Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/A8u38dlgw8e8wVBstLEUX0BIwKA.roa
File: A8u38dlgw8e8wVBstLEUX0BIwKA.roa (raw, json)
Hash identifier: wMifdjJKZOKPZclZ2LTT2h1hBhv48+8C1YSb4m0Dn8w=
Subject key identifier: 03:CB:B7:F1:D9:60:C3:C7:BC:C1:50:6C:B4:B1:14:5F:40:48:C0:A0
Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial: 0198D8E37DD9EA8E928E08D03C28D03CBAC3
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/A8u38dlgw8e8wVBstLEUX0BIwKA.roa
Signing time: Sat 23 Aug 2025 21:44:04 +0000
ROA not before: Sat 23 Aug 2025 21:44:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209186
IP address blocks: 178.17.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:e3:7d:d9:ea:8e:92:8e:08:d0:3c:28:d0:3c:ba:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Validity
Not Before: Aug 23 21:44:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03cbb7f1d960c3c7bcc1506cb4b1145f4048c0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ed:87:ef:7b:ee:88:a5:c5:9a:ac:a6:c6:f0:
1e:f3:08:b6:57:d5:38:5e:b4:32:1e:5c:fc:64:5d:
60:d9:03:c6:91:4c:a0:a3:fb:f9:9c:2c:05:c9:31:
c3:2f:f2:12:53:b7:9b:0a:1f:21:30:c7:8e:e6:43:
2e:a3:cb:91:cf:7d:72:b3:1d:60:f7:22:7e:f7:43:
53:e3:97:dc:0c:25:05:93:48:16:cd:1c:63:b9:0d:
a9:bf:4d:3d:96:0c:99:4e:e5:48:f3:10:95:c0:10:
cf:75:6e:ee:fa:0f:b0:d4:48:67:1b:e0:16:93:f5:
96:07:1e:85:2c:c8:38:08:f3:6e:96:57:a4:52:6a:
bd:3b:7e:19:69:f6:6a:07:9c:20:72:7e:f1:c3:c3:
01:fa:17:12:f5:65:49:78:73:65:dd:7c:05:cb:d9:
96:44:ad:8b:46:b3:f8:e3:98:d7:d5:d5:2c:55:54:
49:74:5f:8c:be:11:64:14:ed:0d:b2:2e:91:ba:d8:
f7:2a:ee:00:0b:7b:14:18:af:9c:b1:4e:7d:67:c6:
2c:77:65:7c:1d:a0:46:a8:b9:d7:cc:49:5d:b5:69:
dc:9e:51:e1:d4:e7:bd:c7:b0:f6:91:f7:b4:a8:14:
88:f4:08:b9:60:4a:84:b0:b1:c6:aa:33:de:8d:68:
bd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CB:B7:F1:D9:60:C3:C7:BC:C1:50:6C:B4:B1:14:5F:40:48:C0:A0
X509v3 Authority Key Identifier:
keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/A8u38dlgw8e8wVBstLEUX0BIwKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.17.63.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:db:7b:f4:06:50:20:42:44:5c:1d:4b:7a:a7:0a:ff:ec:f7:
eb:bc:ee:10:79:9e:ca:62:a1:22:18:db:7b:d1:88:ab:0d:fe:
72:c5:7c:12:8c:89:69:d7:b8:8f:d6:b4:f0:53:af:48:8a:a5:
ea:93:54:eb:ba:e9:a1:11:1f:1d:c9:e0:2b:64:2f:97:a2:4b:
05:84:76:ce:7e:42:86:42:27:b1:07:56:65:58:98:78:9a:e4:
6a:fd:41:7c:f7:09:a1:37:b0:9e:51:cd:b1:3d:12:a1:c3:41:
49:56:8a:8d:12:36:ea:78:21:3e:f1:46:3c:44:4c:47:10:2c:
ae:e5:f2:2a:6b:4b:5c:d5:79:a0:50:d6:fe:dc:d4:4a:eb:a7:
20:81:74:3e:89:eb:bf:bb:9a:b9:d5:43:69:b0:21:c8:ae:54:
f5:ca:b3:51:0a:90:51:b8:b2:c5:3e:3c:ba:11:f0:d9:b3:5a:
d2:53:9d:89:64:06:8e:33:e6:33:62:89:4f:a0:9e:8d:44:ae:
27:24:29:d3:cc:78:9e:4f:88:4b:c1:10:89:ba:83:c5:c1:7d:
40:a9:0d:38:fa:fe:77:ff:65:ab:c1:18:3e:6f:d5:cc:bf:87:
6c:ba:02:e3:56:5b:3e:49:b6:e8:31:f1:a1:bf:9b:ba:d5:fe:
7d:58:8c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 07:34:16 2025 by rpki-client