Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/Ex2R8TC5ca7BapiGbOlEw7RTF7Y.roa
File: Ex2R8TC5ca7BapiGbOlEw7RTF7Y.roa (raw, json)
Hash identifier: Zmas/V+oKAZuTjJ6fOsrkdvL5jU6mJ35z5uKhHphtzs=
Subject key identifier: 13:1D:91:F1:30:B9:71:AE:C1:6A:98:86:6C:E9:44:C3:B4:53:17:B6
Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520
Certificate serial: 01992DE0B50E9553C845332888B29A530C3D
Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/Ex2R8TC5ca7BapiGbOlEw7RTF7Y.roa
Signing time: Tue 09 Sep 2025 09:48:44 +0000
ROA not before: Tue 09 Sep 2025 09:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53356
IP address blocks: 80.254.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:e0:b5:0e:95:53:c8:45:33:28:88:b2:9a:53:0c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520
Validity
Not Before: Sep 9 09:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=131d91f130b971aec16a98866ce944c3b45317b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:43:15:96:b8:f0:a4:ad:ba:e2:b0:d1:4c:e0:
0a:03:78:4f:f8:2d:a3:c9:e8:5f:3c:1e:be:05:f1:
b3:93:78:93:2d:5b:a2:0a:bb:57:d0:b5:99:6c:67:
e5:6f:35:4d:7d:7a:d8:b2:13:96:e7:41:cb:ba:e7:
d1:bd:fc:1b:81:d6:55:c8:72:aa:fe:66:93:08:7e:
ad:48:d3:9e:7d:0e:b2:42:b0:dc:f9:81:78:d5:4f:
a7:26:e6:f3:88:9e:55:7e:11:f8:2f:ed:8e:39:2a:
07:8b:68:d5:88:d6:93:98:e3:fd:37:e3:a5:9f:39:
7b:cd:08:19:e0:14:f3:af:97:b7:0e:72:ba:f6:c8:
80:98:c8:04:a8:de:c4:1e:6c:7d:55:39:18:20:b1:
cc:96:d8:5c:a7:3f:74:4d:dc:1f:58:6e:bd:7e:0b:
c1:b9:8b:69:4f:48:5c:89:fd:30:39:81:d8:e9:e9:
54:b2:93:ae:83:d6:5d:5c:3a:49:e3:fc:d7:f0:00:
05:be:01:45:e7:c2:b6:9e:3b:d6:e4:22:ac:16:f3:
47:ec:aa:bb:a1:e6:ad:7d:c1:b8:70:06:e7:fa:dc:
38:62:1a:38:d4:0b:37:ae:cc:2c:6d:45:ed:9f:b9:
8d:66:90:5e:6c:8b:9b:03:2c:20:52:7b:8d:5a:9d:
24:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1D:91:F1:30:B9:71:AE:C1:6A:98:86:6C:E9:44:C3:B4:53:17:B6
X509v3 Authority Key Identifier:
keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/Ex2R8TC5ca7BapiGbOlEw7RTF7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.254.236.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:43:4c:86:b9:0b:2d:ff:ed:54:0b:e1:b9:b8:38:55:90:7a:
1b:35:a6:22:12:bc:ea:94:94:ff:dc:97:0f:31:44:82:4f:a4:
9f:b7:df:23:c4:c2:74:e4:06:07:28:f3:91:66:97:2a:f4:a9:
6e:18:09:34:eb:5f:8e:d8:24:28:08:fc:86:d8:63:95:30:97:
29:55:69:4c:26:f1:20:03:c6:fa:8a:18:88:4f:77:11:84:8f:
3b:e9:f1:40:05:da:5f:9c:28:45:ed:a5:61:55:ef:75:70:27:
e3:90:ac:1c:9f:e7:fa:18:6f:1e:88:86:23:c9:0f:73:12:92:
85:c9:d7:f5:08:9b:b7:2d:b4:80:1d:ac:b4:e9:09:04:88:d5:
d5:f4:19:b6:4b:56:dd:ac:86:4b:e5:79:fa:b1:bd:39:64:4a:
1f:62:20:75:d8:3d:29:cd:da:5c:57:1a:b4:8b:b7:a6:64:58:
9f:47:de:61:9d:dd:f1:c0:6c:d8:db:2b:3e:95:b5:44:dd:5e:
41:40:8d:2c:23:16:d3:ea:88:50:4a:db:29:26:f7:b5:ea:94:
d9:4e:8f:54:7d:04:fa:2a:a5:77:4b:08:9a:54:e4:ac:de:5a:
49:a9:5c:85:49:85:a2:b0:10:00:fc:f9:c1:2b:72:63:eb:67:
a0:33:bf:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZkt4LUOlVPIRTMoiLKaUww9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNmM2NjBiMzBmNTY5MmIyYjE2ZTI4OWIyNDkwMWM1MThm
ZGE1MjAwHhcNMjUwOTA5MDk0ODQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzFkOTFmMTMwYjk3MWFlYzE2YTk4ODY2Y2U5NDRjM2I0NTMxN2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkMVlrjwpK264rDRTOAKA3hP+C2j
yehfPB6+BfGzk3iTLVuiCrtX0LWZbGflbzVNfXrYshOW50HLuufRvfwbgdZVyHKq
/maTCH6tSNOefQ6yQrDc+YF41U+nJubziJ5VfhH4L+2OOSoHi2jViNaTmOP9N+Ol
nzl7zQgZ4BTzr5e3DnK69siAmMgEqN7EHmx9VTkYILHMlthcpz90TdwfWG69fgvB
uYtpT0hcif0wOYHY6elUspOug9ZdXDpJ4/zX8AAFvgFF58K2njvW5CKsFvNH7Kq7
oeatfcG4cAbn+tw4Yho41As3rswsbUXtn7mNZpBebIubAywgUnuNWp0kUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBMdkfEwuXGuwWqYhmzpRMO0Uxe2MB8GA1UdIwQY
MBaAFBJsZgsw9WkrKxbiibJJAcUY/aUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjIt
NDM4YWNiNzJmYzViLzEvRXgyUjhUQzVjYTdCYXBpR2JPbEV3N1JURjdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjItNDM4YWNiNzJmYzVi
LzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUP7sMA0G
CSqGSIb3DQEBCwUAA4IBAQCiQ0yGuQst/+1UC+G5uDhVkHobNaYiErzqlJT/3JcP
MUSCT6Sft98jxMJ05AYHKPORZpcq9KluGAk061+O2CQoCPyG2GOVMJcpVWlMJvEg
A8b6ihiIT3cRhI876fFABdpfnChF7aVhVe91cCfjkKwcn+f6GG8eiIYjyQ9zEpKF
ydf1CJu3LbSAHay06QkEiNXV9Bm2S1bdrIZL5Xn6sb05ZEofYiB12D0pzdpcVxq0
i7emZFifR95hnd3xwGzY2ys+lbVE3V5BQI0sIxbT6ohQStspJve16pTZTo9UfQT6
KqV3SwiaVOSs3lpJqVyFSYWisBAA/PnBK3Jj62egM79V
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:18:35 2025 by rpki-client