Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/s8wSP0P0EMNdlc2kKmJXdm8Kwog.roa
File: s8wSP0P0EMNdlc2kKmJXdm8Kwog.roa (raw, json)
Hash identifier: 3AxqS+OnbC/IqzcA+ZYogdDjL6qdK/wEebjADY6sZzw=
Subject key identifier: B3:CC:12:3F:43:F4:10:C3:5D:95:CD:A4:2A:62:57:76:6F:0A:C2:88
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0197E99F1E67583BF43D6805A0F972828A76
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/s8wSP0P0EMNdlc2kKmJXdm8Kwog.roa
Signing time: Tue 08 Jul 2025 10:40:08 +0000
ROA not before: Tue 08 Jul 2025 10:40:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199704
IP address blocks: 85.115.192.0/22 maxlen: 24
185.224.184.0/22 maxlen: 24
185.224.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 15:09:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e9:9f:1e:67:58:3b:f4:3d:68:05:a0:f9:72:82:8a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 8 10:40:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3cc123f43f410c35d95cda42a6257766f0ac288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f1:a4:41:f4:94:cc:bc:31:7f:18:39:49:4e:
ef:78:23:f0:48:54:91:de:9f:67:e5:04:e6:24:12:
77:ed:01:22:70:c9:54:3e:36:ab:83:95:23:62:57:
1c:91:ef:4d:64:ff:e3:23:64:78:9d:56:c3:21:36:
57:51:51:d4:cd:ad:ca:4f:6e:d7:db:ab:14:79:1c:
ca:1a:92:b5:55:b4:a1:76:5e:ae:08:8c:f1:d0:dc:
b2:f0:47:8b:40:67:72:0f:16:97:cb:8e:13:65:77:
a3:5c:63:a2:69:a7:7c:9c:8b:72:88:1c:03:38:fc:
a4:95:31:80:c1:c2:b4:4e:97:f9:ef:70:b5:0e:6b:
3d:a7:cf:ed:f8:e6:9b:cf:bd:36:91:62:f8:9b:93:
d4:c1:bd:48:f5:a9:48:31:c5:cf:01:8d:2a:a4:e5:
f0:5b:d7:ed:20:a4:d4:bb:03:e0:3b:33:cb:40:c7:
fe:5a:de:69:95:84:cf:f7:93:be:e9:0b:da:d0:ef:
f1:35:43:fe:0d:98:25:e0:67:84:87:04:56:ca:47:
c4:9f:c5:28:5c:b6:30:4c:61:3b:7c:5e:cd:3f:80:
1b:92:5a:b7:24:d7:2f:ee:dc:88:34:ca:a2:79:14:
76:2b:d3:36:ee:96:70:7e:2d:34:5e:98:3f:b6:99:
89:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CC:12:3F:43:F4:10:C3:5D:95:CD:A4:2A:62:57:76:6F:0A:C2:88
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/s8wSP0P0EMNdlc2kKmJXdm8Kwog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.192.0/22
185.224.184.0/22
185.224.192.0/22
Signature Algorithm: sha256WithRSAEncryption
93:3b:52:8d:ff:bf:8e:0d:11:99:fe:51:e8:93:1d:02:92:b8:
cc:de:7d:7e:bb:ba:ed:43:2c:d0:5c:da:75:6a:3b:0a:d9:07:
73:cd:e3:03:b1:d6:8e:f0:25:8a:c2:ef:78:d6:2c:03:00:a3:
f9:d4:03:74:b7:bd:b3:75:25:23:ee:51:f0:b3:35:55:55:da:
fd:16:be:87:6c:7a:9e:f7:b0:3d:b4:8a:8c:7e:ae:6c:4c:51:
4b:f9:aa:fe:57:15:4d:3a:77:01:3c:5e:46:27:d1:6e:49:48:
09:50:fe:6a:d4:d0:f2:94:b3:bc:1d:58:10:70:32:a4:ab:16:
6c:60:15:4f:b6:03:50:9f:64:5e:b8:d9:d6:13:05:5a:6d:4f:
46:00:89:39:88:d6:0f:5f:8e:50:ae:17:be:9f:dc:1f:2d:b8:
5b:ee:19:1a:ec:84:7f:7e:7e:08:68:88:ae:12:9d:a3:22:a3:
2d:91:a2:be:31:41:ec:25:6e:d3:96:9e:cb:84:f2:03:08:9a:
52:48:2a:68:e6:f1:a6:3c:24:bb:bf:ea:6b:59:5a:7f:20:96:
06:e8:6c:d9:38:40:8e:11:0f:91:7c:2d:cc:37:16:ef:6b:cf:
86:98:2b:75:b1:eb:fa:14:ce:1a:38:3d:89:ad:61:61:55:53:
17:6f:2e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 21:00:05 2025 by rpki-client