Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/inTVAfe9q1XC_8EvrrbR9VglEHA.roa
File: inTVAfe9q1XC_8EvrrbR9VglEHA.roa (raw, json)
Hash identifier: pL8DOgBe3XG8wMjNP4NIZkZ7KRQgnMfSpsltpTv10WY=
Subject key identifier: 8A:74:D5:01:F7:BD:AB:55:C2:FF:C1:2F:AE:B6:D1:F5:58:25:10:70
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01990EE9F32195EE6B0C9A2505FA0FAA1361
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/inTVAfe9q1XC_8EvrrbR9VglEHA.roa
Signing time: Wed 03 Sep 2025 09:30:36 +0000
ROA not before: Wed 03 Sep 2025 09:30:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395374
IP address blocks: 185.108.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0e:e9:f3:21:95:ee:6b:0c:9a:25:05:fa:0f:aa:13:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 3 09:30:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a74d501f7bdab55c2ffc12faeb6d1f558251070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:85:5b:a4:2c:b7:f9:44:1a:c3:c6:be:70:c9:
55:c8:d0:2f:95:16:a8:38:f8:43:ca:25:9b:22:0b:
ec:bb:81:9e:04:71:d3:73:1d:d5:31:ca:49:a0:63:
d7:c5:bf:6d:3f:86:d1:e8:64:c0:80:88:97:eb:70:
46:63:6e:0a:1d:44:1f:d4:37:11:87:be:bd:13:91:
ca:12:50:f2:51:f3:04:f1:b4:40:1f:e3:57:33:eb:
02:f3:df:a8:b0:52:72:41:64:98:bd:9f:3e:f9:3c:
22:6a:9f:cf:87:b2:17:42:67:01:96:4b:38:6e:5c:
c2:04:de:8f:3d:3e:fe:eb:b9:ba:2a:b5:39:81:82:
c9:4f:23:6b:f7:6f:ea:20:26:f4:c6:eb:87:cf:54:
42:7c:88:16:2b:4b:56:c6:2d:e6:89:88:9e:da:3b:
a4:a2:63:55:08:33:f9:39:c1:9a:22:0e:5c:10:54:
cc:c8:26:ca:e8:f4:33:05:94:88:6d:b3:f5:ba:19:
93:9b:4a:f0:8d:cd:a1:bf:aa:7b:ae:13:b6:d0:be:
41:7b:b3:d9:15:63:80:22:c5:36:98:38:e7:a9:e8:
03:9a:62:ae:91:a1:49:22:e5:bc:84:18:72:c5:33:
55:74:43:59:dd:db:02:18:24:6c:7f:b0:a0:68:5a:
08:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:74:D5:01:F7:BD:AB:55:C2:FF:C1:2F:AE:B6:D1:F5:58:25:10:70
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/inTVAfe9q1XC_8EvrrbR9VglEHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.204.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:08:ec:74:5c:e6:bd:a8:7c:11:e1:62:a5:bd:f5:69:7d:ae:
34:6e:31:1a:09:12:dc:e8:d5:32:6e:2e:78:67:fa:b7:72:cd:
62:dd:a2:c2:2d:47:43:24:9e:a6:e0:8f:bd:bf:b3:fb:90:0a:
dc:47:1a:73:fb:b5:81:62:61:ae:68:30:f5:bf:03:31:4d:5b:
7d:65:8e:12:62:17:d7:12:32:07:2b:3a:2f:58:bf:9a:71:ea:
7a:53:7e:15:2d:9d:70:5a:f2:81:92:81:33:0c:24:8b:0b:a1:
a1:9f:fc:dd:26:6e:7f:c0:c1:cd:19:27:5f:41:cb:c8:08:43:
be:06:7a:95:51:7d:05:aa:eb:9b:6c:cd:7b:15:77:15:c0:18:
9b:d5:0e:02:19:e9:16:32:51:75:45:18:6c:f7:f0:6e:aa:92:
02:99:56:27:e5:2e:a3:b4:4f:81:63:3f:35:f1:37:2c:d0:3b:
71:55:e6:c9:f8:3d:5f:a4:a0:39:15:f1:b2:70:dc:bd:63:71:
59:da:a1:b5:1b:20:12:31:40:21:5e:e7:9f:81:a1:34:5b:7a:
2c:cb:5c:82:82:db:cc:ca:91:2b:6b:e3:04:5e:57:19:f8:81:
37:fc:99:67:a2:e2:58:cf:41:b5:52:4d:a1:b9:c2:b1:ad:b4:
ae:86:29:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:28:54 2025 by rpki-client