Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/C0l1kbYeZRM84TKToVwBlk7pBo4.roa
File: C0l1kbYeZRM84TKToVwBlk7pBo4.roa (raw, json)
Hash identifier: ICfWfDWeurFnZl2wkXnfN6jvCsTCoCZA5TA91nRjfW4=
Subject key identifier: 0B:49:75:91:B6:1E:65:13:3C:E1:32:93:A1:5C:01:96:4E:E9:06:8E
Certificate issuer: /CN=93db7a342cd9392efa5cd33894741ca8a5b4f42b
Certificate serial: 0198A8F6832C6DB53B40F5D722327F4B1B6D
Authority key identifier: 93:DB:7A:34:2C:D9:39:2E:FA:5C:D3:38:94:74:1C:A8:A5:B4:F4:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9t6NCzZOS76XNM4lHQcqKW09Cs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/C0l1kbYeZRM84TKToVwBlk7pBo4.roa
Signing time: Thu 14 Aug 2025 14:23:04 +0000
ROA not before: Thu 14 Aug 2025 14:23:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210321
IP address blocks: 185.242.248.0/22 maxlen: 24
185.242.248.0/24 maxlen: 24
185.242.249.0/24 maxlen: 24
185.242.250.0/24 maxlen: 24
185.242.251.0/24 maxlen: 24
2a0c:f780::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9t6NCzZOS76XNM4lHQcqKW09Cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a8:f6:83:2c:6d:b5:3b:40:f5:d7:22:32:7f:4b:1b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93db7a342cd9392efa5cd33894741ca8a5b4f42b
Validity
Not Before: Aug 14 14:23:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b497591b61e65133ce13293a15c01964ee9068e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:43:3d:8e:58:34:04:7d:7d:87:ba:f9:6a:ad:
28:b8:16:9a:93:a9:c3:d6:6d:b9:fa:f0:be:29:81:
ff:4e:e5:1d:77:75:4d:12:af:94:b9:e3:7a:9b:e5:
e7:23:c6:bb:a7:43:a7:c0:11:40:ca:93:9e:10:6e:
e4:e2:b0:dd:5e:90:5f:4d:cd:f3:ec:77:61:c9:82:
a7:78:04:c9:19:f0:4d:64:2f:31:82:2c:61:23:a1:
2d:4a:d0:37:8b:65:4c:fb:e1:df:a6:2a:92:53:fb:
7d:89:50:8f:41:f8:43:08:86:aa:3b:34:97:3e:6c:
33:d7:08:c3:ac:00:e8:4a:e0:cb:04:72:b4:4d:d0:
f7:cf:89:ad:81:0d:b4:cf:59:64:93:d0:c6:4a:10:
91:08:7a:49:3c:21:88:c6:ab:3e:97:a4:2e:10:3c:
e1:7b:19:23:3b:b5:98:9b:4c:c5:55:85:15:b7:c6:
d5:22:cd:92:f6:ad:e8:c7:e9:d3:17:0c:b3:6b:aa:
9b:e4:be:8f:db:1b:2e:62:d0:7d:3b:43:35:5b:40:
be:ec:0d:73:9d:02:7e:6a:8b:a6:21:c5:5a:5a:bf:
ad:f2:b8:47:4f:77:a6:a6:de:9f:d0:dc:9a:21:a5:
3c:f5:d9:66:8b:51:52:6e:cc:1c:8a:6c:a0:15:59:
dc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:49:75:91:B6:1E:65:13:3C:E1:32:93:A1:5C:01:96:4E:E9:06:8E
X509v3 Authority Key Identifier:
keyid:93:DB:7A:34:2C:D9:39:2E:FA:5C:D3:38:94:74:1C:A8:A5:B4:F4:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9t6NCzZOS76XNM4lHQcqKW09Cs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/C0l1kbYeZRM84TKToVwBlk7pBo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.248.0/22
IPv6:
2a0c:f780::/29
Signature Algorithm: sha256WithRSAEncryption
8e:1a:86:96:9b:46:9f:2d:24:a4:14:e6:2c:f4:c1:68:c0:44:
61:a9:bb:d1:15:f2:5c:48:ed:05:3e:d5:7a:cc:61:1a:74:03:
fe:29:cb:8e:06:19:bb:da:6d:da:65:81:72:03:e5:d5:36:55:
1a:96:f8:29:21:e0:7d:d2:c4:ab:1d:e2:9e:4e:6f:31:0b:1b:
27:3c:aa:a7:b8:16:16:ad:c0:b0:a4:c1:9d:71:e2:2a:a3:45:
d7:b6:80:fa:33:53:d2:1d:89:67:23:80:c2:cc:bc:d2:62:52:
38:9a:f5:33:85:27:6e:ef:e4:42:15:f2:42:68:fb:d3:a9:59:
2b:ca:09:4d:cc:8b:a5:35:ca:cb:1c:0b:6c:14:29:5d:06:b0:
6d:7c:02:48:12:5a:09:bf:e7:fd:ab:5e:3a:1a:5b:3c:a9:62:
d7:b1:88:e4:b6:c6:02:82:20:46:d5:f9:44:d7:c9:ed:85:be:
45:f6:6b:f2:8d:77:da:d5:05:78:0f:af:c6:09:84:34:ef:12:
35:ed:a5:72:9a:d1:47:78:f0:91:b9:8a:67:77:2f:50:cd:1b:
d8:cc:45:21:a5:d5:ff:55:0b:13:6a:3c:7d:52:c0:00:32:86:
2b:7d:6c:5c:08:aa:81:18:75:2e:06:3a:4a:0c:81:95:08:d5:
25:2e:d6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:12:30 2025 by rpki-client