Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/8SwD2syCQhmofhgov7byX9Itmmw.roa
File: 8SwD2syCQhmofhgov7byX9Itmmw.roa (raw, json)
Hash identifier: cUvCnHiFH7D4J+0OEABbyLy6H+sXz0JcuvR63cJNE18=
Subject key identifier: F1:2C:03:DA:CC:82:42:19:A8:7E:18:28:BF:B6:F2:5F:D2:2D:9A:6C
Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial: 0198CCD8E8DDB32320C11F4D90DDA23A3986
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/8SwD2syCQhmofhgov7byX9Itmmw.roa
Signing time: Thu 21 Aug 2025 13:37:04 +0000
ROA not before: Thu 21 Aug 2025 13:37:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14789
IP address blocks: 141.101.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cc:d8:e8:dd:b3:23:20:c1:1f:4d:90:dd:a2:3a:39:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Validity
Not Before: Aug 21 13:37:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f12c03dacc824219a87e1828bfb6f25fd22d9a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0e:5d:6b:53:3e:d8:cb:f8:d8:b9:b9:b0:1c:
35:21:c5:ad:87:97:06:a3:01:77:7d:0f:72:f4:c7:
e5:8a:11:e6:1f:ca:11:30:0a:14:56:99:02:06:6b:
28:e0:24:5e:ee:ad:4f:56:04:75:c3:47:94:80:51:
2c:3b:ff:34:f9:fe:e3:b2:f6:c5:6e:30:b0:9c:a8:
00:2d:05:1e:63:83:5b:df:92:b6:1a:70:db:2e:a5:
b3:f6:79:7e:56:88:2a:4c:6b:c2:81:39:c7:01:fb:
02:2a:b0:03:8d:80:ff:1a:74:83:a2:45:d3:c7:21:
38:b0:b2:f3:dd:7d:2b:f0:f8:61:2f:62:d2:2d:91:
84:be:99:23:8c:29:20:8d:6d:01:08:20:44:c1:80:
f1:41:86:ad:9c:3b:59:b8:b0:ef:2c:f8:77:41:1d:
9a:98:4f:e5:24:98:7c:80:bc:73:dd:54:b9:1f:c5:
3a:79:d5:39:cd:6a:4b:08:e9:c0:c8:97:c8:d2:8f:
a2:78:bb:3e:ed:63:41:73:34:ec:7f:81:2f:e1:49:
d2:f3:c9:56:74:b4:ed:05:3c:83:b2:90:3f:b8:ef:
67:a6:04:ca:37:c4:2f:6b:e4:ab:00:de:85:c7:68:
fb:44:7e:b9:32:67:4a:32:2c:8f:bf:fb:f5:29:fc:
a3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2C:03:DA:CC:82:42:19:A8:7E:18:28:BF:B6:F2:5F:D2:2D:9A:6C
X509v3 Authority Key Identifier:
keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/8SwD2syCQhmofhgov7byX9Itmmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.108.0/24
Signature Algorithm: sha256WithRSAEncryption
79:00:59:ab:e8:bf:51:28:eb:4a:c5:11:92:15:d1:d7:7d:65:
02:f6:23:21:5c:51:8e:5e:2e:f4:54:7b:54:5d:31:f8:41:9a:
1e:b5:9c:7c:29:d5:ae:45:fb:64:60:68:c2:b2:ae:c1:fb:18:
f8:62:05:01:f9:49:e1:b4:84:5d:76:8d:82:cd:20:5b:89:a6:
36:b4:6b:e7:8e:dc:d1:28:4b:7f:27:b1:0f:82:ce:9a:96:44:
b1:35:c4:74:7b:80:5d:e2:bd:a2:54:10:cf:6e:d7:68:bb:92:
ac:36:e2:39:db:6f:6b:e5:77:08:3c:9f:c1:42:86:65:17:36:
47:23:7f:0e:59:bb:dc:0b:ac:17:27:0e:fe:58:e6:64:bf:57:
d2:11:ab:39:dd:39:db:62:09:c2:6f:cd:5f:b3:fd:fd:0e:9b:
7c:60:f9:1d:7a:29:73:89:62:69:c1:bc:c2:0c:e5:79:04:45:
70:a8:98:6a:1b:1b:75:8a:d6:63:43:31:1b:7a:19:bf:55:88:
40:c3:93:d7:67:9a:48:dd:dc:38:94:ad:52:78:33:0a:32:85:
73:de:32:de:5e:e5:78:d3:30:f1:45:3f:1b:41:30:5b:c2:00:
e9:4b:d7:87:3e:d5:84:94:20:0e:74:c9:49:f5:cb:39:c2:52:
6b:49:cd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:19:37 2025 by rpki-client