Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/8Zequ1BL_W6iYmWvGSLxlKoRtx0.roa
File: 8Zequ1BL_W6iYmWvGSLxlKoRtx0.roa (raw, json)
Hash identifier: OYnqa1GBuQcygL8L90eWwKPCUkwvpNVbLAFvlJTFkpE=
Subject key identifier: F1:97:AA:BB:50:4B:FD:6E:A2:62:65:AF:19:22:F1:94:AA:11:B7:1D
Certificate issuer: /CN=3f56231e7ef53181b630260f5739a939980bce0f
Certificate serial: 0198BF88669AB6C65EC424919FC0F5F2C583
Authority key identifier: 3F:56:23:1E:7E:F5:31:81:B6:30:26:0F:57:39:A9:39:98:0B:CE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/8Zequ1BL_W6iYmWvGSLxlKoRtx0.roa
Signing time: Mon 18 Aug 2025 23:34:04 +0000
ROA not before: Mon 18 Aug 2025 23:34:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202391
IP address blocks: 193.106.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bf:88:66:9a:b6:c6:5e:c4:24:91:9f:c0:f5:f2:c5:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f56231e7ef53181b630260f5739a939980bce0f
Validity
Not Before: Aug 18 23:34:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f197aabb504bfd6ea26265af1922f194aa11b71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:36:b1:46:aa:8a:49:79:94:f6:ee:e0:16:0f:
4c:b5:f8:08:63:c7:0e:eb:68:d1:a1:67:d5:49:90:
61:8d:bf:bf:76:23:56:63:9b:74:ac:4a:dc:30:3b:
25:67:a3:4b:9d:a8:f7:18:18:04:94:b6:1f:61:d0:
5e:93:55:43:68:fa:1c:1f:89:c9:2a:32:cf:6f:71:
a3:db:4b:3e:bf:69:04:eb:4a:98:b7:9d:27:2b:fa:
55:4c:34:ea:5e:21:4c:05:ca:3a:ca:17:a2:4c:f0:
7c:4e:35:03:e5:95:b6:c2:89:8e:cc:b7:96:b3:a6:
9b:db:d7:f1:eb:56:58:de:6a:ce:87:0a:39:59:09:
6c:7a:a1:a6:dc:18:52:b5:ab:e9:57:bf:b2:ca:7e:
91:c7:5a:5c:7e:8c:a5:18:d0:c6:71:d5:49:a0:82:
40:eb:4c:71:f3:c0:f3:8a:0c:ed:7c:6a:68:5b:bf:
f9:43:ee:40:7f:53:44:95:96:72:0b:39:66:32:1b:
61:26:c2:f8:00:8f:b4:c5:25:52:1b:80:f0:73:8a:
e3:22:e0:e2:09:4c:61:1d:50:4d:d6:cd:09:b8:ec:
97:e0:76:af:4d:8a:0e:a9:0c:f9:71:54:d3:bf:f6:
c4:15:35:e0:8b:29:01:e8:cf:a5:c1:83:77:42:cb:
4a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:97:AA:BB:50:4B:FD:6E:A2:62:65:AF:19:22:F1:94:AA:11:B7:1D
X509v3 Authority Key Identifier:
keyid:3F:56:23:1E:7E:F5:31:81:B6:30:26:0F:57:39:A9:39:98:0B:CE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/8Zequ1BL_W6iYmWvGSLxlKoRtx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.191.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:35:f0:2e:7c:94:05:8a:e0:61:17:fd:38:4b:97:cd:c4:16:
af:2a:ee:e9:59:55:34:97:70:ac:b6:56:8c:bc:44:c1:ca:e8:
61:7e:56:9d:96:c0:b2:80:c4:a2:f9:87:c4:7d:43:03:a6:db:
5d:98:45:38:c6:77:33:78:8f:69:52:72:33:0c:78:41:5b:4b:
97:2e:24:b0:97:a9:e4:e2:5d:8b:f5:e1:fa:38:50:dc:a7:82:
13:ef:02:12:0b:c5:b4:78:fb:27:96:a3:c9:49:21:89:4d:3e:
ba:e2:af:35:c1:cf:74:84:d4:1c:4b:80:64:04:f7:c7:4c:78:
78:b3:e4:ca:e2:2c:d4:d7:68:9a:26:8d:a3:c7:da:3c:af:c1:
a7:33:fb:1d:57:96:8b:a2:b8:87:9f:8d:c5:68:0b:69:30:db:
00:3b:d8:81:5c:24:eb:79:24:5f:6e:f6:93:d4:c5:7e:e5:54:
ea:15:a7:55:12:04:df:00:09:84:d2:36:1e:25:51:ba:4a:68:
90:28:12:90:5f:83:bd:6a:7c:91:38:c0:d4:f7:8f:ba:18:0f:
dc:5d:f0:9b:00:50:27:e1:47:2e:9f:f2:93:c1:ee:f6:fb:3e:
4a:c2:67:7f:88:81:e6:5a:83:9c:92:0a:7c:ae:ce:ce:d0:72:
46:32:ab:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:44:33 2025 by rpki-client