Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8TAz8-X88al7kYrqd7rmUo1EW3Q.roa
File: 8TAz8-X88al7kYrqd7rmUo1EW3Q.roa (raw, json)
Hash identifier: Sm2jy9P1JAcH6XLZjC8e7XxP0LpcxUaeB1g/P/u6i+E=
Subject key identifier: F1:30:33:F3:E5:FC:F1:A9:7B:91:8A:EA:77:BA:E6:52:8D:44:5B:74
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0199EC0030B4431D73B9C22549055AD39C43
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8TAz8-X88al7kYrqd7rmUo1EW3Q.roa
Signing time: Thu 16 Oct 2025 07:50:59 +0000
ROA not before: Thu 16 Oct 2025 07:50:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 77.107.82.0/24 maxlen: 24
81.168.109.0/24 maxlen: 24
82.153.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ec:00:30:b4:43:1d:73:b9:c2:25:49:05:5a:d3:9c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 16 07:50:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f13033f3e5fcf1a97b918aea77bae6528d445b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:44:cb:86:bb:4b:c1:e3:29:29:39:4a:1e:eb:
15:e6:e2:e7:71:c4:a3:ee:e3:a9:be:2e:16:67:d5:
90:b8:28:1c:16:01:0b:d4:0f:e1:d8:f7:98:4b:05:
c7:79:bb:9d:07:57:34:5e:1e:e2:fd:ec:25:7a:21:
da:20:b8:05:2c:db:41:55:87:8c:54:f3:6e:95:54:
43:83:e0:cb:c2:79:6f:e4:db:60:00:e6:c5:d3:19:
ee:df:13:62:66:a3:14:c5:eb:9c:ea:9c:ad:4e:a9:
e7:83:4a:08:8b:14:6e:12:ef:a3:4d:53:34:90:f9:
63:30:7a:48:35:aa:15:5b:5d:8d:a7:b0:d3:00:c9:
87:2e:66:f0:0c:02:a0:47:5c:e8:e6:a5:a6:0d:8f:
5d:17:fa:e9:e4:6e:b2:f5:cc:da:c6:1b:9e:27:0b:
a8:ca:a2:c0:19:ed:e4:66:14:f3:9d:f3:9e:28:15:
4c:24:0f:06:f8:29:83:9e:da:60:e5:28:39:b9:b9:
76:e8:b4:1c:c5:85:81:36:76:53:e9:41:a5:89:41:
02:e8:ad:4b:8a:8a:4e:16:57:2c:8a:b9:ff:cb:df:
0c:d1:dc:d7:a7:43:23:85:65:e8:74:55:79:21:85:
e0:f3:68:14:94:d8:c9:c0:aa:b0:0d:a9:ac:d5:7c:
ab:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:30:33:F3:E5:FC:F1:A9:7B:91:8A:EA:77:BA:E6:52:8D:44:5B:74
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8TAz8-X88al7kYrqd7rmUo1EW3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.107.82.0/24
81.168.109.0/24
82.153.216.0/24
Signature Algorithm: sha256WithRSAEncryption
54:af:13:d9:64:67:c5:0d:ed:c0:52:d0:36:a4:a7:f2:bd:03:
e5:1e:6d:14:96:bd:8b:da:2e:59:7c:77:f7:3b:00:e4:7f:1a:
2a:78:91:b1:52:1d:15:aa:a7:48:ad:77:59:78:22:93:b5:3c:
09:00:68:d4:be:f5:07:de:11:eb:f8:1e:56:06:f1:45:bf:7a:
fd:74:f5:53:1a:45:42:05:df:bf:88:5d:30:48:5f:4d:97:d8:
cb:9f:38:75:10:87:30:22:70:6c:ab:34:3e:29:83:57:58:28:
84:7a:6e:44:11:94:95:da:b2:8f:b0:c5:43:9f:4b:2d:1b:65:
bb:47:95:30:79:0a:54:57:e8:af:99:80:2b:96:91:06:a9:e8:
1d:b5:da:e0:df:06:1a:bd:ed:c9:21:ad:82:8a:e3:ec:44:02:
1a:d3:8b:85:c5:89:91:98:3c:e6:02:43:65:56:43:4c:14:2b:
ca:db:61:e8:e1:6a:31:27:35:0e:c3:b9:4d:33:ee:b8:31:47:
cb:62:87:98:33:51:8c:2b:74:c5:7a:31:fb:51:80:f3:77:be:
49:78:89:f1:9c:57:88:03:ab:13:a4:44:d0:ea:83:af:74:3d:
8f:6a:60:32:b3:a8:ed:ab:1b:6c:ba:cb:30:6f:e6:ca:c8:fe:
b3:b0:0e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:09 2025 by rpki-client