Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/8cgRxcK8GZsrHdtmSmSFUY5PtqU.roa
File: 8cgRxcK8GZsrHdtmSmSFUY5PtqU.roa (raw, json)
Hash identifier: jXpvDZs2wNXG53c3NMr4CdsehmAY3IqL5jMxh1w5BX0=
Subject key identifier: F1:C8:11:C5:C2:BC:19:9B:2B:1D:DB:66:4A:64:85:51:8E:4F:B6:A5
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0199D55D7DBFEC529C4C1FD7BEE0A32C5E6F
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/8cgRxcK8GZsrHdtmSmSFUY5PtqU.roa
Signing time: Sat 11 Oct 2025 22:21:38 +0000
ROA not before: Sat 11 Oct 2025 22:21:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54252
IP address blocks: 194.231.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d5:5d:7d:bf:ec:52:9c:4c:1f:d7:be:e0:a3:2c:5e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 11 22:21:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1c811c5c2bc199b2b1ddb664a6485518e4fb6a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f2:53:33:f4:40:f7:77:e9:5c:2e:1a:80:ab:
47:12:f9:38:1a:1b:ce:af:f7:aa:51:0a:20:93:50:
cf:cd:83:9c:4e:c2:a7:cb:b8:40:c3:8f:11:df:80:
19:c7:70:ee:76:65:54:cc:5c:de:6b:5c:53:9b:c0:
82:82:30:a8:31:41:e2:d2:69:53:5c:11:bf:96:63:
27:76:2f:44:c7:25:f1:88:27:c3:c5:94:75:d3:8b:
c7:7b:c1:4a:e7:c1:b0:a0:84:44:af:be:49:51:d4:
ac:9c:6d:f8:e4:c4:c6:11:6f:b1:2e:4e:ca:37:82:
a3:f4:06:61:66:0e:33:70:ff:7c:1f:e2:10:30:95:
fa:b1:e1:07:4e:4c:ba:f4:7f:5c:ca:34:23:ee:62:
49:3e:9c:3c:e7:3c:11:6b:ac:7a:89:c6:5f:35:7f:
6a:88:2d:30:47:3a:5d:00:83:bf:2d:75:5a:53:40:
c1:a7:8f:b4:07:c0:62:b9:83:6e:d8:df:e9:8b:a5:
55:34:c4:0d:ac:28:9c:3c:08:05:1b:6d:8e:86:b7:
9c:a4:c2:63:c2:ab:9c:23:40:98:89:90:a2:a5:7e:
9a:94:a4:e2:93:0b:ec:8f:ae:0e:ec:5b:64:8b:06:
ef:db:0e:22:b5:3f:e8:95:69:12:83:15:fd:58:e2:
6d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C8:11:C5:C2:BC:19:9B:2B:1D:DB:66:4A:64:85:51:8E:4F:B6:A5
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/8cgRxcK8GZsrHdtmSmSFUY5PtqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.155.0/24
Signature Algorithm: sha256WithRSAEncryption
e3:4f:b9:65:a8:3e:7d:17:d0:24:af:7d:f5:27:59:88:d5:71:
c4:5f:40:a2:d3:9f:25:22:43:3a:70:fe:be:a5:07:0a:f0:17:
e8:cb:32:10:91:57:1d:af:38:7a:38:51:c8:01:79:c4:7d:10:
bc:cc:68:dd:66:58:21:1d:d2:0c:dc:ec:97:90:0a:de:2a:9c:
1f:45:12:4c:a5:c6:31:7a:6e:69:af:1e:b2:38:ab:5f:67:83:
94:b7:a5:c8:89:5a:94:7b:5b:a5:3e:13:c9:22:f1:39:90:0f:
c1:d3:0b:63:c0:e1:1b:cc:9d:c5:d1:71:82:52:9f:8e:63:ef:
01:75:60:8f:99:9c:af:75:f9:86:30:dd:32:12:cf:50:d4:3e:
8d:e9:eb:b8:c3:04:b3:07:cc:c0:29:42:7b:44:12:cb:0b:a0:
44:1b:4f:a5:5d:8c:fd:07:be:45:d2:39:85:ff:12:50:44:28:
e6:eb:d7:ca:20:6d:9c:1d:31:73:45:69:88:89:53:db:37:ba:
7c:38:01:26:11:dc:c5:88:d0:36:99:9f:9c:92:5b:2f:71:9d:
b1:e5:8d:bd:81:af:1e:ea:9d:75:47:c7:53:93:41:7b:48:02:
0e:f5:24:1b:8c:55:01:87:42:25:82:83:3d:4b:72:cb:e0:ef:
3b:38:07:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:57:37 2025 by rpki-client