Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/uoyL0ZKxvvYBLDNKHJ1IzqSk5WI.roa
File: uoyL0ZKxvvYBLDNKHJ1IzqSk5WI.roa (raw, json)
Hash identifier: ACYXuw8g/6+3rYxew9u9OnID8RwadfPf3oWdg4WuNrU=
Subject key identifier: BA:8C:8B:D1:92:B1:BE:F6:01:2C:33:4A:1C:9D:48:CE:A4:A4:E5:62
Certificate issuer: /CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded
Certificate serial: 019A0B06C0D55F80843AC29D328DBCBA5BAB
Authority key identifier: 8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/uoyL0ZKxvvYBLDNKHJ1IzqSk5WI.roa
Signing time: Wed 22 Oct 2025 08:26:23 +0000
ROA not before: Wed 22 Oct 2025 08:26:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60223
IP address blocks: 195.24.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:06:c0:d5:5f:80:84:3a:c2:9d:32:8d:bc:ba:5b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded
Validity
Not Before: Oct 22 08:26:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba8c8bd192b1bef6012c334a1c9d48cea4a4e562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:08:97:e5:b4:87:f1:66:06:38:e9:ad:b8:80:
1c:dc:c2:1b:33:46:01:44:11:b0:9e:97:61:fc:9c:
3d:2c:ea:3a:86:fa:eb:f3:b7:1a:da:5c:13:d8:2d:
d0:81:1a:c5:cd:97:c6:b7:14:b6:de:35:b7:6f:0c:
c5:bc:c7:e1:69:1c:1d:86:97:fb:60:0f:f8:7f:b4:
4e:c3:c8:ad:0b:d7:a3:c2:cb:7a:b2:b2:03:8e:6d:
e9:c5:0d:de:29:f7:26:6a:36:14:b6:80:e8:11:ee:
49:ff:d7:81:17:6d:b1:04:3c:97:ac:d8:e0:b7:7b:
17:25:0f:c7:3c:71:09:ec:10:9a:d0:bc:16:42:5a:
df:1b:b9:7d:6d:c7:1f:88:cc:a6:b7:42:5f:1c:ff:
cf:58:28:9c:9a:eb:96:6d:58:62:b8:b8:56:fa:ce:
8b:f8:56:d1:73:05:a2:88:56:f3:15:5f:95:f8:e3:
3b:0a:65:b2:d4:19:a6:c9:6f:74:a8:ad:4a:72:fa:
f1:d2:0e:38:81:d1:b7:37:51:5d:1c:5f:f6:c5:5a:
9f:d2:de:c0:ed:49:0e:4a:96:e6:11:4e:72:de:89:
d0:42:59:4b:5d:46:7a:36:83:f6:a2:7c:c9:ac:90:
42:88:c6:65:8b:70:fc:f2:21:2e:e3:cd:f2:ca:d2:
e0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8C:8B:D1:92:B1:BE:F6:01:2C:33:4A:1C:9D:48:CE:A4:A4:E5:62
X509v3 Authority Key Identifier:
keyid:8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/uoyL0ZKxvvYBLDNKHJ1IzqSk5WI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.24.236.0/24
Signature Algorithm: sha256WithRSAEncryption
51:26:4a:06:2d:cb:a6:da:96:76:5f:03:57:68:0f:c1:f4:1d:
7b:7c:57:ab:71:24:19:57:58:f8:ae:cb:09:7e:3c:1f:c6:60:
ce:04:43:bc:de:d4:b4:2c:ea:26:0e:63:93:bd:35:9d:22:38:
10:b7:bf:4a:2a:33:3a:c6:4e:3e:1d:44:e9:7a:4d:2b:2c:77:
93:84:09:c1:87:d9:39:f6:c3:c9:dc:b5:48:77:0a:56:fe:52:
64:36:94:1c:ec:04:fb:72:9b:a3:8b:b4:0a:ff:48:4f:b5:81:
a4:2d:76:1e:a2:30:83:31:c8:f1:d7:9b:ac:11:c6:e3:84:c0:
3e:77:e9:bd:ae:ce:79:4d:8b:f3:7d:8d:89:3d:2a:7b:4a:38:
51:ac:13:e1:af:ea:3d:60:f6:de:92:a9:3f:22:e3:a9:66:e0:
81:f0:cd:2b:77:31:94:56:98:80:b2:f4:f7:4a:68:59:3f:66:
9c:5d:ce:21:2d:55:6f:6e:60:e5:f1:1a:df:7a:50:e6:4c:a9:
ea:e6:a6:ae:54:c2:d4:ca:bf:35:dc:80:c5:22:3f:20:97:26:
1d:b6:f2:54:0a:39:97:ec:fd:ba:52:b1:26:c8:a7:e1:3d:61:
11:51:c7:5a:0b:ca:27:58:48:c8:c9:87:de:34:84:6c:bc:6d:
65:00:eb:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:36:04 2025 by rpki-client