Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/vm8G1CJtR8NoqwuLLwSubFgOmS0.roa
File: vm8G1CJtR8NoqwuLLwSubFgOmS0.roa (raw, json)
Hash identifier: lZ9XUGMQa5iMmI7NjUpdLuwQ8xNfL1R8duvU6nNgaek=
Subject key identifier: BE:6F:06:D4:22:6D:47:C3:68:AB:0B:8B:2F:04:AE:6C:58:0E:99:2D
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01990F884B7D190F42164CC595F2A182745D
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/vm8G1CJtR8NoqwuLLwSubFgOmS0.roa
Signing time: Wed 03 Sep 2025 12:23:34 +0000
ROA not before: Wed 03 Sep 2025 12:23:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8881
IP address blocks: 84.55.0.0/24 maxlen: 24
84.55.2.0/24 maxlen: 24
84.55.4.0/24 maxlen: 24
84.55.5.0/24 maxlen: 24
84.55.6.0/24 maxlen: 24
84.55.7.0/24 maxlen: 24
84.55.15.0/24 maxlen: 24
88.223.172.0/24 maxlen: 24
88.223.173.0/24 maxlen: 24
95.173.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 18:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0f:88:4b:7d:19:0f:42:16:4c:c5:95:f2:a1:82:74:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Sep 3 12:23:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be6f06d4226d47c368ab0b8b2f04ae6c580e992d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5e:01:f7:5f:3c:cc:59:bc:a5:d2:e0:fd:da:
12:e4:1a:ed:17:fe:e4:22:5c:6b:e5:2d:40:b5:16:
ae:3b:48:5c:b0:3c:cf:c8:a5:6d:37:da:5a:bb:2a:
18:ff:d3:e0:f7:f7:6d:c2:29:e6:67:c5:0d:a8:5c:
e3:a2:ba:91:9b:66:fa:6c:18:61:99:24:c2:d5:df:
64:9e:bc:4c:e8:e8:28:56:c7:cf:26:99:73:6e:9e:
33:0c:fb:e2:4d:17:e3:8e:15:75:21:96:74:04:6e:
93:0e:13:b4:bb:d6:52:36:89:f7:5d:79:a8:d2:6d:
91:36:f4:2c:32:aa:c3:73:cb:7f:76:67:64:4d:c0:
68:e8:32:6b:f1:c6:5e:64:be:51:b2:3f:66:97:0a:
78:7b:36:d7:52:bd:a6:6a:7b:c9:f7:b2:2a:73:b1:
6e:23:c2:0f:ab:fc:a3:70:04:7c:70:a8:6a:33:cd:
d1:1b:6d:4a:5c:17:af:aa:25:81:0f:4e:eb:ab:e6:
9e:c3:b7:99:b0:c5:90:74:88:44:f0:88:a2:90:24:
4f:8e:d3:85:26:dd:12:02:a7:f5:5b:05:5f:0c:91:
3e:a1:05:6b:3a:d4:5f:06:c4:d3:9a:2a:49:3e:56:
52:6a:8e:2a:c5:6f:5f:81:f0:5a:f3:7f:c4:54:30:
9a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6F:06:D4:22:6D:47:C3:68:AB:0B:8B:2F:04:AE:6C:58:0E:99:2D
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/vm8G1CJtR8NoqwuLLwSubFgOmS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.0.0/24
84.55.2.0/24
84.55.4.0/22
84.55.15.0/24
88.223.172.0/23
95.173.52.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:0b:a3:d7:1a:52:d0:e6:cd:43:fb:8d:aa:35:bd:11:89:09:
13:71:4c:49:01:40:ad:cb:6f:44:34:a8:1e:e6:3a:df:97:4e:
55:e8:4d:ec:2c:59:bb:55:d3:ca:2a:77:42:a9:a5:f4:c7:a8:
4c:5a:2d:c2:b9:4a:6e:76:24:c4:d2:db:96:97:24:55:21:b7:
b6:76:85:b5:46:9f:51:ad:a6:c0:93:5b:56:7d:a5:a9:46:11:
9c:a2:e6:3c:ec:c3:a1:2a:d3:ff:94:83:e8:35:04:54:77:15:
3d:e5:4d:07:a1:c2:19:e1:e0:fa:ab:bd:40:c3:ba:d8:86:d3:
7a:38:5d:91:5d:d8:2d:18:d6:eb:7a:ad:46:55:02:d2:75:52:
68:e2:e1:dc:1c:b9:a4:d5:59:26:fb:38:b1:74:09:84:f8:31:
2b:c7:a9:48:ec:c4:7f:aa:23:a7:ed:02:e4:43:13:c9:c7:6b:
31:55:57:d3:4d:b6:1f:eb:d2:62:08:ca:39:23:c9:53:a8:89:
84:e6:21:ba:ca:6a:55:04:9a:e2:9c:53:c3:b6:95:87:8e:cf:
c1:7f:75:f9:32:53:26:59:6f:8d:a7:6e:ab:d6:e0:de:e7:a8:
c8:25:fa:04:57:f8:c8:02:01:1f:fa:a3:8d:03:b7:87:bf:e5:
38:c3:53:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 00:34:12 2025 by rpki-client