Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ss8IFK3kjci9KnPxGYVM7DOy-d0.roa
File: ss8IFK3kjci9KnPxGYVM7DOy-d0.roa (raw, json)
Hash identifier: pXpfHZbpfTpZG1oBABFsqGWF2IlbtSYffYfWjwy6q2Q=
Subject key identifier: B2:CF:08:14:AD:E4:8D:C8:BD:2A:73:F1:19:85:4C:EC:33:B2:F9:DD
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0199EC764A05B610EC33562CEA3805FC6268
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ss8IFK3kjci9KnPxGYVM7DOy-d0.roa
Signing time: Thu 16 Oct 2025 09:59:59 +0000
ROA not before: Thu 16 Oct 2025 09:59:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56340
IP address blocks: 5.8.80.0/21 maxlen: 21
37.9.40.0/21 maxlen: 21
91.243.88.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 18:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ec:76:4a:05:b6:10:ec:33:56:2c:ea:38:05:fc:62:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Oct 16 09:59:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2cf0814ade48dc8bd2a73f119854cec33b2f9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:47:03:10:5b:ff:26:53:80:90:5e:e0:50:70:
b9:4a:11:5b:ca:d2:99:01:e6:e6:82:6a:f2:f9:99:
22:6a:0e:21:d3:b2:dd:16:c9:92:97:88:69:3f:68:
33:36:11:aa:72:29:d2:29:9e:20:da:d1:be:04:54:
34:e2:fe:aa:cb:f6:55:20:2a:e2:41:1a:19:09:d5:
96:12:23:f7:01:79:9a:1b:53:ba:a4:ef:94:94:9c:
4d:12:23:d2:5a:ea:7a:9c:02:80:f1:c1:ad:49:75:
87:e8:0b:04:ca:5a:70:5e:9a:d4:76:03:ee:a9:88:
23:9a:d3:e2:e7:48:dc:4a:f3:06:14:cc:11:0b:31:
43:9c:d5:7a:44:47:b2:d1:5a:fb:9d:aa:c7:fd:fc:
18:eb:d6:db:73:a4:f7:20:44:d2:ac:a5:ea:67:14:
fa:bb:a6:a7:ed:e4:c8:bc:cd:2f:59:27:b8:6b:fa:
58:08:c9:32:8c:e7:48:1b:04:5f:c8:66:8e:66:bd:
b3:52:6c:62:ce:2c:87:7c:b8:87:9a:84:b2:17:e6:
88:ef:52:1d:7b:9c:20:7b:3c:6b:78:94:ff:56:cb:
41:82:72:9e:52:cb:49:02:7e:5d:27:b0:6c:99:57:
0f:78:fe:a7:9e:d6:05:25:1e:5a:82:da:0e:09:2a:
9d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CF:08:14:AD:E4:8D:C8:BD:2A:73:F1:19:85:4C:EC:33:B2:F9:DD
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ss8IFK3kjci9KnPxGYVM7DOy-d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.80.0/21
37.9.40.0/21
91.243.88.0/21
Signature Algorithm: sha256WithRSAEncryption
cd:87:36:2a:fc:ec:a5:a6:41:16:ec:8c:dc:e0:17:2c:06:a4:
7c:86:ec:0e:30:36:7d:58:e1:58:eb:ae:f7:08:79:4f:0e:61:
c9:8e:c4:da:1a:88:af:b8:75:9c:cf:b9:89:a4:95:bc:86:f8:
e9:f7:d3:59:23:63:f9:c7:a4:f6:c4:97:9b:e7:5c:c9:b5:14:
64:cd:db:ec:88:ef:de:56:e7:66:29:a9:74:f0:08:b1:68:f4:
e7:83:23:fe:df:66:7e:64:4f:79:84:ce:52:4a:16:0f:0a:b3:
a5:d6:f9:ec:34:34:2e:e2:63:9b:60:54:80:92:85:11:54:b1:
5a:75:2b:97:c7:7b:b9:aa:2f:f4:19:b4:bb:11:e0:e3:3f:67:
b2:fd:af:4d:1f:2a:8b:cb:49:0b:a1:fb:a4:26:6d:9a:30:6d:
b7:8b:5d:96:bf:7a:0d:28:02:3c:ca:08:50:74:4d:e1:de:f3:
a5:39:c1:fe:f2:81:bc:cb:4d:b5:29:e4:b0:f0:ef:d1:7e:cb:
0a:ae:8f:8d:91:bb:55:fa:1e:73:96:86:28:49:aa:ad:1b:10:
10:3d:9b:98:2d:2c:ca:50:51:9b:2b:a2:6a:e9:b2:af:ef:0f:
8b:a7:46:8e:73:0b:78:ae:aa:48:1b:71:e7:83:32:3c:a3:24:
8a:ab:0e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:18:01 2025 by rpki-client