Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8iBMR7ciQ8LR3pajNA3ZcMKwOoc.roa
File: 8iBMR7ciQ8LR3pajNA3ZcMKwOoc.roa (raw, json)
Hash identifier: v9y/xXDrcSpv84v85DQicQeEHOjO9mPv6H9EqFGyL2I=
Subject key identifier: F2:20:4C:47:B7:22:43:C2:D1:DE:96:A3:34:0D:D9:70:C2:B0:3A:87
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01990F1A6F7BF8FB9E504E6EB4DAAD775F36
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8iBMR7ciQ8LR3pajNA3ZcMKwOoc.roa
Signing time: Wed 03 Sep 2025 10:23:34 +0000
ROA not before: Wed 03 Sep 2025 10:23:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215540
IP address blocks: 80.253.251.0/24 maxlen: 24
113.30.152.0/24 maxlen: 24
185.99.96.0/24 maxlen: 24
185.214.74.0/24 maxlen: 24
185.242.247.0/24 maxlen: 24
195.66.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0f:1a:6f:7b:f8:fb:9e:50:4e:6e:b4:da:ad:77:5f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 3 10:23:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2204c47b72243c2d1de96a3340dd970c2b03a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2b:23:c6:93:e1:f7:f4:96:f5:7b:79:5f:f8:
4f:0c:0c:fd:bf:a3:ee:b3:82:51:41:e3:8c:dd:24:
85:72:41:36:73:33:d7:fd:31:35:7b:0d:e6:21:2f:
b6:fc:fd:3f:75:b4:a7:39:02:26:19:d7:61:2a:20:
5d:55:15:57:be:34:38:63:cc:98:00:f8:2b:03:39:
b3:4d:e2:ca:55:2c:c0:90:c6:f1:5b:78:a6:2b:d7:
b1:23:c9:77:7f:a8:35:0e:87:3c:0e:ae:af:08:ee:
6d:55:58:bf:48:7b:6d:ea:16:18:74:83:08:cb:e1:
32:ae:a4:ea:83:cb:e4:47:7e:c8:f0:75:e2:c3:c5:
72:fc:e8:0d:bf:5a:28:e6:cd:1a:ac:35:c4:07:ed:
5f:ec:d0:84:62:c5:1b:83:7f:7f:c3:90:1e:11:25:
b5:9e:d7:f7:12:91:9a:9c:e2:1a:ad:45:9d:60:b4:
11:a3:b6:ed:3e:59:4d:92:36:13:28:fe:73:23:c4:
55:8a:cf:70:46:30:0d:e8:21:4e:a8:87:9d:9c:7d:
6c:dc:ab:6b:29:f7:8c:98:37:71:db:20:91:0c:b5:
ee:7d:98:e9:00:08:98:00:8b:50:26:93:18:46:48:
04:50:25:77:ae:0b:4b:0b:75:e0:23:11:9d:c0:da:
14:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:20:4C:47:B7:22:43:C2:D1:DE:96:A3:34:0D:D9:70:C2:B0:3A:87
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8iBMR7ciQ8LR3pajNA3ZcMKwOoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.251.0/24
113.30.152.0/24
185.99.96.0/24
185.214.74.0/24
185.242.247.0/24
195.66.25.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:d0:43:91:26:8f:f1:6a:b3:30:80:ba:27:02:d2:60:3c:1b:
2e:fb:60:cc:6a:2e:2b:e1:15:44:ba:14:80:e3:b4:68:f4:7b:
5c:74:03:fb:80:73:b7:b3:f7:ec:9d:db:d6:78:49:db:85:fe:
5a:e8:b1:70:14:dc:65:92:b5:f0:89:cc:1d:75:3a:01:7a:61:
c0:c5:b8:a2:68:a4:dc:e4:9b:6f:e2:56:af:1f:3f:2f:0e:fc:
93:f1:d4:fa:30:b1:7f:b9:d9:57:eb:c9:11:12:b2:d0:8f:cb:
08:ee:4c:99:e4:b3:26:6c:28:51:ad:96:d3:74:bb:1b:ff:3d:
d9:e8:20:44:3d:01:57:89:da:be:77:82:57:f0:21:86:41:6e:
be:7a:59:8e:d3:67:bc:39:ab:af:d7:6b:91:19:61:56:0d:37:
9c:aa:be:31:59:40:1c:50:cf:db:ee:18:2d:50:b7:9d:e9:da:
86:09:2f:65:31:70:3a:4e:a0:5f:04:95:e9:4b:26:99:2f:1b:
99:d9:2b:75:2d:7b:04:97:2d:aa:49:a4:1a:cd:bf:22:fa:ce:
f8:f9:e9:4e:79:e7:1d:87:6d:19:98:96:7e:56:9a:9c:d7:7f:
4c:5f:03:4c:77:be:c9:ce:12:2a:7b:5c:11:cb:c7:ba:b9:a5:
95:e1:0e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 20:49:59 2025 by rpki-client