Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/IB8EvDjqi0Zn77LVje6PtC4puP0.roa
File: IB8EvDjqi0Zn77LVje6PtC4puP0.roa (raw, json)
Hash identifier: u2mlhpsMyeaxfE7W43n81b02+Y9NeSYXL6jdArkfvzQ=
Subject key identifier: 20:1F:04:BC:38:EA:8B:46:67:EF:B2:D5:8D:EE:8F:B4:2E:29:B8:FD
Certificate issuer: /CN=43fad79548afc5c83e59bbfe388c64492cb55013
Certificate serial: 01970CC9185F72999AE2B3EEC65C2E3A1B01
Authority key identifier: 43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/IB8EvDjqi0Zn77LVje6PtC4puP0.roa
Signing time: Mon 26 May 2025 13:29:54 +0000
ROA not before: Mon 26 May 2025 13:29:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 188.73.0.0/18 maxlen: 24
188.231.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0c:c9:18:5f:72:99:9a:e2:b3:ee:c6:5c:2e:3a:1b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43fad79548afc5c83e59bbfe388c64492cb55013
Validity
Not Before: May 26 13:29:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=201f04bc38ea8b4667efb2d58dee8fb42e29b8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:01:f1:df:a3:7d:3f:f3:2a:a7:71:65:be:b5:
cb:23:40:74:77:38:e5:0e:2a:df:28:92:e6:e3:c8:
a5:70:4b:c5:81:1e:ce:39:6d:e1:85:53:65:f8:b8:
06:8b:2f:07:bd:c5:07:3e:92:1c:3c:3a:19:84:83:
f6:b4:a1:86:95:18:f5:5f:49:59:e2:56:5a:42:37:
2b:2d:08:eb:84:78:e1:ef:24:5e:14:57:dd:a8:0b:
20:7d:0a:8f:e2:b6:91:1f:e1:30:29:22:17:30:60:
8d:d9:48:54:96:78:38:c2:74:5b:6b:2b:b5:50:40:
4f:5e:38:1d:7e:de:e5:8b:18:69:6f:fe:ef:40:32:
2d:9b:cd:37:47:84:a2:ce:17:c7:b5:4e:61:8c:d6:
da:6c:b6:3c:0e:a0:6f:51:c1:72:58:9f:86:75:40:
0b:57:88:ea:89:aa:81:e7:4e:4c:08:83:88:3f:60:
f8:76:6c:c2:2a:63:e3:e5:ce:0e:3d:28:44:da:d9:
fe:07:21:0e:3e:c3:03:ca:7b:65:bf:4a:10:03:13:
09:ed:c6:3e:79:d1:cd:02:bb:6c:33:ba:9f:24:8d:
dc:c8:87:d5:b0:aa:fe:df:09:50:ab:5b:15:88:1b:
84:2e:e6:b0:23:03:40:33:0f:4c:53:86:cf:14:74:
14:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1F:04:BC:38:EA:8B:46:67:EF:B2:D5:8D:EE:8F:B4:2E:29:B8:FD
X509v3 Authority Key Identifier:
keyid:43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/IB8EvDjqi0Zn77LVje6PtC4puP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.73.0.0/18
188.231.0.0/17
Signature Algorithm: sha256WithRSAEncryption
a1:26:a7:55:d5:0f:ca:14:56:ef:31:a7:f1:7c:34:27:6a:56:
39:42:b1:fe:b9:4d:e8:f1:cc:e0:22:96:44:1d:a4:3b:e1:7d:
be:cf:d9:02:e1:1e:31:01:d5:5a:95:b3:6d:3c:6b:4a:a3:30:
7b:8d:2e:4a:f2:dd:2f:6a:36:78:63:a2:35:7b:14:31:53:70:
ec:d9:da:24:17:d2:b0:b3:25:c6:54:cd:63:73:48:e0:0d:46:
5c:71:72:ef:3d:24:4d:fb:bb:75:33:4e:75:ed:0f:65:f7:15:
ae:6f:34:bd:ff:ee:d9:79:48:99:af:d6:6e:2a:1f:7a:00:cb:
51:a7:8f:98:e6:be:76:7c:ad:f3:60:50:63:a3:70:ab:02:4c:
3b:ff:2a:f5:b7:df:a2:66:f1:93:5d:b9:03:84:3f:73:36:0c:
2a:f1:dd:ec:7a:91:14:b0:51:a5:ba:13:59:47:dc:a4:80:ea:
3e:db:90:4e:25:a6:1c:81:47:ed:82:8d:95:2a:ea:0e:6a:cb:
19:6b:29:7a:fb:95:f6:ae:bb:53:3e:92:b8:45:e9:a5:88:e5:
2c:97:bf:38:1f:88:23:56:e8:da:e1:1b:e8:c1:04:e3:fa:f7:
df:dc:d7:2d:4a:ad:26:ab:f4:13:5d:c6:65:18:ab:a1:f9:99:
97:f7:2f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:53:10 2025 by rpki-client