Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/S-8iAviLA5Jol3aOuoC8YtshVjI.roa
File: S-8iAviLA5Jol3aOuoC8YtshVjI.roa (raw, json)
Hash identifier: nPTWtD2pyVs+rkGfz9T+B81uYYTcqsLuoc9G5yhStYs=
Subject key identifier: 4B:EF:22:02:F8:8B:03:92:68:97:76:8E:BA:80:BC:62:DB:21:56:32
Certificate issuer: /CN=7cab39c6e0412235efc7877a9f737899313ed15e
Certificate serial: 0199A43C5A384BD9152026AC1C611BD89CAA
Authority key identifier: 7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/S-8iAviLA5Jol3aOuoC8YtshVjI.roa
Signing time: Thu 02 Oct 2025 09:24:02 +0000
ROA not before: Thu 02 Oct 2025 09:24:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31574
IP address blocks: 194.242.109.0/24 maxlen: 24
194.242.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a4:3c:5a:38:4b:d9:15:20:26:ac:1c:61:1b:d8:9c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cab39c6e0412235efc7877a9f737899313ed15e
Validity
Not Before: Oct 2 09:24:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4bef2202f88b03926897768eba80bc62db215632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2e:45:5d:14:78:45:26:74:52:c4:78:36:31:
3e:f2:29:63:b0:30:d1:6f:50:9e:44:b1:69:0d:9d:
6a:54:46:f7:2a:bc:7f:b3:5f:fe:ac:10:a8:5d:44:
e2:0a:4b:61:e9:83:26:cb:90:80:44:b8:64:3f:32:
53:c1:1f:f7:b2:39:c7:48:e0:b1:2b:b6:5f:2b:6f:
ea:f4:3e:3f:14:51:b4:1e:a3:98:41:35:29:e0:13:
72:26:49:44:fa:6b:af:33:c8:dc:bb:f0:ae:92:31:
e8:96:e3:36:a0:69:5c:3d:3f:ee:c5:8e:87:fb:f3:
e5:9b:30:c0:81:68:8c:89:6d:5e:87:d8:c6:60:d0:
cb:c3:ff:af:0f:f1:66:d5:4f:bc:8f:e9:18:68:86:
ad:a9:a9:19:6c:61:7d:56:6b:af:07:9e:2a:cc:0e:
26:d7:59:9c:5b:74:1e:d4:0d:de:d0:bd:70:f9:a2:
44:67:a7:3e:8e:18:cc:67:22:92:79:fc:65:a3:8e:
b9:77:98:c4:0d:c5:e1:f2:c0:4d:3b:d9:40:c4:25:
78:55:65:74:d9:8c:13:ca:bb:97:36:bc:3f:74:92:
da:e1:a7:b5:f5:67:cc:9c:9c:f9:96:e6:35:de:ce:
06:4a:1b:5a:04:77:cd:8b:e4:d9:f4:ee:6f:a1:c9:
a0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EF:22:02:F8:8B:03:92:68:97:76:8E:BA:80:BC:62:DB:21:56:32
X509v3 Authority Key Identifier:
keyid:7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/S-8iAviLA5Jol3aOuoC8YtshVjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.242.109.0-194.242.110.255
Signature Algorithm: sha256WithRSAEncryption
0d:a6:e3:99:80:da:4f:f2:18:ae:db:79:c5:79:98:49:75:14:
a9:9b:f6:1c:1f:8c:b5:76:4f:42:05:db:1b:d7:2b:6a:88:9f:
08:50:25:97:8c:f7:9b:b3:1f:92:00:52:3d:28:fe:13:33:67:
62:4e:2f:3f:4c:59:3c:86:96:28:2e:12:47:23:20:25:03:ff:
18:1d:5b:29:29:0e:4e:09:ca:ed:e4:a9:ef:55:0c:20:27:4b:
bb:cb:ab:ee:d7:c6:48:db:07:64:5d:54:58:ce:de:58:05:f5:
85:df:9a:4a:ce:77:c6:46:23:a2:af:7c:80:1e:8a:41:34:20:
ff:d6:e9:c3:8a:ec:25:7b:85:ca:b1:ae:ec:a7:ff:87:b2:04:
68:1e:1c:48:6e:fa:d5:87:69:ce:37:de:95:8b:57:34:3a:b7:
59:22:43:c0:cc:38:f7:e4:bd:23:05:02:51:e1:6c:80:d8:9a:
01:a1:bf:f7:c5:a9:77:88:f7:39:bf:1e:8f:24:af:e7:56:4d:
8f:ca:1c:0b:f8:ad:4c:8e:c8:7c:ef:ee:7b:00:f1:2c:98:aa:
32:bf:04:91:00:c2:8e:74:5a:7a:8c:5e:ea:cc:d0:97:02:c8:
1d:d9:60:18:21:f0:31:3b:07:34:ff:37:a7:f9:3b:b1:51:b4:
cc:9b:0a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:28:45 2025 by rpki-client