Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/jOUyMLPZrMuzuioMpl1NXAy1D0s.roa
File: jOUyMLPZrMuzuioMpl1NXAy1D0s.roa (raw, json)
Hash identifier: 1gb8evtP88wWeN9HxrerPINOz1+CcWlzI+mgwi1QVJ8=
Subject key identifier: 8C:E5:32:30:B3:D9:AC:CB:B3:BA:2A:0C:A6:5D:4D:5C:0C:B5:0F:4B
Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Certificate serial: 01989C0DC50ED3DA2BBDB7E10AFC2FA49E35
Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/jOUyMLPZrMuzuioMpl1NXAy1D0s.roa
Signing time: Tue 12 Aug 2025 02:13:24 +0000
ROA not before: Tue 12 Aug 2025 02:13:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215540
IP address blocks: 45.143.200.0/24 maxlen: 24
185.156.72.0/24 maxlen: 24
185.193.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 17:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9c:0d:c5:0e:d3:da:2b:bd:b7:e1:0a:fc:2f:a4:9e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Validity
Not Before: Aug 12 02:13:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ce53230b3d9accbb3ba2a0ca65d4d5c0cb50f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a0:6c:f1:07:70:2f:8d:91:66:14:6f:81:3b:
ef:9e:04:8d:28:27:1e:a2:cb:72:04:a5:5b:4f:e2:
86:f1:09:f6:b2:05:90:7e:d0:5d:1e:a1:dd:86:6d:
54:30:42:2f:ac:c2:ea:cd:76:6d:cf:60:34:4c:4e:
2b:7d:b6:c9:a4:8e:29:28:96:c0:1a:97:a1:a7:ff:
18:bf:a4:45:dd:e9:6a:70:4b:09:98:91:45:74:4b:
62:17:a5:ec:91:3d:58:d9:fc:b7:11:3b:5e:38:22:
f0:2b:bb:87:d2:4e:3b:fc:65:41:08:94:c1:04:fb:
22:73:d4:b0:9f:4e:b3:aa:0f:20:9c:31:17:30:f4:
d2:1a:f3:7e:4b:16:38:73:47:bb:cd:12:e9:7f:9f:
29:46:e9:7d:92:27:7a:bc:1b:4d:ba:a4:c5:23:f8:
e9:5e:5f:b8:d1:70:a0:b5:8b:d4:58:d9:f0:c0:b3:
8d:ce:98:ac:7f:36:0d:50:bd:65:fb:44:a9:72:ee:
88:84:75:3b:b8:78:fe:5a:5c:03:a2:a7:db:96:29:
29:52:c0:23:3a:58:18:f5:56:fe:a1:14:8c:cd:86:
c8:bb:3f:bd:90:93:d6:7f:53:30:30:79:09:00:a9:
6e:8e:3f:e6:30:5b:21:82:f7:a5:41:0e:74:3d:d7:
d1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E5:32:30:B3:D9:AC:CB:B3:BA:2A:0C:A6:5D:4D:5C:0C:B5:0F:4B
X509v3 Authority Key Identifier:
keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/jOUyMLPZrMuzuioMpl1NXAy1D0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.200.0/24
185.156.72.0/24
185.193.89.0/24
Signature Algorithm: sha256WithRSAEncryption
69:85:85:d9:9b:66:5b:a7:bd:3f:c0:04:77:f4:1d:f1:b4:b5:
cc:d8:e4:fb:41:da:1c:ec:b0:5b:72:b3:2f:2e:db:20:f9:c1:
86:c8:c9:15:b4:c9:59:c1:11:af:e3:8b:49:31:75:bb:a6:b8:
fe:a1:f8:8c:5f:f9:98:37:02:67:40:f8:62:94:06:c9:d8:6c:
b0:b6:cb:da:23:7e:3b:1f:53:81:83:58:a9:5e:f6:43:39:ac:
8f:ab:8b:ed:4d:7f:d1:96:38:3f:51:6e:d6:b3:6e:16:59:82:
b2:55:48:0f:e5:3c:c0:91:34:3d:70:c5:9a:9d:f6:2f:e0:24:
ae:ea:33:6d:5a:5d:0d:39:aa:82:63:00:ed:04:83:d1:e0:15:
89:3d:c1:33:0e:2c:37:1e:a7:85:d1:59:be:bc:76:df:0b:45:
2d:ee:d8:4e:b0:a6:89:dc:d5:b3:00:51:f1:7a:26:e2:e6:5f:
d3:b8:3f:1c:fc:eb:9c:73:4c:d6:06:c8:0c:72:cb:a4:be:38:
92:68:38:e8:dd:77:cf:e0:de:55:70:8b:68:aa:ce:a3:0a:c4:
cf:d9:f5:ec:78:62:f8:7d:ef:9c:36:58:d2:a1:33:35:e2:37:
b7:ba:52:30:60:dd:1b:73:f5:c2:b4:14:75:d0:f5:ce:ff:2e:
a8:92:2b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 02:37:52 2025 by rpki-client