Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/8joE7txuqPRptc2U6nWwYuYnOmI.roa
File: 8joE7txuqPRptc2U6nWwYuYnOmI.roa (raw, json)
Hash identifier: Zwogdhh73hhf4ungwCilm3IbJUadAHNWf9EL+OCOw1Q=
Subject key identifier: F2:3A:04:EE:DC:6E:A8:F4:69:B5:CD:94:EA:75:B0:62:E6:27:3A:62
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 0198DCC96C85709CC9C99DDF64A9F2F8A632
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/8joE7txuqPRptc2U6nWwYuYnOmI.roa
Signing time: Sun 24 Aug 2025 15:54:04 +0000
ROA not before: Sun 24 Aug 2025 15:54:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 91.108.237.0/24 maxlen: 24
91.108.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:dc:c9:6c:85:70:9c:c9:c9:9d:df:64:a9:f2:f8:a6:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Aug 24 15:54:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f23a04eedc6ea8f469b5cd94ea75b062e6273a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d4:9b:75:4b:c0:cf:fb:24:00:c9:98:ef:ee:
70:03:cb:c0:c2:25:3a:f7:9c:d9:5f:d2:43:38:68:
0a:da:17:a7:f2:6b:64:4d:16:57:a1:05:ca:8b:fb:
9f:27:8f:05:76:e1:3d:2a:9b:e3:24:41:13:00:53:
d6:fe:ac:ee:42:6f:61:44:47:97:ea:f4:c2:b4:77:
19:f5:a2:01:0b:36:0c:2c:c1:fa:35:b7:78:37:59:
cb:ed:90:16:3a:45:5c:bf:c1:37:e4:d9:68:13:23:
da:64:aa:d5:43:b7:52:08:ee:81:06:5c:61:26:1f:
c6:21:74:e2:d0:9b:96:0f:f9:a4:17:f8:b0:06:eb:
d1:13:8a:0c:5b:d9:ca:b1:eb:05:c1:7a:8c:67:71:
39:bd:a1:c0:a1:b4:76:b8:bc:de:b3:b1:a3:d4:f9:
2b:8b:47:8a:95:3a:75:a0:38:de:b7:20:7c:34:bc:
b0:9c:87:53:f4:15:30:d4:a2:7a:fb:b9:df:e9:2a:
98:6a:12:71:0e:95:96:a3:20:4a:f5:b2:92:9a:fe:
3a:99:8d:a6:d2:02:e8:48:7d:de:a7:c3:e3:f6:76:
72:a9:77:63:8a:39:f7:23:43:1e:83:7f:00:29:b0:
78:df:ac:e8:57:e8:69:44:7b:8a:41:dd:5f:13:6f:
71:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3A:04:EE:DC:6E:A8:F4:69:B5:CD:94:EA:75:B0:62:E6:27:3A:62
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/8joE7txuqPRptc2U6nWwYuYnOmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.237.0/24
91.108.252.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:72:39:b2:47:f1:cb:c0:85:e8:b5:e5:5c:ab:63:cd:55:8b:
e2:5a:09:49:df:f7:7c:f8:7d:41:dc:2b:67:a8:a8:60:6f:f5:
4f:98:d3:c5:1b:ed:27:71:0e:1e:3e:c5:aa:50:9d:c1:c7:26:
b2:d3:c7:96:48:7c:31:a2:e8:bf:d9:23:07:5f:63:0e:34:ba:
bc:b1:38:f4:cd:6e:f4:17:08:ce:15:f4:47:c9:72:3d:a9:3d:
b5:31:a2:94:d2:ef:79:70:da:fb:b5:ce:d3:61:7e:ed:36:3b:
aa:7f:2e:b5:f0:d7:c4:c8:47:d6:25:ed:a9:6a:62:d7:0a:e6:
35:d9:00:0e:0c:e1:81:c5:52:93:65:fe:a3:3b:87:05:47:57:
ed:ba:30:45:1a:ce:e3:1c:43:56:ca:23:56:dd:21:e0:d7:ca:
47:c7:ea:4f:8f:7a:84:e3:20:c1:c6:4c:b8:7b:bd:ed:85:90:
4c:cf:55:13:47:d5:bb:82:e1:fd:6b:bb:a5:1b:2a:32:cf:6e:
3d:71:7c:5b:55:a8:ba:fc:54:23:cb:69:2d:4d:e9:2d:f7:92:
c3:b5:db:16:74:d1:9f:a2:48:b8:22:6d:b4:d7:ac:42:88:45:
9e:f2:44:ce:c3:7f:39:20:70:97:49:c9:e8:77:f9:be:c8:df:
7f:cb:a4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 17:19:07 2025 by rpki-client