Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/8SguPHIphMGnD7X3CTG_nndU6mE.roa
File: 8SguPHIphMGnD7X3CTG_nndU6mE.roa (raw, json)
Hash identifier: Of38WddSvMyNlDKwk9utKdII5/SSSiTvKKiNw3Nm+mE=
Subject key identifier: F1:28:2E:3C:72:29:84:C1:A7:0F:B5:F7:09:31:BF:9E:77:54:EA:61
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 01990EB216F7C2622EF9ED1F5288F9293A23
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/8SguPHIphMGnD7X3CTG_nndU6mE.roa
Signing time: Wed 03 Sep 2025 08:29:36 +0000
ROA not before: Wed 03 Sep 2025 08:29:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216102
IP address blocks: 213.21.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0e:b2:16:f7:c2:62:2e:f9:ed:1f:52:88:f9:29:3a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Sep 3 08:29:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1282e3c722984c1a70fb5f70931bf9e7754ea61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a3:9d:95:05:9a:6d:d8:0d:a8:6b:43:61:88:
a4:d8:f9:30:ca:fa:51:10:42:15:85:bf:e9:83:49:
a8:50:7f:57:a0:5b:64:1a:c6:d8:d2:b6:57:a5:08:
52:49:0c:d6:b3:24:e4:1d:1f:56:cc:75:d3:11:b3:
c0:55:bd:a7:89:e0:b1:5d:ec:66:7c:b8:cc:bb:ab:
a2:99:36:0a:e9:39:f7:79:47:26:80:10:8c:2f:0b:
6c:0b:dc:39:66:c7:8d:65:97:5d:d6:da:58:ed:66:
f5:22:90:d6:21:a4:55:d8:4a:15:e9:bd:54:42:d7:
f1:84:c6:df:06:0f:12:9b:93:ec:09:cf:f3:49:10:
50:c9:29:09:ee:e7:3a:e8:c7:b7:9b:4d:93:09:50:
1e:68:ba:ef:88:17:b3:ee:2a:3a:9a:95:80:3f:6f:
76:91:0e:17:99:2b:7b:1d:91:86:5f:78:4a:ad:d1:
41:fd:69:95:90:ab:7c:0e:09:9f:d7:94:5b:67:8b:
de:b1:a0:4d:74:0a:9d:61:fc:dd:e8:8d:ad:06:da:
24:12:c4:2f:7e:bf:40:61:a7:3c:e6:48:d6:a2:e7:
1f:7a:02:17:05:a2:22:03:fc:94:c7:3b:26:fb:76:
b0:42:0b:0d:b9:71:c7:bf:55:89:67:2e:d8:3c:fd:
60:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:28:2E:3C:72:29:84:C1:A7:0F:B5:F7:09:31:BF:9E:77:54:EA:61
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/8SguPHIphMGnD7X3CTG_nndU6mE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.245.0/24
Signature Algorithm: sha256WithRSAEncryption
92:41:21:d3:7d:e5:20:e7:7f:04:1d:3f:c5:0c:24:91:63:9f:
8d:3f:d1:96:c7:82:be:19:6c:f5:5c:7f:bb:5e:8c:4d:59:c4:
83:df:6f:07:b0:f8:76:6c:06:67:88:86:e6:c1:d7:83:90:3b:
b5:13:d6:5d:9d:54:a8:e9:d5:28:b2:38:3c:0c:6e:4a:5e:6b:
b0:ea:51:cb:fd:02:5a:12:03:e6:eb:93:43:da:84:fa:cd:82:
32:18:96:f0:82:22:d5:1a:87:14:1f:bb:7f:e6:c1:a3:91:cf:
12:82:0d:50:ee:96:59:ce:f3:ba:9a:93:df:7d:b1:5f:42:ee:
45:40:19:46:4f:00:51:0e:f0:f7:f8:aa:6c:95:44:42:db:7c:
2f:e9:ef:4d:f4:60:6e:ba:62:ad:4e:d5:a7:2a:04:3a:06:16:
77:7d:76:d2:42:06:ff:3c:66:a1:76:99:07:68:ef:b1:7f:b8:
e0:1d:11:06:f5:e9:f6:5e:58:ee:20:f3:2d:48:08:1e:92:d7:
19:d0:cb:59:99:79:99:f5:38:ca:8d:bb:2b:e9:31:02:c7:87:
07:bb:df:d8:98:8d:39:85:9e:1f:68:80:65:9a:f4:a2:e9:c6:
cc:af:49:04:ce:e7:10:91:44:a1:81:89:36:a3:34:8b:db:85:
80:b0:5e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 10:27:22 2025 by rpki-client