Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/8uoobD-uNsoIUa3wePqJLnyhcpo.roa
File: 8uoobD-uNsoIUa3wePqJLnyhcpo.roa (raw, json)
Hash identifier: O0gO7wKip3iHzyPxgcMRO0gg6URqBUsF4wabpY8lFzs=
Subject key identifier: F2:EA:28:6C:3F:AE:36:CA:08:51:AD:F0:78:FA:89:2E:7C:A1:72:9A
Certificate issuer: /CN=2f6dbc6ae0b58a11731f219eda022471d1e11edb
Certificate serial: 0199DE10F8D0AC43A2AA79160586FEE1B783
Authority key identifier: 2F:6D:BC:6A:E0:B5:8A:11:73:1F:21:9E:DA:02:24:71:D1:E1:1E:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/8uoobD-uNsoIUa3wePqJLnyhcpo.roa
Signing time: Mon 13 Oct 2025 14:54:38 +0000
ROA not before: Mon 13 Oct 2025 14:54:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201933
IP address blocks: 91.193.116.0/22 maxlen: 22
213.193.250.0/24 maxlen: 24
2a06:40c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:de:10:f8:d0:ac:43:a2:aa:79:16:05:86:fe:e1:b7:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6dbc6ae0b58a11731f219eda022471d1e11edb
Validity
Not Before: Oct 13 14:54:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2ea286c3fae36ca0851adf078fa892e7ca1729a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:30:66:0c:b0:8b:c1:1b:79:19:11:01:63:11:
3f:db:61:96:1e:c8:32:f0:45:f2:eb:84:5f:5e:31:
10:f6:a0:fc:40:22:ec:e1:60:e7:e8:c6:a2:50:08:
f7:fe:f8:16:a1:d9:df:7e:da:aa:cb:3a:d4:b6:8e:
51:df:8b:a1:b8:ec:32:9a:06:38:3e:4b:77:73:4c:
10:8a:61:e9:0e:0a:16:e6:6c:22:c7:84:5c:bf:78:
2a:c2:e0:d1:25:6d:f1:26:4a:0d:e7:9d:e4:23:d0:
fa:d5:7f:e3:28:ab:42:3f:50:9d:1c:0e:2f:c9:ff:
90:04:96:4c:8b:8d:3a:dc:33:29:67:e3:d8:fd:e7:
72:98:4d:0f:3c:d6:29:b2:44:2d:42:9e:d5:0c:14:
55:a6:bc:66:b3:a9:97:87:86:9a:6a:b2:79:1b:4c:
69:19:6b:65:7c:49:d3:73:b4:67:8b:a7:f4:49:a1:
1f:b4:16:7b:48:1c:37:4b:08:6f:6e:3a:29:e3:7c:
c8:27:a1:7a:b5:ed:ad:30:4b:fd:75:2f:09:4d:ef:
90:e4:f5:e1:55:91:40:2e:82:87:cc:d0:93:3b:ac:
ac:69:f3:fa:3d:9d:fb:d7:72:8c:ee:31:c3:e0:8d:
32:49:7a:7e:b0:7c:18:b7:58:2a:0d:a3:4e:c2:a1:
4c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:EA:28:6C:3F:AE:36:CA:08:51:AD:F0:78:FA:89:2E:7C:A1:72:9A
X509v3 Authority Key Identifier:
keyid:2F:6D:BC:6A:E0:B5:8A:11:73:1F:21:9E:DA:02:24:71:D1:E1:1E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/8uoobD-uNsoIUa3wePqJLnyhcpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.116.0/22
213.193.250.0/24
IPv6:
2a06:40c0::/29
Signature Algorithm: sha256WithRSAEncryption
8e:8d:72:f4:d4:09:65:cc:a9:fa:91:69:8f:d4:c3:af:1e:66:
56:80:3d:fa:ad:5c:bf:67:17:64:e6:25:7d:d9:aa:ca:e6:cf:
aa:8b:22:99:4f:f9:4c:a4:b3:7c:bd:93:6e:5f:56:d9:eb:2f:
77:2a:d4:f8:07:34:41:c9:a8:6a:6d:a0:4f:7a:d0:c4:94:74:
a2:e2:f5:7a:22:8e:5f:a2:ae:ae:20:66:c1:51:38:33:19:da:
46:ef:81:f9:5c:ee:36:c2:9b:6e:f6:39:09:00:76:89:35:a0:
f4:40:03:98:09:0a:37:c1:55:46:56:c5:31:00:17:df:b9:91:
d7:0b:d2:df:c0:35:98:57:00:33:8a:49:64:62:15:85:