Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/n8kFpYK5vAUliCUKVkGE1lO3GRw.roa
File: n8kFpYK5vAUliCUKVkGE1lO3GRw.roa (raw, json)
Hash identifier: Z96EnFAF4yt8swnf5hBwaghwReAuU+3GPSRTdgiYz+8=
Subject key identifier: 9F:C9:05:A5:82:B9:BC:05:25:88:25:0A:56:41:84:D6:53:B7:19:1C
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 0198B54EEA646CA1325BAC73B43ADF5789DD
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/n8kFpYK5vAUliCUKVkGE1lO3GRw.roa
Signing time: Sat 16 Aug 2025 23:55:04 +0000
ROA not before: Sat 16 Aug 2025 23:55:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197537
IP address blocks: 178.255.246.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b5:4e:ea:64:6c:a1:32:5b:ac:73:b4:3a:df:57:89:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Aug 16 23:55:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fc905a582b9bc052588250a564184d653b7191c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:36:c6:e2:52:81:60:47:55:76:40:9f:51:5a:
20:7d:5b:43:fa:02:77:7b:23:a5:a4:00:d9:24:3b:
6e:e8:78:6e:a8:bb:1c:92:6f:66:99:ae:23:e3:c8:
cc:fa:eb:9a:3e:19:e0:73:1f:65:79:44:27:40:7a:
84:74:b9:f9:03:76:25:a2:9d:92:5b:60:1d:38:de:
1d:0c:da:46:1d:5a:7e:25:91:25:e7:97:86:d9:67:
53:80:b2:3d:64:fa:83:d0:e5:fe:4a:05:14:f3:15:
10:c4:be:3d:9a:d6:2e:03:eb:4e:be:2b:10:3e:22:
09:1b:44:31:3a:28:17:a4:c9:63:8b:72:80:3d:29:
ca:61:64:f3:58:0f:64:2b:90:1b:2b:26:ea:c5:c5:
d6:03:20:56:a7:6a:45:28:83:60:15:0c:cb:cf:a6:
c4:c2:53:3c:2f:67:c3:5b:cb:bf:c8:a5:ac:32:4b:
99:d1:ec:0f:ac:83:53:99:de:fd:7e:52:16:bf:37:
f6:65:4b:3c:1f:16:9e:97:4d:2f:f1:7c:ac:77:82:
8d:f1:53:96:4b:e1:b7:6f:39:1b:76:95:cc:09:ad:
71:e1:4f:f7:e2:1b:d5:05:83:b0:cc:4e:ad:83:b4:
cd:2d:aa:c9:c3:ee:e3:c3:1c:16:a4:44:0e:a9:a2:
0b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C9:05:A5:82:B9:BC:05:25:88:25:0A:56:41:84:D6:53:B7:19:1C
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/n8kFpYK5vAUliCUKVkGE1lO3GRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.255.246.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:72:40:1d:96:02:e2:87:44:10:f6:63:df:10:a3:c1:37:66:
27:27:9d:e9:f4:bc:42:b9:ae:fc:69:2e:ae:2c:18:69:4b:ee:
64:b8:cb:9e:d5:2f:d1:96:23:40:9d:b1:51:dd:cc:e2:55:34:
b9:c7:c9:1d:04:4e:18:44:1d:2b:0e:0f:40:51:79:e8:9a:7e:
99:3c:93:72:82:4e:85:cc:ab:4c:49:99:22:93:e7:1d:72:76:
7f:f7:ff:ab:13:a0:5c:14:d5:9f:11:42:46:e2:f6:a5:21:50:
b0:e7:6c:2a:d3:b7:aa:0f:fb:e1:98:46:22:e6:c2:f6:60:44:
92:9e:97:44:85:3d:b9:f9:6f:a1:8c:8a:1f:78:b7:fc:bc:0e:
c8:fb:1a:73:33:18:19:62:d2:7f:c1:38:82:ae:ad:6b:19:e5:
7c:82:b8:77:36:a9:74:5f:26:ec:62:90:4a:42:14:60:c3:78:
a3:a3:85:f0:2e:96:79:33:62:a6:44:2a:ba:f0:d3:35:2a:ba:
a7:a8:b2:0d:87:45:da:4c:b0:8a:8a:73:56:af:4c:fb:7c:6e:
6a:ed:ae:5e:ee:60:5d:6f:7f:29:90:f6:80:7e:02:f8:16:96:
1b:02:69:fc:5a:43:7e:92:ec:a1:3b:4b:7d:1d:a8:44:04:50:
8c:70:9d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:15:03 2025 by rpki-client