Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/8_gnS_gysL9vFXycvHFYUuT3eFQ.roa
File: 8_gnS_gysL9vFXycvHFYUuT3eFQ.roa (raw, json)
Hash identifier: fdIKsa34nJXAe2MSq8dUjvxc5//TDcQhR1zCGckQ59Y=
Subject key identifier: F3:F8:27:4B:F8:32:B0:BF:6F:15:7C:9C:BC:71:58:52:E4:F7:78:54
Certificate issuer: /CN=767eb661936dc95da3ecc4ca3eaf581389c0d855
Certificate serial: 0198C10AC0FE6651BA573C4782A1146A2A9C
Authority key identifier: 76:7E:B6:61:93:6D:C9:5D:A3:EC:C4:CA:3E:AF:58:13:89:C0:D8:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/8_gnS_gysL9vFXycvHFYUuT3eFQ.roa
Signing time: Tue 19 Aug 2025 06:36:04 +0000
ROA not before: Tue 19 Aug 2025 06:36:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39855
IP address blocks: 91.192.84.0/24 maxlen: 24
91.192.85.0/24 maxlen: 24
91.192.86.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Aug 2025 20:16:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c1:0a:c0:fe:66:51:ba:57:3c:47:82:a1:14:6a:2a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767eb661936dc95da3ecc4ca3eaf581389c0d855
Validity
Not Before: Aug 19 06:36:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3f8274bf832b0bf6f157c9cbc715852e4f77854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e7:32:96:bd:24:36:cd:4e:a3:f0:59:3e:20:
a9:4c:16:d5:99:e9:e2:35:8e:71:b5:23:6d:8e:cb:
1e:0b:e2:ae:8e:3f:ee:1f:e9:24:69:d6:4b:78:99:
3c:74:3a:0b:4b:41:36:f5:e3:1a:c2:b4:60:59:d9:
d7:2d:e7:94:f3:4b:30:25:e0:0e:ef:67:ea:1e:06:
90:e9:0e:e9:83:e4:85:3a:16:19:9b:34:13:20:f1:
2c:7c:ed:19:f1:5b:5a:8d:69:bd:40:3e:de:0f:6d:
e0:5d:42:29:c3:e4:e9:e9:44:73:31:2d:39:b6:b3:
d6:3a:3f:a6:d1:8c:0c:97:c9:af:90:4a:62:50:ea:
94:0a:39:22:22:f6:87:28:2e:ba:8d:3f:ec:00:90:
59:0b:b9:e3:e9:30:84:65:a5:d2:e8:ea:2a:1d:f8:
3d:b4:91:2c:56:8f:ab:55:9e:93:0d:01:ae:b7:e5:
ac:84:5e:98:c6:1c:6a:70:5e:08:b6:72:7f:09:3c:
95:83:f7:d9:b7:87:39:15:a3:31:8e:22:33:57:d3:
93:40:bd:b0:05:54:0e:a1:ff:39:c4:d7:c1:dd:ae:
71:3c:fa:16:7b:0f:07:17:75:b3:5f:ba:ed:80:26:
d1:58:6c:54:60:db:c8:85:7d:41:d9:7d:53:fa:1b:
18:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F8:27:4B:F8:32:B0:BF:6F:15:7C:9C:BC:71:58:52:E4:F7:78:54
X509v3 Authority Key Identifier:
keyid:76:7E:B6:61:93:6D:C9:5D:A3:EC:C4:CA:3E:AF:58:13:89:C0:D8:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/8_gnS_gysL9vFXycvHFYUuT3eFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.84.0/22
Signature Algorithm: sha256WithRSAEncryption
80:6c:3c:99:75:68:dc:2a:5c:f3:89:9d:95:21:ba:f0:a8:ac:
c3:64:bb:1b:a6:ca:31:3f:a3:e7:ff:50:fc:5f:6d:44:95:6b:
63:32:a7:e8:3f:81:3e:ca:9f:df:31:77:79:4b:3b:de:95:a5:
36:27:b6:7d:38:12:75:3b:73:b0:1b:97:8c:30:fa:89:08:0a:
df:ae:43:af:9b:b1:91:ad:73:46:d7:19:c8:17:85:80:98:93:
e4:13:c7:ae:aa:de:a4:10:00:a8:89:36:c4:19:a7:24:8b:e3:
1a:af:19:8f:77:43:c2:8d:96:83:f0:8d:4e:5b:74:4e:dd:ef:
af:72:21:4e:90:a7:64:f3:19:5e:59:80:9b:df:95:44:1a:01:
79:b4:f2:1c:7a:65:32:f3:ee:9f:69:f0:8a:65:01:43:84:ca:
87:25:4d:a3:a6:ea:e7:0a:8e:9d:ca:95:49:ae:42:fe:b0:6d:
5a:d3:03:6e:0f:63:62:5b:27:95:82:74:1c:bc:f9:16:b8:73:
da:1f:0e:b8:45:2f:a8:51:6c:1c:e3:24:59:32:c8:64:33:e7:
95:88:06:76:ee:d1:62:98:33:ee:23:2a:fa:a8:2f:f3:d8:1d:
3b:2e:9a:b9:c0:79:4b:06:4e:d4:c9:91:55:1b:29:e1:96:dc:
98:a0:ad:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 06:21:12 2025 by rpki-client