Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r8eYGyMKt9hUY-au3UZmQbZ01R4.roa
File: r8eYGyMKt9hUY-au3UZmQbZ01R4.roa (raw, json)
Hash identifier: o52/bHOIirvCqolYaZYAm56dqQHAXZ4AuupC8oezgpw=
Subject key identifier: AF:C7:98:1B:23:0A:B7:D8:54:63:E6:AE:DD:46:66:41:B6:74:D5:1E
Certificate issuer: /CN=af6eaeff123ca67446d0e49401e495057078e174
Certificate serial: 01994EED8F3D3D59B2134A2F0EC72CBAE97C
Authority key identifier: AF:6E:AE:FF:12:3C:A6:74:46:D0:E4:94:01:E4:95:05:70:78:E1:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r8eYGyMKt9hUY-au3UZmQbZ01R4.roa
Signing time: Mon 15 Sep 2025 19:50:15 +0000
ROA not before: Mon 15 Sep 2025 19:50:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202851
IP address blocks: 185.172.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4e:ed:8f:3d:3d:59:b2:13:4a:2f:0e:c7:2c:ba:e9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af6eaeff123ca67446d0e49401e495057078e174
Validity
Not Before: Sep 15 19:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afc7981b230ab7d85463e6aedd466641b674d51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ad:23:fa:f3:16:21:a0:4b:d5:8d:d1:e1:f5:
b0:90:9b:33:37:05:3e:5e:c2:ce:af:e4:27:8e:af:
5f:f0:58:59:6c:4e:3c:c9:2d:65:c2:b4:ba:a5:4c:
3d:35:d5:69:66:94:68:80:7a:8c:06:37:bd:d2:b0:
1d:c0:07:b2:01:40:06:90:ab:65:d8:c2:ba:4a:95:
03:57:9c:94:7f:6a:ad:69:7e:38:85:55:3f:ba:4b:
6c:94:6b:15:9c:31:70:d2:8b:89:75:51:b0:e4:02:
86:44:af:0c:34:8b:8b:cb:59:4c:b4:4b:55:95:b1:
bf:e2:5b:35:dd:14:79:c2:84:ed:0b:40:df:cc:89:
b2:d7:47:92:14:cd:24:4c:da:34:30:3a:19:ac:d5:
d6:0a:94:31:28:54:50:6c:6c:49:5a:ec:eb:bb:19:
7e:19:2a:e4:d9:d1:32:e3:b9:41:c4:06:36:4b:de:
08:15:24:ac:de:cb:25:07:f6:a4:fd:29:d2:c9:7b:
71:88:9c:43:50:c5:4d:d7:6a:a6:ef:f3:f0:d7:14:
56:42:56:c8:de:3f:a4:29:6f:70:2e:a1:e6:e5:15:
56:22:29:00:6d:7c:4e:b6:e4:01:32:d2:9f:88:33:
fb:3f:d1:6b:61:c1:25:6f:9c:d4:3f:44:e1:2f:e5:
13:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C7:98:1B:23:0A:B7:D8:54:63:E6:AE:DD:46:66:41:B6:74:D5:1E
X509v3 Authority Key Identifier:
keyid:AF:6E:AE:FF:12:3C:A6:74:46:D0:E4:94:01:E4:95:05:70:78:E1:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r8eYGyMKt9hUY-au3UZmQbZ01R4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.124.0/22
Signature Algorithm: sha256WithRSAEncryption
17:47:a9:1b:01:bb:d2:d5:64:f2:8b:b7:bd:1f:cc:f7:77:2d:
ab:b7:dd:9f:aa:4e:05:c8:0e:14:53:e3:63:26:91:99:24:87:
69:35:31:fd:cf:df:ac:60:7d:cf:9d:6c:55:e8:6f:58:1d:33:
46:1b:c0:c6:d8:f0:8b:85:6a:c6:a2:8b:5d:f0:6b:67:0d:5a:
30:20:1b:ba:96:62:14:a2:ff:22:76:dd:79:39:e9:e1:b3:a6:
22:f3:98:74:7e:96:46:d9:1d:73:6d:1f:1e:9e:ea:a7:a3:7e:
59:07:98:6c:e9:5f:84:cf:d9:e6:93:ac:74:c2:5d:2b:2a:26:
75:58:81:77:33:a1:9f:3d:58:f0:f0:99:2b:5a:a2:d1:18:f3:
57:7f:f7:3e:ba:28:3e:3c:72:8e:d0:f4:d2:ce:f4:f9:30:73:
12:2b:88:d0:03:74:4c:50:97:6e:fb:15:48:74:85:07:84:7b:
79:e0:39:4a:d5:ee:3c:d9:cf:8e:0f:c9:65:0b:de:56:53:62:
f1:7d:bc:f3:31:af:9e:bf:a6:08:7d:de:04:c4:84:1c:4a:0b:
50:43:8b:30:4a:3c:0b:11:81:15:1f:c7:96:0d:b2:79:cb:37:
22:2d:bd:a7:08:a8:54:fb:be:b8:18:89:e3:ae:8a:51:56:49:
44:cb:f9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:36:21 2025 by rpki-client