Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/8WJg0FCb2fzG2APxfD0StVJRyKc.roa
File: 8WJg0FCb2fzG2APxfD0StVJRyKc.roa (raw, json)
Hash identifier: arSq4+uVAQechawGJq1Vs4dcHHn6a2tT+IBa0xaymvM=
Subject key identifier: F1:62:60:D0:50:9B:D9:FC:C6:D8:03:F1:7C:3D:12:B5:52:51:C8:A7
Certificate issuer: /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Certificate serial: 0198CE24558BA40583D5AD5FDB071B5AB5AC
Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/8WJg0FCb2fzG2APxfD0StVJRyKc.roa
Signing time: Thu 21 Aug 2025 19:39:04 +0000
ROA not before: Thu 21 Aug 2025 19:39:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 185.252.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ce:24:55:8b:a4:05:83:d5:ad:5f:db:07:1b:5a:b5:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Validity
Not Before: Aug 21 19:39:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f16260d0509bd9fcc6d803f17c3d12b55251c8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e3:c6:d7:95:aa:a5:9b:67:d0:22:bc:0a:0d:
f2:1a:1a:b8:5c:82:d1:2c:97:bf:65:8d:76:7b:03:
f1:40:e7:5e:67:10:b0:06:cf:cd:5f:f5:d3:0d:08:
bd:44:12:eb:f8:2f:61:f0:d9:97:ad:45:d1:55:cd:
5c:86:ed:56:27:5c:03:15:ad:02:2c:d4:b8:bf:41:
e6:5e:68:5f:35:33:d0:27:d1:1c:0a:3c:f7:c5:c2:
f5:9e:46:d0:c4:a8:1e:81:9b:ba:7c:49:69:ed:df:
86:1d:34:3a:57:9e:4e:6f:4c:f7:d0:5e:b6:dc:57:
23:5f:9d:ab:1f:0a:be:3d:88:4b:3e:b5:90:17:e6:
20:02:a3:d4:40:de:ec:1a:69:0a:a2:8d:ad:18:88:
9a:9b:97:c3:14:4b:30:b4:70:9c:9c:cc:33:a5:ca:
2d:b2:b7:09:12:ce:77:96:46:c0:77:5b:9a:23:68:
88:7a:01:5e:cb:fc:b2:7e:fd:72:cd:11:16:2b:c8:
1e:7f:77:a9:c0:19:bd:26:8f:fb:da:3b:c1:a0:ad:
81:a9:c5:ad:6a:f1:60:15:ae:f3:7f:60:96:3d:97:
39:5f:09:7f:94:65:c7:a4:21:20:f4:93:34:bd:66:
e3:92:30:e4:67:53:b0:66:1f:77:57:26:d1:fc:71:
19:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:62:60:D0:50:9B:D9:FC:C6:D8:03:F1:7C:3D:12:B5:52:51:C8:A7
X509v3 Authority Key Identifier:
keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/8WJg0FCb2fzG2APxfD0StVJRyKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.84.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:db:12:99:e5:fc:43:20:04:84:39:dd:de:f6:7d:a7:8e:cd:
c3:d7:19:d8:6c:42:7b:46:79:31:39:f4:7c:dc:d6:4d:f5:d6:
cb:d3:23:94:3d:86:fe:f2:46:bc:87:2a:a3:69:66:12:92:10:
fe:99:fe:86:5b:67:06:b4:a1:2c:83:ea:e9:4f:4d:97:02:17:
95:6c:0a:41:15:2a:1d:83:65:b2:0a:16:43:ac:6d:5d:d9:c7:
cb:a1:48:ce:b5:94:7e:6e:c0:b2:82:47:7a:b5:d8:5c:c6:a0:
5d:a6:a2:1d:c9:82:48:2e:48:98:6c:8a:f1:7e:a7:28:08:89:
ee:af:21:b0:af:8d:57:45:58:40:b1:d6:83:30:69:16:e3:fb:
d1:eb:1f:45:f8:07:d8:07:f2:14:4e:e4:94:ad:ab:35:d2:3a:
69:7f:23:61:99:e8:d9:b8:3c:e1:50:16:ba:40:2d:bf:b0:90:
b8:7b:56:19:33:51:1c:37:5b:05:d2:4b:f8:41:96:ab:81:6e:
4e:0c:56:15:d4:e8:e0:73:a0:fa:30:69:c4:b1:5b:e7:51:50:
2c:4a:24:7e:64:ee:48:aa:c3:02:5a:28:de:7e:34:73:58:da:
03:ae:dc:85:8a:79:65:3d:fb:de:5b:9d:88:37:73:98:de:c7:
ae:90:ab:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:18:41 2025 by rpki-client