Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ixUBJfnie3vYGxthgLrlGadhCKM.roa
File: ixUBJfnie3vYGxthgLrlGadhCKM.roa (raw, json)
Hash identifier: e4iWHkqpZ4OKPX9FG7BZBOb1cxHUSf2x1rbHNHXwUS4=
Subject key identifier: 8B:15:01:25:F9:E2:7B:7B:D8:1B:1B:61:80:BA:E5:19:A7:61:08:A3
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0198A7DF96F33D1BCACE3990E1065A775BBA
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ixUBJfnie3vYGxthgLrlGadhCKM.roa
Signing time: Thu 14 Aug 2025 09:18:24 +0000
ROA not before: Thu 14 Aug 2025 09:18:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 91.208.61.0/24 maxlen: 24
212.192.16.0/23 maxlen: 23
212.192.18.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a7:df:96:f3:3d:1b:ca:ce:39:90:e1:06:5a:77:5b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 14 09:18:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b150125f9e27b7bd81b1b6180bae519a76108a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:85:c6:fb:b8:f9:f7:7d:43:32:85:0d:50:61:
52:02:d4:cd:cb:96:c1:f0:f0:61:41:1e:bc:ac:07:
55:a2:39:23:b9:48:76:7b:21:24:9b:30:78:ab:36:
31:3a:b0:03:da:67:f2:a6:e6:d3:89:bc:d0:ed:d5:
96:16:06:4d:18:d7:51:1e:5c:ef:a4:c9:ee:3d:a7:
27:fd:92:ec:ab:29:bb:8e:d7:df:49:fa:ae:48:6f:
83:84:81:84:b7:b9:52:e0:83:20:59:b7:11:f7:c3:
8f:60:25:79:56:1f:cf:e7:db:5a:92:13:81:53:20:
31:d2:36:7b:2b:b2:66:be:40:f1:20:dc:3e:a0:59:
4e:1b:18:62:4b:5d:37:11:82:57:51:b6:92:78:f7:
dc:1e:d8:87:ef:6e:60:d2:35:dd:8b:65:cb:8a:33:
49:3c:1f:eb:73:35:16:b4:74:2c:ba:c2:61:d6:26:
3f:7f:61:41:d7:f8:82:d4:9b:72:4c:dd:a0:8b:67:
10:0f:9c:fc:90:0d:5b:a2:c8:c0:46:97:10:b9:bd:
79:68:b4:76:0c:6b:8f:fd:ee:20:74:22:cc:8a:48:
73:bb:4e:63:d5:1f:51:c5:5c:19:cb:7e:c7:59:c4:
50:d8:81:4f:e8:83:25:a8:30:2d:b3:d5:a0:46:ed:
b9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:15:01:25:F9:E2:7B:7B:D8:1B:1B:61:80:BA:E5:19:A7:61:08:A3
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ixUBJfnie3vYGxthgLrlGadhCKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.61.0/24
212.192.16.0/22
Signature Algorithm: sha256WithRSAEncryption
08:16:28:a3:38:c2:dd:ff:ec:d5:c9:14:4a:83:bd:3d:37:ea:
aa:c6:04:88:a0:18:1a:02:c9:b8:71:ce:b4:78:24:a0:e2:d4:
4c:c9:33:2d:50:f4:48:9a:68:37:d4:10:f8:1a:19:41:ba:5d:
34:37:7d:ea:b0:c7:7c:53:7b:53:59:d8:28:c8:65:cd:57:3f:
a1:7a:e7:0f:e1:fb:16:ad:1d:57:a4:a8:69:fa:e5:46:af:42:
14:4c:a3:ff:97:b0:9f:32:45:84:f6:c8:28:34:dd:84:03:0a:
20:f8:28:5d:8c:6a:5c:22:23:cc:d5:36:59:53:87:2d:0d:7a:
b0:16:09:f7:97:11:47:9f:b5:41:be:34:6c:fb:96:ab:e4:36:
b1:e3:e2:5b:88:4b:77:b1:d1:10:e0:26:fb:aa:7f:c0:bd:bc:
86:e2:fa:be:8c:00:a7:09:79:03:cc:7b:c8:22:af:d6:b2:27:
e4:dd:7f:0e:67:83:6e:8f:dd:f3:ef:3c:6a:81:83:2c:1d:71:
5e:46:55:10:f8:fd:21:9c:00:67:7e:3d:0b:6d:a7:1b:ae:1f:
28:58:29:57:6f:2d:6b:0d:26:ab:4f:be:48:66:9a:b7:ba:d3:
f5:39:07:35:b9:90:ea:e7:24:61:03:42:d9:39:3c:52:8e:7d:
97:61:67:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:59:49 2025 by rpki-client