Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/8RxSWpC3pHJ9hh6qG0BIw2xusZc.roa
File: 8RxSWpC3pHJ9hh6qG0BIw2xusZc.roa (raw, json)
Hash identifier: dTWrB7/Bcq7TMpdoMtRKk5plCZVXL7i81JXpAEWqK4g=
Subject key identifier: F1:1C:52:5A:90:B7:A4:72:7D:86:1E:AA:1B:40:48:C3:6C:6E:B1:97
Certificate issuer: /CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Certificate serial: 0199E29AEC0B80D96F9D5FF62ABEC6AC1B7D
Authority key identifier: 2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/8RxSWpC3pHJ9hh6qG0BIw2xusZc.roa
Signing time: Tue 14 Oct 2025 12:03:47 +0000
ROA not before: Tue 14 Oct 2025 12:03:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40994
IP address blocks: 194.150.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e2:9a:ec:0b:80:d9:6f:9d:5f:f6:2a:be:c6:ac:1b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01
Validity
Not Before: Oct 14 12:03:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f11c525a90b7a4727d861eaa1b4048c36c6eb197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b1:33:08:67:ac:f3:15:b0:69:fa:f5:d4:d7:
9b:41:55:3e:66:3f:46:8a:8e:d4:25:24:a5:82:6d:
c4:dc:35:b2:d3:dd:54:59:24:1b:04:df:f8:a6:0d:
fa:01:74:70:a1:ba:0a:89:5b:53:98:d6:fe:77:1c:
93:f0:66:70:97:c1:3b:7b:a0:f2:22:39:a4:fe:8a:
07:7b:4c:69:a6:af:18:13:4e:41:7a:16:15:d0:ff:
e9:25:24:2c:20:29:fc:93:b7:7c:27:5d:c3:64:52:
bc:a8:18:8e:33:17:5b:5c:e7:45:4a:f7:f4:d3:ed:
69:0f:fb:b9:6f:4b:ce:76:b5:21:78:30:bd:f6:c7:
84:2c:a1:75:41:46:e4:49:7b:be:6e:c6:4e:13:c1:
8c:41:91:64:11:1d:0c:91:44:de:f5:2a:2a:13:93:
a6:41:08:c6:29:a0:3f:07:64:52:9e:4b:61:74:91:
cd:fd:34:33:c4:77:7c:7a:53:ea:53:c0:d7:a2:1b:
34:93:5b:09:cf:79:2f:b1:86:4d:2c:4e:47:17:17:
1a:bc:64:4c:b8:c8:93:28:5e:a7:98:3e:69:12:1f:
6f:dc:cd:8d:6d:1d:72:2d:2a:eb:65:65:0d:01:92:
c7:ce:22:a7:29:98:0c:01:98:74:9d:6f:8d:b1:0f:
00:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1C:52:5A:90:B7:A4:72:7D:86:1E:AA:1B:40:48:C3:6C:6E:B1:97
X509v3 Authority Key Identifier:
keyid:2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/8RxSWpC3pHJ9hh6qG0BIw2xusZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.74.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:b1:db:bd:3a:5a:3b:44:58:3f:43:f5:43:0d:f8:2d:a4:b1:
2b:50:25:27:f9:ce:a6:4f:94:d7:4f:e2:7d:96:54:10:c3:80:
ab:d9:ae:18:f9:1d:c4:b4:7a:f7:f3:1f:e5:92:3c:ab:c2:7f:
c3:45:0b:93:92:4c:f7:0f:34:85:70:a8:02:3d:0d:ed:2f:7d:
65:a2:b9:c5:8d:ff:de:92:96:c0:de:0d:49:62:5e:2e:a5:1e:
c9:98:0e:d2:d6:22:09:da:3d:93:f0:23:dd:a5:a8:41:00:7f:
bd:5e:79:05:f7:1b:c8:17:88:7c:44:5a:c0:99:a4:7f:57:c4:
e2:ce:17:5b:5b:af:8c:94:56:ee:fc:4e:83:42:fc:37:50:66:
3b:18:47:3b:a7:78:5c:e9:f0:49:a1:2c:ba:c7:26:87:d9:54:
f5:d3:09:b4:1f:c4:f8:98:2f:40:dd:c9:af:b0:e0:0a:77:fe:
fd:b5:41:80:94:33:5e:75:5c:e6:07:3d:c5:a7:08:1f:d0:af:
e0:8b:aa:15:1f:7e:37:86:f2:de:3a:c7:df:02:c8:66:67:4d:
b8:f6:27:4f:bd:18:ff:86:db:83:85:c1:d8:88:45:3a:e7:b9:
25:ad:13:d2:e7:98:14:d2:f6:ac:0a:b2:27:d1:e2:f1:d7:43:
23:d1:36:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:24:50 2025 by rpki-client