Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/a8RJG-0knCN2sD1p9lUMXxb5Cx0.roa
File: a8RJG-0knCN2sD1p9lUMXxb5Cx0.roa (raw, json)
Hash identifier: FRY2TxEd5q5yf8756w8ewafquTipKrfdJoGecAUdsvE=
Subject key identifier: 6B:C4:49:1B:ED:24:9C:23:76:B0:3D:69:F6:55:0C:5F:16:F9:0B:1D
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0196F3D1C96EEB8FFEF7121B67EA831F5700
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/a8RJG-0knCN2sD1p9lUMXxb5Cx0.roa
Signing time: Wed 21 May 2025 17:08:54 +0000
ROA not before: Wed 21 May 2025 17:08:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 193.8.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 21:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f3:d1:c9:6e:eb:8f:fe:f7:12:1b:67:ea:83:1f:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 21 17:08:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6bc4491bed249c2376b03d69f6550c5f16f90b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cc:47:66:75:fe:c1:11:91:8c:4f:9f:fa:93:
a2:74:ab:8d:5f:30:b6:c1:ce:ca:eb:5b:7a:fa:af:
47:f8:f9:b2:96:66:76:e6:ab:d9:cb:22:14:8a:7f:
66:30:ea:64:05:e9:ce:af:31:30:10:c8:a6:ee:06:
d6:8d:92:f6:1d:1e:c7:f4:72:e5:48:7f:7e:e3:9b:
85:bb:02:82:11:c0:fb:0d:e0:8a:aa:52:d6:56:6b:
df:8a:14:d0:bf:eb:e1:a9:1c:24:78:31:db:a2:c2:
ee:8d:e9:07:b6:20:15:f9:e0:9d:ba:4d:74:9d:03:
2e:0d:1a:aa:8e:13:f5:b2:30:48:65:e9:68:12:12:
8d:d2:f6:22:3c:7e:5f:32:df:72:bd:74:38:97:80:
ff:89:aa:6f:eb:36:19:44:f7:37:6a:d4:cf:c8:55:
44:34:e2:fb:e3:38:ee:1b:d8:ef:a7:8f:4d:2a:0a:
48:9e:12:53:6b:b2:aa:90:a5:48:c9:ed:0c:6d:fb:
d5:c2:63:75:15:a1:c6:29:06:7c:83:15:67:48:34:
c0:00:e1:2f:81:42:92:6b:85:a6:6c:3f:38:61:57:
1b:32:33:b1:af:45:7c:74:87:0f:b8:3e:4f:28:34:
bb:10:4d:26:35:ca:66:f6:b9:60:4a:7e:1c:8a:c4:
b8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C4:49:1B:ED:24:9C:23:76:B0:3D:69:F6:55:0C:5F:16:F9:0B:1D
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/a8RJG-0knCN2sD1p9lUMXxb5Cx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.113.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:0f:cf:36:8f:1a:c3:b8:24:7b:87:70:4b:1b:17:fd:96:ab:
f6:ec:20:e4:9f:3f:ee:06:2a:18:23:d8:72:02:b3:34:a8:2d:
dd:94:41:55:a2:08:2e:ad:b7:fd:3f:ce:2a:5e:7e:ca:4d:d1:
eb:91:4f:09:76:61:b1:e4:c7:ab:9b:40:af:d0:fe:f2:11:b3:
ed:e2:f3:12:9b:53:d7:cc:3b:55:a8:20:c2:70:ef:25:2b:c8:
c9:1b:b8:2f:89:98:5e:b9:48:06:c6:53:fc:41:d1:7b:14:9c:
99:74:b7:a8:b9:64:ad:86:c0:77:a6:36:31:a8:ca:80:bc:0f:
84:32:bd:51:74:6e:ff:1e:f2:2f:84:3b:f9:f2:58:23:26:de:
da:69:fb:9b:b8:e8:93:cc:72:bb:33:bf:e5:98:8c:e5:0c:69:
23:21:7d:9b:92:90:20:8e:bd:f8:02:85:ad:9c:50:9f:ea:96:
27:61:54:94:8f:59:49:f4:41:20:d9:0c:79:88:91:3e:44:11:
45:dc:18:75:02:72:4f:41:2c:c4:a1:d4:89:c5:c4:88:61:82:
cf:e7:64:53:25:f5:01:c7:cd:ee:d6:1a:ed:93:99:38:b7:21:
f3:79:0b:ba:87:20:7c:b7:31:44:ec:93:c4:71:36:b0:7d:9a:
37:b2:12:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZbz0clu64/+9xIbZ+qDH1cAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjUwNTIxMTcwODU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YmM0NDkxYmVkMjQ5YzIzNzZiMDNkNjlmNjU1MGM1ZjE2ZjkwYjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMxHZnX+wRGRjE+f+pOidKuNXzC2
wc7K61t6+q9H+PmylmZ25qvZyyIUin9mMOpkBenOrzEwEMim7gbWjZL2HR7H9HLl
SH9+45uFuwKCEcD7DeCKqlLWVmvfihTQv+vhqRwkeDHbosLujekHtiAV+eCduk10
nQMuDRqqjhP1sjBIZeloEhKN0vYiPH5fMt9yvXQ4l4D/iapv6zYZRPc3atTPyFVE
NOL74zjuG9jvp49NKgpInhJTa7KqkKVIye0MbfvVwmN1FaHGKQZ8gxVnSDTAAOEv
gUKSa4WmbD84YVcbMjOxr0V8dIcPuD5PKDS7EE0mNcpm9rlgSn4cisS4lQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGvESRvtJJwjdrA9afZVDF8W+QsdMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvYThSSkctMGtuQ04yc0QxcDlsVU1YeGI1Q3gwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQhxMA0G
CSqGSIb3DQEBCwUAA4IBAQCuD882jxrDuCR7h3BLGxf9lqv27CDknz/uBioYI9hy
ArM0qC3dlEFVoggurbf9P84qXn7KTdHrkU8JdmGx5Merm0Cv0P7yEbPt4vMSm1PX
zDtVqCDCcO8lK8jJG7gviZheuUgGxlP8QdF7FJyZdLeouWSthsB3pjYxqMqAvA+E
Mr1RdG7/HvIvhDv58lgjJt7aafubuOiTzHK7M7/lmIzlDGkjIX2bkpAgjr34AoWt
nFCf6pYnYVSUj1lJ9EEg2Qx5iJE+RBFF3Bh1AnJPQSzEodSJxcSIYYLP52RTJfUB
x83u1hrtk5k4tyHzeQu6hyB8tzFE7JPEcTawfZo3shIK
-----END CERTIFICATE-----
Generated at Thu Jun 5 05:20:20 2025 by rpki-client