Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8TPnUlyc05gbjSEZXyjCFL9rzNU.roa
File: 8TPnUlyc05gbjSEZXyjCFL9rzNU.roa (raw, json)
Hash identifier: S3PSzOStk9mhiTfaKQ57CFXRl7EaZFXC01naGdG+Gvg=
Subject key identifier: F1:33:E7:52:5C:9C:D3:98:1B:8D:21:19:5F:28:C2:14:BF:6B:CC:D5
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0199E50ED3A32FD961CB553F3EC9B2AE32B2
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8TPnUlyc05gbjSEZXyjCFL9rzNU.roa
Signing time: Tue 14 Oct 2025 23:29:38 +0000
ROA not before: Tue 14 Oct 2025 23:29:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213520
IP address blocks: 64.188.68.0/22 maxlen: 24
64.188.74.0/24 maxlen: 24
64.188.104.0/22 maxlen: 24
77.239.120.0/23 maxlen: 24
144.31.16.0/23 maxlen: 24
144.31.18.0/23 maxlen: 24
144.31.138.0/23 maxlen: 24
144.31.196.0/23 maxlen: 24
193.23.197.0/24 maxlen: 24
193.23.210.0/23 maxlen: 24
193.23.218.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e5:0e:d3:a3:2f:d9:61:cb:55:3f:3e:c9:b2:ae:32:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 14 23:29:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f133e7525c9cd3981b8d21195f28c214bf6bccd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f7:eb:de:6c:01:79:56:82:4c:05:bc:3e:60:
cb:db:6d:cd:b5:37:9f:07:82:c5:60:32:21:e4:fa:
73:fd:4b:b0:14:10:19:eb:3d:82:b1:03:b9:a9:8c:
de:24:b3:ec:88:47:c6:20:f5:26:5c:80:2d:2b:3a:
f5:95:f8:ee:65:29:38:7d:8a:ea:8f:04:80:75:5d:
60:f3:75:44:25:80:91:06:2a:0b:2b:34:8d:1f:3f:
51:c0:36:52:b1:57:92:0e:3b:e4:c2:7c:b5:67:6a:
9f:83:d3:00:aa:a4:30:68:65:67:27:c2:66:89:40:
9c:39:3d:c6:e7:9c:3e:09:9b:c8:6a:61:fd:04:2d:
8a:b3:18:3a:f6:29:08:cd:51:ec:30:82:f2:54:85:
3b:cb:cc:6b:db:ce:7a:f9:8d:83:2e:11:40:8c:97:
a5:0c:5b:fc:69:9d:0d:d4:4b:f0:d2:55:d0:ef:02:
47:14:2b:5f:dc:0b:33:a8:b6:8a:43:f1:c1:e8:22:
c8:10:16:fc:b8:0f:5b:fe:b8:90:a8:e2:b5:fe:6a:
19:35:5d:24:29:32:b2:11:53:93:f5:67:5d:41:7b:
6a:24:5d:10:d7:e8:6b:1f:cc:ed:f2:57:00:4e:14:
6f:a3:ac:8a:a9:2f:a6:4a:05:ca:72:ed:c5:0b:e2:
ef:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:33:E7:52:5C:9C:D3:98:1B:8D:21:19:5F:28:C2:14:BF:6B:CC:D5
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8TPnUlyc05gbjSEZXyjCFL9rzNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.188.68.0/22
64.188.74.0/24
64.188.104.0/22
77.239.120.0/23
144.31.16.0/22
