Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/8G17Uj9AIXGxXZ66yfJHOLsxPo8.roa
File: 8G17Uj9AIXGxXZ66yfJHOLsxPo8.roa (raw, json)
Hash identifier: qU/6T++9LyINzVzJ8CV6sT+MweAHyZF0SIUnm5bIRYg=
Subject key identifier: F0:6D:7B:52:3F:40:21:71:B1:5D:9E:BA:C9:F2:47:38:BB:31:3E:8F
Certificate issuer: /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Certificate serial: 0199DF0E92FAAC4A02F7B9F68C2670987F5E
Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/8G17Uj9AIXGxXZ66yfJHOLsxPo8.roa
Signing time: Mon 13 Oct 2025 19:31:38 +0000
ROA not before: Mon 13 Oct 2025 19:31:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4445
IP address blocks: 46.190.128.0/17 maxlen: 24
47.73.173.0/24 maxlen: 24
47.73.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:df:0e:92:fa:ac:4a:02:f7:b9:f6:8c:26:70:98:7f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Validity
Not Before: Oct 13 19:31:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f06d7b523f402171b15d9ebac9f24738bb313e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ca:0d:70:92:81:9a:9e:ea:f1:46:41:dd:f6:
67:62:2c:54:01:0b:8b:11:f1:32:1a:97:6b:01:dd:
f9:51:13:52:8f:36:79:35:e6:2a:89:e9:6b:f8:7d:
24:26:f5:e3:b3:aa:cf:95:31:b7:21:6c:64:1b:06:
83:29:cc:55:f1:d4:d9:99:36:9b:83:32:54:9c:e9:
a8:42:50:50:f5:9b:c2:59:23:a2:45:18:c3:c5:32:
ad:88:a1:04:e0:0d:ef:c8:64:13:5d:f0:f0:cf:ce:
53:20:56:2f:fd:db:20:ef:4d:2a:12:67:34:77:f6:
9f:31:4e:af:80:24:41:50:4a:de:94:26:29:38:68:
c9:af:5e:83:cf:ec:38:ba:e9:b8:c4:29:77:00:6c:
25:81:1d:09:1a:c5:a6:a3:b8:b6:99:6b:9e:0b:3d:
a5:e0:4b:5c:af:b7:14:9d:b2:6d:d8:32:00:32:89:
d9:12:d4:50:5d:8a:59:49:75:6d:6c:c9:6a:7b:95:
3a:ba:9d:24:ea:d8:5c:30:c3:6e:b0:b1:4e:83:49:
aa:13:ea:96:25:95:44:b2:5e:30:f1:7f:03:73:99:
e8:b1:e4:25:9d:5b:3a:3f:69:e0:65:8f:fc:fb:d4:
01:0d:b7:0f:4a:b0:2f:f4:cf:93:32:86:8d:df:ed:
db:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6D:7B:52:3F:40:21:71:B1:5D:9E:BA:C9:F2:47:38:BB:31:3E:8F
X509v3 Authority Key Identifier:
keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/8G17Uj9AIXGxXZ66yfJHOLsxPo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.190.128.0/17
47.73.173.0/24
47.73.175.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:1e:15:62:61:3e:56:22:af:0e:92:11:eb:96:66:40:49:d9:
b7:b9:76:a0:2c:a4:40:6c:f4:9a:bc:65:b1:1d:04:50:44:43:
fb:22:5e:65:d3:3b:12:c2:ba:0d:ae:72:ab:64:6d:a6:fe:f8:
ea:3d:b4:f4:53:7b:6e:08:d8:ae:61:69:bb:dc:27:c0:a7:d1:
9d:61:d6:e6:de:c0:57:ab:8d:68:28:7c:1d:10:42:68:18:d0:
55:eb:55:9d:fd:e9:19:dc:00:13:83:bc:6d:fd:37:6e:74:9d:
f2:1f:76:71:ed:20:12:b5:a6:3f:e8:2c:37:e5:85:b0:ca:04:
cf:a4:53:da:cf:35:b2:d2:70:c8:f5:53:ea:8a:d1:54:c4:e9:
c6:89:75:6d:89:b8:c5:e9:40:ad:72:37:b7:f0:57:a5:4b:7f:
4f:6a:bd:43:fe:3d:a5:d4:86:44:47:b2:18:0d:80:54:88:74:
f2:ca:c0:8a:ff:be:26:fd:12:83:14:9f:5b:70:50:ca:5c:67:
82:de:41:e1:53:60:ff:71:8c:87:f7:44:f4:e5:77:7b:f7:f1:
1c:95:f2:73:90:f7:1c:01:7b:4e:ec:72:95:fc:ad:8c:09:07:
cc:dc:3a:98:7a:94:89:db:3c:e5:c8:1c:49:8e:d1:41:18:20:
c0:28:80:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:26 2025 by rpki-client