Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/so8pBCu3OoCQHu6FwVS_UlNOhcc.roa
File: so8pBCu3OoCQHu6FwVS_UlNOhcc.roa (raw, json)
Hash identifier: 1ROXDchmdC8sVtRbk/pVH0KENmflgOQs2hvgfG5XuAg=
Subject key identifier: B2:8F:29:04:2B:B7:3A:80:90:1E:EE:85:C1:54:BF:52:53:4E:85:C7
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 01987EF7DB9570DB0D0EC4BCC62038C076F6
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/so8pBCu3OoCQHu6FwVS_UlNOhcc.roa
Signing time: Wed 06 Aug 2025 10:40:29 +0000
ROA not before: Wed 06 Aug 2025 10:40:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9318
IP address blocks: 144.56.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:f7:db:95:70:db:0d:0e:c4:bc:c6:20:38:c0:76:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Aug 6 10:40:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b28f29042bb73a80901eee85c154bf52534e85c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:23:4c:e9:a6:14:41:60:60:00:c8:c3:dd:f3:
44:78:93:42:3e:61:3a:70:99:8e:e3:f5:94:7b:47:
01:b4:66:ea:5f:90:6f:8a:c6:a9:2c:33:63:7b:4d:
b0:96:ca:57:b8:be:45:83:66:d9:33:b8:4b:01:03:
53:97:bb:40:20:1d:90:44:7b:60:e7:25:61:a7:87:
d8:d8:d1:fa:0b:17:53:43:da:1e:4c:e7:0c:39:18:
9d:6b:82:b1:8e:d0:4c:50:0a:d5:d3:0f:d7:ce:b0:
7f:c6:b7:c7:4e:b8:7b:97:13:c9:f1:8a:cf:67:1f:
7d:86:13:1d:93:7f:07:3b:79:1e:57:dc:0d:a8:61:
64:b5:1f:a2:f0:da:bd:af:9a:36:31:0c:96:9d:0b:
ed:b5:98:a8:56:d9:68:b5:1a:e3:b3:61:6a:73:58:
56:db:cf:75:be:ff:c4:ff:b8:e8:cd:b8:f3:08:16:
c8:5e:34:49:ca:74:9a:7b:20:cc:02:2e:1b:66:95:
8a:4e:58:f3:d8:8b:8f:a6:2d:96:f8:b7:e6:f6:cc:
dd:49:1e:3f:e4:59:c4:60:1f:ea:45:7d:29:a7:4f:
1b:6b:21:f5:01:9d:70:fd:91:c9:6d:19:96:71:36:
9e:09:3d:a6:3b:eb:6c:29:6b:99:ce:90:6b:41:76:
5a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:8F:29:04:2B:B7:3A:80:90:1E:EE:85:C1:54:BF:52:53:4E:85:C7
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/so8pBCu3OoCQHu6FwVS_UlNOhcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.102.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:e9:54:e8:fe:2e:f1:60:40:58:0f:d5:fb:83:aa:96:5e:17:
48:85:8f:a2:b6:ca:58:30:b4:e2:94:b5:25:f3:7d:92:3d:b1:
4b:c9:7d:a3:28:bc:a3:01:a2:45:9d:b3:62:20:06:8c:96:84:
28:72:f1:ad:6f:8c:95:31:ca:c2:b3:78:4c:bf:61:06:b8:cb:
09:07:76:da:49:b9:74:e0:fd:fb:6e:32:84:ce:81:55:dd:75:
de:c5:d8:29:92:2b:fb:ef:61:35:ba:9a:ad:07:b1:93:a9:17:
5b:35:ad:fd:1a:d5:ed:1a:76:da:6b:31:89:43:8f:43:97:bc:
c6:e8:da:30:93:cc:b5:b9:5f:b2:9f:70:be:f2:88:ca:53:ce:
b8:00:4d:36:62:79:0c:7d:0c:62:b9:24:c6:f3:84:1f:38:f2:
fc:b1:0b:5a:55:d3:8c:bc:0b:c9:04:7c:5b:c2:98:4a:7c:ef:
2d:14:4e:55:4a:21:0c:e7:f3:e2:74:16:d9:d1:18:7b:1a:2d:
01:65:82:8f:af:67:68:7b:a2:e8:4c:c5:46:40:4a:ae:f8:4d:
f8:68:c0:3f:3c:a6:3f:d0:b8:f4:1f:6c:b1:5d:0a:e8:39:44:
62:2e:53:b7:20:7d:44:66:45:9e:7b:b9:00:09:ab:47:2f:bb:
e8:53:5d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:52:49 2025 by rpki-client