144.31.138.0/23
144.31.196.0/23
193.23.197.0/24
193.23.210.0/23
193.23.218.0/23
Signature Algorithm: sha256WithRSAEncryption
61:17:8f:86:c4:b5:56:5a:c3:e6:93:3d:29:26:bd:af:5e:bb:
53:06:4c:f2:01:4d:e6:f9:c3:ed:69:c4:9f:da:6a:eb:7f:5d:
fe:75:2e:6c:5c:90:a4:43:b9:b8:fd:c9:dc:2a:28:d5:e9:73:
f4:be:7f:f1:05:1d:47:22:d7:47:7c:b0:21:36:16:25:21:5f:
cf:65:a4:10:d2:b9:f6:20:07:03:c3:c7:b6:a2:f4:a7:bc:a5:
fd:b3:92:55:34:f1:3d:fb:a9:e9:2a:5e:d8:ca:1b:9e:e0:56:
44:37:d5:df:70:34:74:d0:3d:34:de:af:c6:2d:c3:3a:7e:ed:
9e:7f:2e:5c:e9:ec:d9:97:47:b1:01:e3:5d:3a:1c:ee:c5:4c:
66:99:88:cb:61:5f:d3:1f:47:ce:f2:7f:af:e7:8f:97:97:cb:
97:87:5f:cb:d9:93:65:6c:e7:32:db:35:76:52:83:07:61:df:
92:e9:a3:81:57:ee:80:86:e4:8a:9c:a7:f9:64:11:e7:e2:01:
21:ca:89:9e:94:cd:57:22:93:ac:5d:80:85:37:70:5f:65:72:
f7:2a:6f:65:79:3b:27:92:51:fe:54:18:f9:5e:17:7c:84:f9:
e5:f2:3d:ef:27:2b:f5:d7:8a:b1:c9:23:9b:e2:8b:d9:0c:a9:
9b:50:cc:5a
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAZnlDtOjL9lhy1U/PsmyrjKyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjUxMDE0MjMyOTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTMzZTc1MjVjOWNkMzk4MWI4ZDIxMTk1ZjI4YzIxNGJmNmJjY2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Pfr3mwBeVaCTAW8PmDL223NtTef
B4LFYDIh5Ppz/UuwFBAZ6z2CsQO5qYzeJLPsiEfGIPUmXIAtKzr1lfjuZSk4fYrq
jwSAdV1g83VEJYCRBioLKzSNHz9RwDZSsVeSDjvkwny1Z2qfg9MAqqQwaGVnJ8Jm
iUCcOT3G55w+CZvIamH9BC2Ksxg69ikIzVHsMILyVIU7y8xr2856+Y2DLhFAjJel
DFv8aZ0N1Evw0lXQ7wJHFCtf3AszqLaKQ/HB6CLIEBb8uA9b/riQqOK1/moZNV0k
KTKyEVOT9WddQXtqJF0Q1+hrH8zt8lcAThRvo6yKqS+mSgXKcu3FC+LvBwIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFPEz51JcnNOYG40hGV8owhS/a8zVMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvOFRQblVseWMwNWdialNFWlh5akNGTDlyek5VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQCQLxEAwQA
QLxKAwQCQLxoAwQBTe94AwQCkB8QAwQBkB+KAwQBkB/EAwQAwRfFAwQBwRfSAwQB
wRfaMA0GCSqGSIb3DQEBCwUAA4IBAQBhF4+GxLVWWsPmkz0pJr2vXrtTBkzyAU3m
+cPtacSf2mrrf13+dS5sXJCkQ7m4/cncKijV6XP0vn/xBR1HItdHfLAhNhYlIV/P
ZaQQ0rn2IAcDw8e2ovSnvKX9s5JVNPE9+6npKl7Yyhue4FZEN9XfcDR00D003q/G
LcM6fu2efy5c6ezZl0exAeNdOhzuxUxmmYjLYV/TH0fO8n+v54+Xl8uXh1/L2ZNl
bOcy2zV2UoMHYd+S6aOBV+6AhuSKnKf5ZBHn4gEhyomelM1XIpOsXYCFN3BfZXL3
Km9leTsnklH+VBj5Xhd8hPnl8j3vJyv114qxySOb4ovZDKmbUMxa
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:22:11 2025 by rpki-client