Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/8hT_E2lP_XAAVJsTroBoa69lbkY.roa
File: 8hT_E2lP_XAAVJsTroBoa69lbkY.roa (raw, json)
Hash identifier: wsftIcKlCqe+R912iWtJnREYgPP40XIaQmbFqEEoMJE=
Subject key identifier: F2:14:FF:13:69:4F:FD:70:00:54:9B:13:AE:80:68:6B:AF:65:6E:46
Certificate issuer: /CN=87034d2b5932dd1491de7fff31c7d83af73206e2
Certificate serial: 019A078E62BBD5E646AD484E6912CC167A3A
Authority key identifier: 87:03:4D:2B:59:32:DD:14:91:DE:7F:FF:31:C7:D8:3A:F7:32:06:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/8hT_E2lP_XAAVJsTroBoa69lbkY.roa
Signing time: Tue 21 Oct 2025 16:16:03 +0000
ROA not before: Tue 21 Oct 2025 16:16:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216471
IP address blocks: 193.36.94.0/24 maxlen: 24
2a13:aa40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:8e:62:bb:d5:e6:46:ad:48:4e:69:12:cc:16:7a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87034d2b5932dd1491de7fff31c7d83af73206e2
Validity
Not Before: Oct 21 16:16:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f214ff13694ffd7000549b13ae80686baf656e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d2:d5:81:cb:f9:78:ee:39:5d:c4:34:55:5d:
41:47:3e:40:03:7b:0b:14:7f:af:15:e6:74:c2:79:
07:c6:ec:cb:5a:2e:f1:0a:e1:ea:93:f8:94:36:e1:
19:46:e1:10:12:38:54:2f:fd:7a:e8:95:a7:63:66:
c2:7c:ab:b5:41:37:bc:5b:65:0f:38:08:b8:8f:09:
ed:90:04:47:ab:8b:e5:27:91:75:42:fd:4d:0b:7c:
27:63:02:38:b3:91:82:89:1a:dc:02:9c:7a:ae:28:
18:ba:28:b2:60:48:a2:89:25:03:e3:96:0d:6f:cc:
46:e6:d6:e0:fa:d2:fb:12:72:df:e1:f5:b7:50:53:
4d:60:ac:a7:fe:a7:2a:b4:47:90:b9:72:c3:f2:6c:
23:dd:66:a9:27:f9:04:7c:8d:9c:b8:54:ac:44:e4:
36:49:1d:0e:e6:f5:ad:98:b3:a7:32:43:b4:87:60:
44:68:8a:65:74:0b:bd:f5:f0:ef:70:b5:36:d3:61:
81:88:32:29:9c:f7:89:a7:fb:73:11:5c:ae:97:4e:
6c:4c:8b:65:c4:54:94:66:f3:56:52:49:e4:24:ff:
34:a9:51:c3:10:54:d0:bc:be:ee:c5:86:e9:c3:ee:
d6:f2:c3:de:bd:8c:89:ae:39:4f:b9:15:50:7e:12:
2f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:14:FF:13:69:4F:FD:70:00:54:9B:13:AE:80:68:6B:AF:65:6E:46
X509v3 Authority Key Identifier:
keyid:87:03:4D:2B:59:32:DD:14:91:DE:7F:FF:31:C7:D8:3A:F7:32:06:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/8hT_E2lP_XAAVJsTroBoa69lbkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.94.0/24
IPv6:
2a13:aa40::/29
Signature Algorithm: sha256WithRSAEncryption
a9:b8:1a:57:df:07:df:dd:be:9f:a0:40:b0:ea:90:a0:47:71:
e0:e3:69:bd:db:2f:8b:9e:99:57:73:67:19:16:9d:ff:f5:d9:
7b:96:67:15:0a:e0:54:5c:ed:ac:c1:e4:81:86:a4:66:09:3f:
ab:da:f3:db:39:06:93:ea:cc:7e:ea:9e:53:b7:fa:a7:7c:0c:
91:1f:98:01:bb:d7:1d:e5:06:43:6b:23:f1:53:1f:b1:15:f3:
19:4e:99:d3:14:5b:fe:c8:63:99:49:f8:fa:15:22:e3:51:8c:
b2:9b:53:2e:1f:10:dd:2c:52:4f:05:38:19:ad:13:b4:36:6d:
56:5d:27:1f:24:94:04:95:17:a3:68:a4:7b:23:99:6d:8f:2e:
85:19:2b:ae:88:39:11:ec:17:1c:5b:39:8b:50:d7:6c:88:f8:
f1:ab:ea:86:91:9b:e0:a8:04:3c:5f:1a:6a:52:4e:92:6e:ca:
e0:da:ee:ef:9d:0d:41:0c:76:d3:06:31:8e:df:c7:7d:96:57:
60:f8:f8:f8:64:0f:c7:bd:33:45:21:a3:86:9e:40:af:bc:a4:
f7:d3:85:42:4d:29:73:13:17:88:cb:ed:7e:35:e2:53:2c:fe:
b0:ec:ed:35:b7:ba:29:5c:99:2b:00:73:b9:48:ad:3c:88:ca:
f7:0b:25:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 16:32:09 2025 by rpki-client