Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/8qpcVnGYsLxwTiVc5wTV5dRFK4k.roa
File: 8qpcVnGYsLxwTiVc5wTV5dRFK4k.roa (raw, json)
Hash identifier: RbWUZtrPDR/A3Nx2zGfdIax0nOuzV8AAA7cnBdypxWc=
Subject key identifier: F2:AA:5C:56:71:98:B0:BC:70:4E:25:5C:E7:04:D5:E5:D4:45:2B:89
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 0199AF6D01314DB21AA50B16264E0A554BD5
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/8qpcVnGYsLxwTiVc5wTV5dRFK4k.roa
Signing time: Sat 04 Oct 2025 13:33:00 +0000
ROA not before: Sat 04 Oct 2025 13:33:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216246
IP address blocks: 138.124.13.0/24 maxlen: 24
138.124.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:af:6d:01:31:4d:b2:1a:a5:0b:16:26:4e:0a:55:4b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: Oct 4 13:33:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2aa5c567198b0bc704e255ce704d5e5d4452b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:02:bd:12:b0:f8:40:9a:9b:17:ed:d2:f0:36:
18:04:5f:91:7d:89:c5:6f:a1:c2:4f:e5:2b:97:b0:
37:9d:53:f1:9d:28:fe:59:a9:33:b6:d0:89:c4:79:
41:0d:57:e9:d1:49:71:b4:13:68:c5:3f:21:f5:41:
a3:fd:30:5d:0b:a6:d5:cf:3a:6a:b3:d3:55:a6:9c:
fb:cd:5f:d9:08:59:e1:70:ad:4c:31:cf:79:c7:94:
1e:3c:bc:8d:6b:b8:1c:2a:63:a5:b5:44:64:39:50:
e7:a5:30:f8:97:9e:1e:49:50:8e:28:38:90:ca:13:
cb:cb:98:41:67:f1:ec:a1:09:2f:e4:93:03:0d:bc:
16:8a:c1:d5:8e:3d:23:f9:95:b9:4a:0f:27:a1:45:
17:ef:8a:e7:c4:5a:e7:c2:4a:24:38:51:72:e5:57:
6a:fa:ca:f3:90:17:bb:6e:36:87:90:68:11:77:09:
4b:f5:5a:cb:39:34:87:ae:53:2c:40:a5:aa:b3:67:
c8:5e:50:4b:38:a6:9c:b5:df:f5:cd:8c:29:12:93:
f2:ca:38:57:9f:87:31:64:10:58:e1:d1:a4:26:c5:
18:aa:c1:bd:7e:fa:80:5c:04:0f:46:b6:79:5c:f1:
03:72:95:90:2a:5b:01:48:4c:c8:69:5a:f3:47:bb:
e6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AA:5C:56:71:98:B0:BC:70:4E:25:5C:E7:04:D5:E5:D4:45:2B:89
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/8qpcVnGYsLxwTiVc5wTV5dRFK4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.13.0-138.124.14.255
Signature Algorithm: sha256WithRSAEncryption
18:ec:68:f7:60:88:0c:17:1d:99:53:06:34:dc:af:24:95:c3:
ac:af:ea:c5:a8:2a:9a:68:e5:c5:af:f8:9a:0e:6c:4f:b0:dd:
2e:22:fe:b5:d1:39:54:a0:67:a4:74:64:5a:18:0d:45:49:ca:
56:13:dc:31:3c:ed:77:44:00:46:56:fe:1f:e6:d1:0d:fd:fb:
79:80:17:95:45:13:e2:ea:87:9c:1b:72:ef:31:5a:90:9a:2e:
e6:02:85:63:07:6b:eb:ff:01:61:ea:4a:23:7a:95:da:1b:5b:
9e:26:91:83:b8:1c:4b:96:cf:fc:cd:5c:ad:0b:51:31:39:d4:
4c:f5:5e:6a:92:6a:0f:51:a5:44:23:6c:7e:fe:44:6f:a0:11:
7b:14:6b:e5:a2:27:69:37:31:51:ed:fc:b7:eb:9b:10:af:e0:
d7:c5:59:25:77:c9:ab:cc:e6:67:71:65:99:f4:96:9c:4d:95:
62:9d:e5:5a:5e:0d:83:ec:06:bc:97:a1:d9:a0:15:7f:46:14:
68:7f:ba:ef:6b:35:41:da:28:aa:5c:35:13:0b:69:fb:f2:e2:
9d:0f:4b:35:38:c8:86:c6:1b:d3:27:93:ef:0d:9b:be:e6:b2:
3c:04:77:c6:17:e9:be:95:82:46:f8:a4:cc:ce:1b:06:c9:5d:
d1:3d:29:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:57:59 2025 by rpki-client