Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/jAxXi4dUNmTHbgKfycTi4Xg81pk.roa
File: jAxXi4dUNmTHbgKfycTi4Xg81pk.roa (raw, json)
Hash identifier: BYka2JYpc3kzPhjSRnrgUiQAaeJD/015bVnwQgLkDLw=
Subject key identifier: 8C:0C:57:8B:87:54:36:64:C7:6E:02:9F:C9:C4:E2:E1:78:3C:D6:99
Certificate issuer: /CN=f3e861dcb6341893ac4e6326ef6de43441e66943
Certificate serial: 01997AF051A617E7B2FDA03334A3EA793C7D
Authority key identifier: F3:E8:61:DC:B6:34:18:93:AC:4E:63:26:EF:6D:E4:34:41:E6:69:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-hh3LY0GJOsTmMm723kNEHmaUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/jAxXi4dUNmTHbgKfycTi4Xg81pk.roa
Signing time: Wed 24 Sep 2025 08:56:33 +0000
ROA not before: Wed 24 Sep 2025 08:56:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21061
IP address blocks: 193.110.8.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-hh3LY0GJOsTmMm723kNEHmaUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7a:f0:51:a6:17:e7:b2:fd:a0:33:34:a3:ea:79:3c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e861dcb6341893ac4e6326ef6de43441e66943
Validity
Not Before: Sep 24 08:56:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c0c578b87543664c76e029fc9c4e2e1783cd699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:76:61:7f:5f:c3:41:43:e3:ba:d8:2b:0c:53:
0f:2b:13:d3:c8:db:d5:00:f9:4e:1c:18:3a:9b:8f:
b6:aa:9a:b7:ac:b5:05:16:d4:42:3b:00:6a:a1:c8:
dd:c3:64:eb:89:bc:b1:77:42:5e:e3:ca:aa:69:e5:
67:a8:7e:dc:dd:91:ba:4a:b9:2b:49:cb:4e:17:0c:
8f:95:33:3b:34:ed:da:a6:d3:2f:f8:06:bc:3e:34:
2b:7f:f8:8c:4d:89:8d:8b:73:06:aa:e2:38:20:b4:
d5:39:7a:0b:db:46:e4:5c:cd:75:06:41:65:e3:49:
3d:a4:75:da:34:7d:d3:75:2e:75:cb:6c:a8:c6:f9:
2f:c8:f4:6e:b4:ad:5f:c9:da:3e:e4:71:32:56:5a:
0b:dc:89:16:86:79:59:cf:24:70:d1:19:95:31:06:
25:26:d3:5f:31:af:46:e0:d7:ef:1c:ba:42:65:7a:
b9:f6:60:43:db:de:02:08:32:8d:25:f3:6e:ce:47:
5c:48:a4:00:38:fe:31:e3:9e:a1:47:5b:e6:ea:22:
dc:40:2e:2f:68:20:1f:67:76:53:22:df:f5:1f:f7:
31:60:8b:fd:01:c8:49:ea:96:13:b3:11:89:88:87:
9a:13:4a:e8:7e:b3:8d:59:39:9f:45:62:bb:98:a9:
f1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0C:57:8B:87:54:36:64:C7:6E:02:9F:C9:C4:E2:E1:78:3C:D6:99
X509v3 Authority Key Identifier:
keyid:F3:E8:61:DC:B6:34:18:93:AC:4E:63:26:EF:6D:E4:34:41:E6:69:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-hh3LY0GJOsTmMm723kNEHmaUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/jAxXi4dUNmTHbgKfycTi4Xg81pk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.8.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:59:27:77:e5:2d:c8:5d:51:ce:aa:02:32:61:c2:7b:85:9c:
