Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8dHPe2q4aDzFlLZETk9-GLjEfh4.roa
File: 8dHPe2q4aDzFlLZETk9-GLjEfh4.roa (raw, json)
Hash identifier: ZAVKV/Hm4NpbebilswOFZaoIYcZzC7RGM0vTJXqnuEA=
Subject key identifier: F1:D1:CF:7B:6A:B8:68:3C:C5:94:B6:44:4E:4F:7E:18:B8:C4:7E:1E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0199A648098E12F4EF6F21B60ED9884A24CD
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8dHPe2q4aDzFlLZETk9-GLjEfh4.roa
Signing time: Thu 02 Oct 2025 18:56:02 +0000
ROA not before: Thu 02 Oct 2025 18:56:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213887
IP address blocks: 185.126.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a6:48:09:8e:12:f4:ef:6f:21:b6:0e:d9:88:4a:24:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 2 18:56:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1d1cf7b6ab8683cc594b6444e4f7e18b8c47e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ea:08:dd:72:2a:c1:58:f0:d6:24:62:8a:72:
ec:cc:55:04:e9:bb:61:2d:b7:b1:74:b5:4c:d6:1b:
43:4a:8c:a5:f1:68:19:63:78:7d:61:8c:e1:0f:8b:
5f:00:d8:ac:5f:c9:f4:b5:9c:95:5d:c0:ed:82:9c:
f7:28:15:1b:ec:85:a9:6b:12:2a:d9:02:a5:5a:18:
cc:b4:f4:23:d8:5e:f5:0b:11:e9:bf:6e:e7:40:c2:
37:27:d4:88:92:0c:64:a1:32:8e:fa:65:ee:df:44:
3b:b5:9e:3f:37:be:a5:61:f0:11:c9:6b:28:a6:83:
46:ac:19:de:fb:cf:0b:22:43:bd:e8:da:5a:3e:c3:
c1:ee:38:c2:fe:fe:e2:a9:10:b4:21:85:5f:a5:22:
ef:81:1b:69:b3:ba:48:57:b1:30:a8:a3:89:f8:20:
33:9e:99:51:25:a2:6b:f5:a0:07:d4:2f:cf:7f:b5:
bd:41:5a:a6:40:8b:e2:1e:44:09:81:54:f0:3a:9d:
5d:27:e5:bd:ab:4b:16:a7:11:4f:9e:1d:41:d8:99:
5e:a2:1c:7c:26:6d:26:45:fb:ed:29:ec:73:d8:dd:
aa:5d:8e:4d:a3:16:86:7b:4e:13:ad:4e:81:d6:3c:
7d:23:20:8e:0b:d9:58:fa:82:7b:b8:36:ae:e0:fd:
a9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D1:CF:7B:6A:B8:68:3C:C5:94:B6:44:4E:4F:7E:18:B8:C4:7E:1E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/8dHPe2q4aDzFlLZETk9-GLjEfh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.67.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:f1:a7:e9:a5:e1:dc:af:56:b4:09:93:de:41:9d:5c:a9:07:
ec:d5:de:6b:df:7f:89:5f:8e:fa:6f:c2:aa:86:d8:b9:13:4e:
a5:e9:0d:58:05:e4:6c:b3:f9:9c:b6:aa:ab:32:2e:db:e8:20:
24:5f:25:42:35:04:8b:22:e2:4d:dc:d7:78:c7:4f:8d:da:eb:
cf:22:ed:5f:37:e0:0b:25:cf:3c:d7:08:3f:65:16:25:1e:de:
c0:fe:c1:17:d2:c7:26:0e:38:90:70:60:ac:08:ba:4b:b8:8d:
2b:b1:df:ff:77:d2:ae:96:70:ae:99:87:2a:fe:0f:2e:ad:25:
80:a5:ee:f7:a2:3b:fe:dd:d6:34:e8:40:94:59:23:7a:30:4d:
4d:27:5f:bf:82:34:a8:06:88:cb:ec:2e:c8:3e:ad:56:ea:88:
2a:2d:bf:f2:aa:76:fe:df:c9:93:26:2c:56:66:77:fa:f7:b8:
29:65:68:86:88:64:fc:b0:86:52:8b:a3:13:46:6e:73:fc:50:
33:7f:aa:46:e2:e2:58:48:b2:8d:67:b9:d0:d5:56:aa:c5:07:
fe:6f:a9:1f:41:60:b3:7f:72:22:99:df:bc:71:5b:9c:01:2e:
b2:99:1e:a4:6e:4b:f8:59:79:52:42:08:c5:72:47:a4:a1:ea:
3b:38:a1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:08:29 2025 by rpki-client