Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/j6pbHRlnLOfwSmwNrUk0ef6vnW4.roa
File: j6pbHRlnLOfwSmwNrUk0ef6vnW4.roa (raw, json)
Hash identifier: O/TV8Iikok5Y3gpICIdfIlFsIJTjWip0oG8I80DYIV8=
Subject key identifier: 8F:AA:5B:1D:19:67:2C:E7:F0:4A:6C:0D:AD:49:34:79:FE:AF:9D:6E
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0198C265BD7EE381016D903A2A95DAD5B1EE
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/j6pbHRlnLOfwSmwNrUk0ef6vnW4.roa
Signing time: Tue 19 Aug 2025 12:55:04 +0000
ROA not before: Tue 19 Aug 2025 12:55:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214584
IP address blocks: 178.253.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c2:65:bd:7e:e3:81:01:6d:90:3a:2a:95:da:d5:b1:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Aug 19 12:55:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8faa5b1d19672ce7f04a6c0dad493479feaf9d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:13:c2:7f:79:3e:c9:e9:e6:1c:6f:68:40:d1:
cb:5e:be:15:90:93:27:79:91:52:9d:4c:68:b4:0c:
b1:06:01:7c:59:1f:34:d5:dd:7c:ed:80:2b:25:ef:
0e:dc:fd:67:b2:ce:8c:71:49:05:b0:34:db:53:28:
04:6c:da:af:be:f0:97:06:d5:f8:44:a2:94:c2:3a:
a5:98:42:e1:25:28:d6:96:48:77:a2:15:d6:50:80:
b2:4e:dc:1e:b4:13:23:ce:fd:74:de:8d:5c:e2:3f:
a5:b2:b7:c9:88:a1:22:ce:4e:cf:70:32:22:a7:26:
b6:4c:c4:41:fa:78:d9:a3:2b:2f:2c:5e:5e:24:ba:
cd:22:53:f1:d0:ca:8d:46:2a:cf:fe:96:3d:a5:6c:
e9:35:be:67:55:4b:50:a2:25:4b:b8:e0:af:32:74:
21:23:7d:67:78:09:df:9e:ba:56:28:a7:e3:a3:57:
be:56:4c:c5:a7:49:98:fd:e1:f9:cd:a2:90:77:4e:
e1:b1:23:82:7f:c2:40:2a:b0:b6:11:d7:2c:f2:93:
5e:ee:27:db:e0:30:e0:c0:73:99:3b:39:e3:b6:bc:
54:6c:04:96:9e:d9:ff:63:ed:e6:7f:e8:91:f4:91:
d7:07:d3:6c:7c:42:8b:a3:a8:1b:21:ef:4d:37:5e:
4a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AA:5B:1D:19:67:2C:E7:F0:4A:6C:0D:AD:49:34:79:FE:AF:9D:6E
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/j6pbHRlnLOfwSmwNrUk0ef6vnW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.225.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:93:5e:41:44:73:30:9b:d2:75:5e:30:33:b7:ee:b3:a2:fd:
39:67:b1:5f:e9:2b:c6:a1:67:de:ba:df:b0:11:65:9c:ec:d0:
41:64:3d:b0:a8:4c:6b:a1:e6:1d:69:99:ca:10:9c:27:9d:24:
5f:a9:36:a0:af:f2:2c:c0:33:01:0b:21:66:5d:69:3c:85:4f:
01:95:b9:c6:22:d5:53:4b:f3:c0:8b:a5:a1:76:bb:6f:70:c3:
01:51:7a:a8:a8:44:e4:9f:20:b8:7d:1d:fd:3f:c0:9c:98:91:
ac:7b:64:b9:a9:1d:75:db:cc:19:2c:3c:a8:37:a5:97:75:6b:
a5:35:e8:df:88:cc:aa:a9:b8:44:34:57:f1:08:c2:6b:97:8d:
39:d3:58:e8:24:bd:78:9b:49:a8:2a:5b:e5:d8:f5:02:95:05:
da:cb:6d:9f:fd:d1:49:6c:6a:74:48:3e:95:f2:27:a8:e5:50:
64:71:45:38:cc:15:b9:a3:6a:10:66:20:39:42:fd:f1:e2:f4:
e6:b6:f4:62:d8:d4:64:db:1e:df:ef:52:c1:25:0a:18:4b:3c:
29:a3:af:e7:85:dd:01:bb:0d:b3:e1:04:d6:8b:a1:c2:93:d4:
8d:a7:25:59:f0:75:cb:ee:82:66:fb:ee:94:37:27:a5:23:82:
0c:eb:37:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:06:06 2025 by rpki-client