Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/8-icgNG9YFfARW17qjTdCn9yD80.roa
File: 8-icgNG9YFfARW17qjTdCn9yD80.roa (raw, json)
Hash identifier: vebs5VRK2d7EVc4VYZnrKXN0FKJQS1X4sYhCt1gzy4o=
Subject key identifier: F3:E8:9C:80:D1:BD:60:57:C0:45:6D:7B:AA:34:DD:0A:7F:72:0F:CD
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 0198A6F535F75EFB4619CC1FAB4F9E23EC17
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/8-icgNG9YFfARW17qjTdCn9yD80.roa
Signing time: Thu 14 Aug 2025 05:02:24 +0000
ROA not before: Thu 14 Aug 2025 05:02:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54339
IP address blocks: 141.226.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a6:f5:35:f7:5e:fb:46:19:cc:1f:ab:4f:9e:23:ec:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Aug 14 05:02:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3e89c80d1bd6057c0456d7baa34dd0a7f720fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:80:8d:bc:fc:82:68:1d:f9:17:ac:be:c6:f1:
87:40:21:c3:87:2b:77:81:fc:83:14:22:dd:9b:28:
3e:99:8c:40:3e:f5:0d:ca:23:0f:80:86:9e:48:69:
85:80:7a:db:03:cb:1c:79:6b:0d:05:34:ce:0f:34:
9d:07:88:2a:99:c7:e5:b6:49:06:1d:13:6c:a9:80:
32:0f:c9:6b:7b:f4:d9:97:a5:6b:ca:94:c1:a0:a2:
0f:a8:cd:4c:ec:d3:0c:3d:5d:c3:e1:c8:ca:96:d0:
4a:33:04:81:ad:ce:17:67:56:94:fd:47:7a:e8:0b:
62:ef:ca:59:79:39:93:b7:cb:1e:1e:ce:23:79:3e:
c2:51:4c:be:b1:e6:8f:a3:65:0c:77:e8:52:4f:4e:
b7:26:43:dc:9d:b6:f3:64:4e:69:f0:4d:df:34:49:
0c:36:17:3f:db:4e:72:b5:e4:59:67:0c:e8:cf:4a:
f1:d9:a1:0a:c6:50:72:e6:92:81:95:73:df:41:9b:
29:5e:09:28:6a:72:a1:2b:c5:47:fc:fa:fa:b1:9e:
b2:51:d9:d4:10:09:ab:21:a9:f8:54:f0:aa:a2:ae:
c1:42:bc:27:de:1e:67:77:71:8b:c1:7c:c4:90:a8:
83:77:c6:50:9c:62:2d:d9:d0:e4:6d:c1:af:f1:10:
5d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E8:9C:80:D1:BD:60:57:C0:45:6D:7B:AA:34:DD:0A:7F:72:0F:CD
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/8-icgNG9YFfARW17qjTdCn9yD80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.243.0/24
Signature Algorithm: sha256WithRSAEncryption
27:57:d3:61:97:c2:3d:ab:93:ef:2a:06:69:d7:d1:60:29:5b:
bd:f2:8f:3d:29:e4:33:c0:75:c9:75:4e:f3:a3:96:62:31:c9:
3b:a0:42:fd:6f:f5:70:a2:d0:32:db:83:3b:a4:aa:1b:eb:18:
51:61:ff:ef:e0:f6:38:6a:53:d8:13:18:a2:6f:3c:d5:44:78:
7a:0f:0f:76:4a:15:2a:13:d6:10:d9:9f:0c:88:28:92:a1:df:
aa:7f:ce:10:a8:96:bd:7e:cb:18:28:ba:cd:3e:eb:8a:9b:aa:
a6:e0:17:da:2d:0e:70:48:a5:80:27:00:48:01:8b:dd:c4:bf:
68:02:20:65:92:77:64:18:78:f9:01:bb:98:53:85:6b:ea:53:
59:48:01:b0:2b:a6:d6:e8:6f:42:b2:c0:ee:e6:c3:8e:fb:2d:
aa:e4:51:9b:03:87:f5:a5:91:64:3b:d3:14:a6:32:75:f0:2c:
07:d2:d7:a3:2b:f9:20:38:00:d7:1c:56:a1:e2:ff:7c:d3:4b:
d5:1d:1e:51:5d:b7:16:f7:58:49:57:42:9d:1a:b8:1d:2b:2c:
18:76:84:4a:da:b9:8e:8f:43:89:3a:a2:6a:ab:1a:71:71:9c:
28:f6:ea:06:ea:46:b0:5f:f2:3f:b4:12:05:de:16:59:7a:de:
73:4d:84:0d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZim9TX3XvtGGcwfq0+eI+wXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3
ZWVmNDAwHhcNMjUwODE0MDUwMjI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2U4OWM4MGQxYmQ2MDU3YzA0NTZkN2JhYTM0ZGQwYTdmNzIwZmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4CNvPyCaB35F6y+xvGHQCHDhyt3
gfyDFCLdmyg+mYxAPvUNyiMPgIaeSGmFgHrbA8sceWsNBTTODzSdB4gqmcfltkkG
HRNsqYAyD8lre/TZl6VrypTBoKIPqM1M7NMMPV3D4cjKltBKMwSBrc4XZ1aU/Ud6
6Ati78pZeTmTt8seHs4jeT7CUUy+seaPo2UMd+hST063JkPcnbbzZE5p8E3fNEkM
Nhc/205yteRZZwzoz0rx2aEKxlBy5pKBlXPfQZspXgkoanKhK8VH/Pr6sZ6yUdnU
EAmrIan4VPCqoq7BQrwn3h5nd3GLwXzEkKiDd8ZQnGIt2dDkbcGv8RBdiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPPonIDRvWBXwEVte6o03Qp/cg/NMB8GA1UdIwQY
MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt
YmM2ZGI3MjQ4YWRkLzEvOC1pY2dORzlZRmZBUlcxN3FqVGRDbjl5RDgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk
LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjeLzMA0G
CSqGSIb3DQEBCwUAA4IBAQAnV9Nhl8I9q5PvKgZp19FgKVu98o89KeQzwHXJdU7z
o5ZiMck7oEL9b/VwotAy24M7pKob6xhRYf/v4PY4alPYExiibzzVRHh6Dw92ShUq
E9YQ2Z8MiCiSod+qf84QqJa9fssYKLrNPuuKm6qm4BfaLQ5wSKWAJwBIAYvdxL9o
AiBlkndkGHj5AbuYU4Vr6lNZSAGwK6bW6G9CssDu5sOO+y2q5FGbA4f1pZFkO9MU
pjJ18CwH0tejK/kgOADXHFah4v9800vVHR5RXbcW91hJV0KdGrgdKywYdoRK2rmO
j0OJOqJqqxpxcZwo9uoG6kawX/I/tBIF3hZZet5zTYQN
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:47:11 2025 by rpki-client