Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/08cC_z6ti9vxNbsAqiYZ1-_723A.roa
File: 08cC_z6ti9vxNbsAqiYZ1-_723A.roa (raw, json)
Hash identifier: jXXl/jyYcIzbwXEJzqZUMGm8NNx1On6gRtZxHK1h29U=
Subject key identifier: D3:C7:02:FF:3E:AD:8B:DB:F1:35:BB:00:AA:26:19:D7:EF:FB:DB:70
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0198A7B2BBDD070A4EE1A5F4A0BBEFCF515B
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/08cC_z6ti9vxNbsAqiYZ1-_723A.roa
Signing time: Thu 14 Aug 2025 08:29:25 +0000
ROA not before: Thu 14 Aug 2025 08:29:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214918
IP address blocks: 217.156.22.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a7:b2:bb:dd:07:0a:4e:e1:a5:f4:a0:bb:ef:cf:51:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Aug 14 08:29:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3c702ff3ead8bdbf135bb00aa2619d7effbdb70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:97:00:4b:9a:01:07:52:1a:20:6b:e5:5c:67:
b4:5c:c4:a1:07:b7:65:73:2c:de:81:6b:71:e1:51:
51:e3:56:f3:59:33:15:6c:2c:81:50:49:fd:03:15:
19:d6:e9:52:d4:c3:9e:78:ff:ba:03:9d:3f:3d:b4:
5a:df:bb:57:db:88:1a:35:56:83:87:e2:fe:9a:09:
33:7b:91:3d:cb:9b:9d:70:09:4e:e6:44:cc:b7:6c:
a0:81:bd:36:c6:81:8e:8f:fa:e7:8f:4c:98:35:55:
a4:95:6f:28:5f:bd:c1:86:5a:c8:03:1f:f4:8c:cc:
96:92:ff:ab:ae:b4:9e:f6:12:48:91:55:fd:e1:fd:
b1:24:30:87:07:e7:40:d8:6b:5a:99:75:5b:7f:00:
ea:8d:2f:07:5e:9c:d3:45:6f:9a:50:0c:34:93:12:
33:5c:f0:3b:c4:93:94:68:95:60:4c:a5:1b:b5:86:
4d:8a:15:09:16:4b:71:fa:dd:f5:3e:89:bc:e8:d3:
28:4b:92:9e:7e:3b:bc:f3:cc:1f:0b:af:b0:66:9e:
ce:39:6f:5d:22:ee:43:5a:1f:45:07:b9:89:37:d6:
8e:67:47:b1:02:30:3f:79:3d:8b:b5:4e:e7:23:c8:
d1:2c:51:67:4d:98:03:ab:18:4e:c4:09:23:fd:ad:
ad:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C7:02:FF:3E:AD:8B:DB:F1:35:BB:00:AA:26:19:D7:EF:FB:DB:70
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/08cC_z6ti9vxNbsAqiYZ1-_723A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.156.22.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:db:e5:77:bb:36:23:58:58:96:77:96:a9:22:62:91:eb:70:
d1:03:81:08:5e:f1:f0:bc:c3:f0:78:9e:93:2c:5b:c2:83:46:
fe:fe:24:3c:51:ff:ca:ad:e6:f1:87:03:87:4f:2c:ea:f1:cd:
7d:f1:42:9f:82:5c:20:eb:08:dc:19:07:67:c1:44:1f:e0:e0:
b9:9e:fb:dc:0c:cb:49:5b:a3:f0:5e:f7:1a:dc:12:0c:2b:50:
fb:f9:15:bb:89:f5:1f:0d:1a:4b:b5:60:d4:b8:80:8b:e8:ff:
df:fa:11:2b:2b:da:47:df:40:95:45:57:40:f5:aa:f8:af:9b:
51:4e:c8:7f:c7:78:2f:f6:53:d8:34:75:e6:af:92:09:a4:5f:
6b:5f:97:73:8f:24:a3:b8:42:b8:18:dd:70:7b:4b:25:57:52:
0c:cb:81:0d:3c:b5:31:b6:f5:67:82:0c:75:0b:c7:97:4d:ee:
4d:a4:aa:e8:bf:0c:fc:e5:ed:92:55:bf:13:23:27:92:37:33:
e5:16:86:da:5d:87:8b:83:3b:1a:e8:cf:9c:78:2b:06:c6:d9:
aa:9b:25:d5:6e:c4:f6:1f:82:2a:a8:e0:bb:e6:2b:46:2e:6e:
3a:bf:5e:b4:64:01:fa:72:5f:65:22:cb:c3:13:35:7e:b6:81:
61:1c:40:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZinsrvdBwpO4aX0oLvvz1FbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjUwODE0MDgyOTI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkM2M3MDJmZjNlYWQ4YmRiZjEzNWJiMDBhYTI2MTlkN2VmZmJkYjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpcAS5oBB1IaIGvlXGe0XMShB7dl
cyzegWtx4VFR41bzWTMVbCyBUEn9AxUZ1ulS1MOeeP+6A50/PbRa37tX24gaNVaD
h+L+mgkze5E9y5udcAlO5kTMt2yggb02xoGOj/rnj0yYNVWklW8oX73BhlrIAx/0
jMyWkv+rrrSe9hJIkVX94f2xJDCHB+dA2GtamXVbfwDqjS8HXpzTRW+aUAw0kxIz
XPA7xJOUaJVgTKUbtYZNihUJFktx+t31Pom86NMoS5Kefju888wfC6+wZp7OOW9d
Iu5DWh9FB7mJN9aOZ0exAjA/eT2LtU7nI8jRLFFnTZgDqxhOxAkj/a2tUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNPHAv8+rYvb8TW7AKomGdfv+9twMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvMDhjQ196NnRpOXZ4TmJzQXFpWVoxLV83MjNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2ZwWMA0G
CSqGSIb3DQEBCwUAA4IBAQAd2+V3uzYjWFiWd5apImKR63DRA4EIXvHwvMPweJ6T
LFvCg0b+/iQ8Uf/KrebxhwOHTyzq8c198UKfglwg6wjcGQdnwUQf4OC5nvvcDMtJ
W6PwXvca3BIMK1D7+RW7ifUfDRpLtWDUuICL6P/f+hErK9pH30CVRVdA9ar4r5tR
Tsh/x3gv9lPYNHXmr5IJpF9rX5dzjySjuEK4GN1we0slV1IMy4ENPLUxtvVnggx1
C8eXTe5NpKrovwz85e2SVb8TIyeSNzPlFobaXYeLgzsa6M+ceCsGxtmqmyXVbsT2
H4IqqOC75itGLm46v160ZAH6cl9lIsvDEzV+toFhHECX
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:09:31 2025 by rpki-client