Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/f431ea-5d30-4312-9f8b-6c3595fb7212/1/1-8vTGCS_rJikH2VQxEDwKIsDRmo.roa
File: 1-8vTGCS_rJikH2VQxEDwKIsDRmo.roa (raw, json)
Hash identifier: 0MJFpH+MZoG9aWkULxwRDSK43Ay6eP/mQFmc18Ajm8M=
Subject key identifier: FB:CB:D3:18:24:BF:AC:98:A4:1F:65:50:C4:40:F0:28:8B:03:46:6A
Certificate issuer: /CN=baed98a44c167dcbde927cbb8e044fcfa3a1d862
Certificate serial: 019A681B66B722A82703189E4C9E17D56DA1
Authority key identifier: BA:ED:98:A4:4C:16:7D:CB:DE:92:7C:BB:8E:04:4F:CF:A3:A1:D8:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uu2YpEwWfcvekny7jgRPz6Oh2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/f431ea-5d30-4312-9f8b-6c3595fb7212/1/1-8vTGCS_rJikH2VQxEDwKIsDRmo.roa
Signing time: Sun 09 Nov 2025 10:13:37 +0000
ROA not before: Sun 09 Nov 2025 10:13:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34536
IP address blocks: 80.77.224.0/24 maxlen: 24
80.77.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/f431ea-5d30-4312-9f8b-6c3595fb7212/1/uu2YpEwWfcvekny7jgRPz6Oh2GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/f431ea-5d30-4312-9f8b-6c3595fb7212/1/uu2YpEwWfcvekny7jgRPz6Oh2GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uu2YpEwWfcvekny7jgRPz6Oh2GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:68:1b:66:b7:22:a8:27:03:18:9e:4c:9e:17:d5:6d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baed98a44c167dcbde927cbb8e044fcfa3a1d862
Validity
Not Before: Nov 9 10:13:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbcbd31824bfac98a41f6550c440f0288b03466a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:51:c6:19:0e:9f:49:df:76:9a:b4:e9:c0:b4:
ec:04:b0:7a:37:9d:02:f2:78:b2:75:d2:32:c8:37:
85:9d:e0:98:8a:d5:05:37:bb:89:8e:e3:83:2e:99:
86:e0:33:cb:50:aa:04:04:e9:e2:74:03:01:62:7a:
ae:c2:d7:d2:09:93:6b:30:90:36:38:0a:f0:50:94:
ad:63:b2:45:f9:45:40:3e:ce:4a:9a:2c:ef:23:e1:
52:b2:5e:9f:d8:17:8e:38:d9:8c:d4:53:ea:45:a5:
4c:83:9e:c0:a2:e5:5f:ed:ff:a1:c1:af:ec:ca:ae:
6c:60:9c:26:1b:40:6b:62:26:93:db:2f:a1:75:75:
08:bf:3f:df:12:d7:e7:bd:be:4a:42:f6:5b:cd:8e:
82:f1:ea:35:82:8a:19:ad:99:34:8d:20:1a:ad:95:
9e:8f:79:83:51:68:47:8f:17:a2:3e:ec:a6:b8:e3:
e0:cc:5e:2b:99:5b:bb:22:8a:b2:3e:e9:a3:6a:f6:
a5:52:a3:a7:4a:88:a9:57:a8:52:1f:c6:f8:80:e4:
75:8f:49:ef:3a:a8:eb:59:0d:dc:67:0f:3c:aa:a8:
f3:23:f5:b5:bb:23:a8:4d:16:c0:50:cc:bc:11:db:
81:e3:b9:d5:55:a4:93:d8:58:50:82:94:69:64:a3:
93:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CB:D3:18:24:BF:AC:98:A4:1F:65:50:C4:40:F0:28:8B:03:46:6A
X509v3 Authority Key Identifier:
keyid:BA:ED:98:A4:4C:16:7D:CB:DE:92:7C:BB:8E:04:4F:CF:A3:A1:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uu2YpEwWfcvekny7jgRPz6Oh2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f431ea-5d30-4312-9f8b-6c3595fb7212/1/1-8vTGCS_rJikH2VQxEDwKIsDRmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f431ea-5d30-4312-9f8b-6c3595fb7212/1/uu2YpEwWfcvekny7jgRPz6Oh2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.77.224.0/23
Signature Algorithm: sha256WithRSAEncryption
24:87:67:1f:53:5e:9d:13:cf:a7:a7:07:98:cc:38:35:c4:75:
db:1b:f3:a3:c2:43:ae:2f:de:ec:e4:8a:42:d5:77:87:3f:3b:
19:8a:45:41:fc:ea:0a:ab:98:91:e4:6f:97:33:78:23:5a:1e:
20:7f:e9:a0:58:33:98:43:a9:09:72:24:f6:1e:74:a8:7f:ce:
04:3e:fe:53:cf:4c:1e:65:92:56:6b:1c:6b:98:ac:af:d0:f8:
9d:a7:9a:b3:15:30:47:e5:bd:ed:79:6f:55:cd:33:96:71:f7:
cf:c6:c2:71:f3:c9:9b:0f:b4:ed:aa:ab:82:dc:15:35:31:9e:
f6:1e:b8:b1:c2:8b:34:cf:2f:e5:7c:00:83:81:1e:f4:e5:78:
4b:bd:a7:fd:bf:10:7b:a1:f7:88:0a:ad:e9:94:94:a6:82:dd:
b4:da:f7:07:53:7f:1d:04:30:04:d1:d3:6d:93:5b:c2:4e:79:
6a:0f:93:c4:00:12:4a:7c:7f:15:c6:d2:67:42:44:84:36:4f:
0c:c2:85:55:8c:3d:ce:20:82:65:71:21:f1:0c:85:8d:24:cd:
2e:d6:a3:cc:46:bd:86:87:e1:de:46:95:21:00:49:6f:f5:2b:
f1:20:4f:c5:d6:52:57:71:5b:4c:54:65:5a:de:06:3c:c1:6b:
98:a9:1f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:35 2025 by rpki-client