R7YPkWH5ZAK01MGxs__0nrLrxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/890a41-be76-434d-87cf-ccc82f2d57e0/1/ZE1zGWVIkkSnvSj4k9Czdpr9mW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.18.0/24
Signature Algorithm: sha256WithRSAEncryption
38:53:04:7a:6f:c4:ab:9e:22:d6:2f:d8:3c:e6:d4:bb:ab:ac:
b4:84:06:60:a5:2c:72:df:cf:85:aa:69:7b:1d:ec:f0:16:99:
99:b7:2c:db:fe:7a:d2:49:3c:cf:71:16:52:2f:5e:3a:63:e7:
be:d5:cc:91:f6:cc:ed:5e:97:22:de:23:7a:d1:65:c3:de:f4:
0c:85:4e:dd:73:3d:59:61:6c:b2:be:18:78:9b:9a:5b:2b:b1:
cc:cb:99:60:d3:5a:fe:41:bd:2f:42:35:e2:45:8d:d6:b9:21:
d2:fb:15:a9:aa:68:b3:86:97:46:f4:a2:ee:77:92:6a:08:f3:
81:32:c9:bd:27:bf:eb:05:df:bf:7d:9b:fc:b1:79:a4:b4:6e:
80:0e:d6:aa:8d:69:dd:5b:cf:11:b3:cb:e2:b3:24:ed:84:80:
fe:10:2b:02:56:5a:f9:1c:d8:3a:3e:5e:d9:be:65:19:18:1c:
93:b5:43:8d:97:34:b0:3d:3a:a6:18:28:5a:81:1f:02:ff:33:
b6:85:6d:a4:41:b1:5c:5b:97:b1:10:7a:41:cf:fc:3b:a8:22:
5c:82:5b:38:67:0b:d7:33:05:be:98:46:d0:4f:b6:f8:02:01:
6a:88:8e:d8:93:0d:84:92:c8:65:4a:1b:a1:34:54:ec:17:b8:
7d:a2:c4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 09:40:46 2025 by rpki-client