Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/lW8L7FdqeT5R58NRtyPEf5Z0gmg.roa
File: lW8L7FdqeT5R58NRtyPEf5Z0gmg.roa (raw, json)
Hash identifier: 8Hwz3wPzlSmaqtx7chxbj4/As7Gc40k4bLE+IGEIauQ=
Subject key identifier: 95:6F:0B:EC:57:6A:79:3E:51:E7:C3:51:B7:23:C4:7F:96:74:82:68
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 0199B8E0BEF2E59004343823B7099B495975
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/lW8L7FdqeT5R58NRtyPEf5Z0gmg.roa
Signing time: Mon 06 Oct 2025 09:36:00 +0000
ROA not before: Mon 06 Oct 2025 09:36:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208117
IP address blocks: 95.140.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b8:e0:be:f2:e5:90:04:34:38:23:b7:09:9b:49:59:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Oct 6 09:36:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=956f0bec576a793e51e7c351b723c47f96748268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:98:f7:50:66:d0:ca:7f:31:81:a9:1f:0e:92:
90:90:a3:81:e6:e4:66:55:4f:0e:5f:88:0a:02:87:
21:b5:18:b2:bb:d0:aa:8c:a2:e1:40:66:ae:6d:e9:
a8:51:82:b8:be:93:37:f8:c2:6e:3b:ad:b7:49:69:
41:1b:86:5e:8a:c8:1c:85:92:6c:44:47:99:ae:98:
c1:b5:c7:82:3c:fc:f6:9c:67:5e:da:f0:10:59:7c:
ce:86:e4:47:c2:17:30:0d:15:ce:c5:67:9f:38:15:
79:26:37:c7:74:d4:73:be:59:48:01:cb:f0:55:44:
e5:97:53:64:dd:70:ab:1c:ac:db:fa:d1:73:28:11:
01:6f:22:f9:8f:0f:ad:44:3c:40:bb:b5:06:8d:ff:
db:21:cf:20:6e:8b:c0:e3:a6:77:31:50:da:21:35:
2f:8c:5f:d4:d7:75:d1:29:39:1b:66:80:4e:73:0f:
94:cc:e0:6f:1e:cd:7d:10:62:a6:20:44:07:b2:01:
f0:52:d3:94:a7:86:e3:bf:1b:c7:47:e3:66:2e:b2:
43:e9:71:e8:39:b1:69:09:ff:b9:73:13:96:97:84:
c0:62:eb:ef:cc:0f:df:20:19:73:9a:54:be:cf:10:
a7:52:76:dd:f0:fb:bf:83:a4:11:e6:42:7a:7a:04:
cb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6F:0B:EC:57:6A:79:3E:51:E7:C3:51:B7:23:C4:7F:96:74:82:68
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/lW8L7FdqeT5R58NRtyPEf5Z0gmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.140.82.0/24
Signature Algorithm: sha256WithRSAEncryption
63:bd:48:22:85:b3:06:5c:59:ac:93:c3:d0:28:d5:af:c9:00:
25:1b:1f:ce:d0:0e:90:a2:9d:19:73:40:6d:f9:ab:67:3c:dc:
df:6c:46:09:b0:f8:51:f8:47:62:29:7a:d9:97:14:18:f1:d3:
14:53:48:6b:72:2b:37:e8:26:77:7e:4c:b0:73:a8:cb:fd:99:
7f:31:ad:81:7c:e7:be:b6:8b:d6:2d:e2:6e:4e:6d:d1:cc:54:
d7:c6:d1:6f:c8:2f:53:8a:6d:7f:2c:04:5c:ab:f5:59:80:c3:
9e:0d:82:fc:d6:8c:e0:d6:ae:d6:63:8d:26:9b:01:be:6b:f6:
27:6f:94:14:f8:49:51:0e:12:76:d9:b4:4f:86:b7:75:e4:da:
be:16:d3:91:f9:52:94:af:44:b6:c2:75:df:97:29:55:f5:b0:
73:bc:1b:1d:73:75:39:c9:4c:7b:08:d6:d8:b4:01:85:8f:47:
da:ed:89:bd:86:50:62:63:8d:8b:db:61:19:11:61:ac:33:04:
03:78:71:b4:12:ac:12:1d:82:ea:0a:9e:ab:91:3e:e5:51:ce:
be:b7:19:f8:98:49:e2:ca:ef:2f:f9:aa:27:d4:c2:05:86:23:
a3:e7:de:e6:2f:76:40:39:d4:37:45:75:5e:0c:e7:71:19:ac:
ba:19:72:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:28:38 2025 by rpki-client