Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/vd8_SJHzr8iO1aPmpCSJojiHuI8.roa
File: vd8_SJHzr8iO1aPmpCSJojiHuI8.roa (raw, json)
Hash identifier: BqDMc74v4M4R1zQB5Olz3LroGyuHdM7yMcXWbB2ojHg=
Subject key identifier: BD:DF:3F:48:91:F3:AF:C8:8E:D5:A3:E6:A4:24:89:A2:38:87:B8:8F
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 0199D429DFC763A12B2ADD9FC9DB2307088F
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/vd8_SJHzr8iO1aPmpCSJojiHuI8.roa
Signing time: Sat 11 Oct 2025 16:45:38 +0000
ROA not before: Sat 11 Oct 2025 16:45:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6830
IP address blocks: 93.89.219.0/24 maxlen: 24
93.89.221.0/24 maxlen: 24
93.89.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d4:29:df:c7:63:a1:2b:2a:dd:9f:c9:db:23:07:08:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Oct 11 16:45:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bddf3f4891f3afc88ed5a3e6a42489a23887b88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:22:3d:08:3d:2d:5c:eb:14:73:49:aa:97:80:
13:43:25:90:de:c8:3e:2d:7e:6f:4e:06:d6:bf:e1:
6d:16:44:7f:f8:6e:a3:d8:2d:d9:a7:c0:83:af:47:
15:f6:37:9d:8b:ae:12:6f:c0:41:b1:22:6f:d7:c3:
24:ba:a8:e9:69:79:14:8d:cd:b1:6f:c5:a8:38:50:
68:77:4b:45:fa:de:56:f7:52:3e:f5:da:af:c7:12:
d4:b9:7f:b8:b1:82:78:78:6f:1c:07:a0:cd:43:6e:
35:22:ba:c5:36:01:02:9c:d5:c7:58:a6:6a:92:4b:
0a:6a:34:69:ac:77:91:a9:0b:a7:14:ff:be:df:5b:
f8:c5:e5:42:b5:9f:f5:83:26:73:01:5b:c8:e9:61:
be:21:70:2f:a6:1b:60:f2:c1:5b:f8:9b:f6:b7:1e:
93:52:3b:2a:72:5b:d3:30:b5:4f:77:89:eb:f5:91:
e1:9d:39:d2:80:3c:1c:9c:17:c1:3c:30:a9:48:3f:
3b:53:a5:28:cc:4a:e7:ab:ca:da:ca:a6:43:0d:01:
d0:af:a5:ed:4b:08:f2:29:16:27:79:e0:1a:23:7e:
82:f7:d3:01:e1:80:3b:0a:32:c1:c9:fb:12:78:d5:
29:43:60:23:4d:fe:b0:fa:8e:c6:0e:73:ff:dd:c5:
46:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DF:3F:48:91:F3:AF:C8:8E:D5:A3:E6:A4:24:89:A2:38:87:B8:8F
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/vd8_SJHzr8iO1aPmpCSJojiHuI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.219.0/24
93.89.221.0-93.89.222.255
Signature Algorithm: sha256WithRSAEncryption
ae:11:38:60:4f:73:02:d9:fd:6d:5a:0e:e9:a5:10:0b:24:7e:
b2:bd:5d:af:62:21:27:63:ea:7b:03:87:cb:69:a1:cf:ba:d6:
9f:ce:21:f2:a2:2e:92:66:87:65:43:25:4e:45:53:89:25:e9:
19:e8:25:f4:1b:27:fe:7d:dd:75:ee:2b:04:aa:48:03:18:d4:
04:cd:d2:06:df:0d:77:a3:cd:32:4d:86:24:9e:3f:5f:b5:b4:
8d:0f:85:30:6d:be:a5:5d:c2:b1:23:e5:e3:e3:75:b0:70:24:
a7:94:7a:b0:a3:34:06:a5:62:0c:4c:b7:26:99:06:f7:8b:81:
51:09:35:23:a9:3e:8a:2f:82:4b:22:5e:dd:36:8e:a2:0e:25:
c2:3c:04:f5:b3:89:33:f6:2e:e8:56:a7:a5:84:7e:a6:60:cc:
e1:62:78:dc:8b:55:4b:43:c9:be:50:a0:ba:17:d9:72:46:84:
71:c5:48:4d:91:2f:4f:53:fa:47:80:46:92:3c:e9:a4:80:98:
39:bc:a4:f3:80:4e:4a:1f:6c:83:2f:16:b8:e4:11:fb:6c:6c:
05:41:a9:82:e7:8d:a9:dc:11:cd:3b:c6:e8:81:62:f5:0c:3d:
16:6f:4f:ce:a3:e0:f2:9f:2f:76:a0:16:5a:7e:94:31:63:0e:
d9:ed:c3:5d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:28:02 2025 by rpki-client