ce:cc:8c:4b:4f:48:37:29:ca:a0:e1:1e:41:81:d3:c3:e7:40:
e8:7a:4f:b9:fd:08:47:e6:d8:02:7b:4b:e3:6f:76:cf:77:26:
b4:0a:76:dd:3f:bb:20:c3:68:87:0a:c4:9a:20:30:4a:88:ce:
37:6b:fe:59:b7:30:ce:a6:86:ac:1c:61:c5:7f:ee:4b:04:c0:
54:35:6f:f5:ac:6f:17:1a:00:cc:b1:17:69:77:88:51:e2:f4:
ea:2d:a5:d8:0a:cb:12:da:e0:f0:8b:81:af:d9:cc:db:e3:60:
13:e8:2c:5b:07:fd:c9:35:08:a9:10:31:c0:63:7b:83:f5:13:
ec:4b:49:c8:0e:80:94:b0:bb:86:6e:67:eb:ff:4a:a0:02:c5:
40:1c:3d:c3:ef:04:d3:bf:80:82:ac:8a:d2:5d:d5:e2:a5:c0:
22:2f:1d:e2:83:dc:72:2b:69:e0:9e:86:c5:77:98:6e:00:7b:
52:e5:28:a9:39:d3:02:42:66:16:16:79:4e:0f:4f:d6:16:c0:
74:64:d2:c2:16:ef:0b:16:40:a1:73:44:e0:98:50:c2:36:cd:
72:89:72:18:d6:88:2e:85:f0:04:93:d4:79:a6:08:87:12:80:
a9:29:4f:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZl68FGmF+ey/aAzNKPqeTx9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZTg2MWRjYjYzNDE4OTNhYzRlNjMyNmVmNmRlNDM0NDFl
NjY5NDMwHhcNMjUwOTI0MDg1NjMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzBjNTc4Yjg3NTQzNjY0Yzc2ZTAyOWZjOWM0ZTJlMTc4M2NkNjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnZhf1/DQUPjutgrDFMPKxPTyNvV
APlOHBg6m4+2qpq3rLUFFtRCOwBqocjdw2Tribyxd0Je48qqaeVnqH7c3ZG6Srkr
SctOFwyPlTM7NO3aptMv+Aa8PjQrf/iMTYmNi3MGquI4ILTVOXoL20bkXM11BkFl
40k9pHXaNH3TdS51y2yoxvkvyPRutK1fydo+5HEyVloL3IkWhnlZzyRw0RmVMQYl
JtNfMa9G4NfvHLpCZXq59mBD294CCDKNJfNuzkdcSKQAOP4x456hR1vm6iLcQC4v
aCAfZ3ZTIt/1H/cxYIv9AchJ6pYTsxGJiIeaE0rofrONWTmfRWK7mKnxPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIwMV4uHVDZkx24Cn8nE4uF4PNaZMB8GA1UdIwQY
MBaAFPPoYdy2NBiTrE5jJu9t5DRB5mlDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOC1oaDNMWTBHSk9zVG1NbTcyM2tORUhtYVVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mNzQ0NjMtNGI1Mi00ODgzLTg1Mjkt
MzRlYTAyMWQ5NzMzLzEvakF4WGk0ZFVObVRIYmdLZnljVGk0WGc4MXBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9mNzQ0NjMtNGI1Mi00ODgzLTg1MjktMzRlYTAyMWQ5NzMz
LzEvOC1oaDNMWTBHSk9zVG1NbTcyM2tORUhtYVVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwW4IMA0G
CSqGSIb3DQEBCwUAA4IBAQA/WSd35S3IXVHOqgIyYcJ7hZzOzIxLT0g3Kcqg4R5B
gdPD50Doek+5/QhH5tgCe0vjb3bPdya0CnbdP7sgw2iHCsSaIDBKiM43a/5ZtzDO
poasHGHFf+5LBMBUNW/1rG8XGgDMsRdpd4hR4vTqLaXYCssS2uDwi4Gv2czb42AT
6CxbB/3JNQipEDHAY3uD9RPsS0nIDoCUsLuGbmfr/0qgAsVAHD3D7wTTv4CCrIrS
XdXipcAiLx3ig9xyK2ngnobFd5huAHtS5SipOdMCQmYWFnlOD0/WFsB0ZNLCFu8L
FkChc0TgmFDCNs1yiXIY1oguhfAEk9R5pgiHEoCpKU/D
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:32:10 2025 by rpki-client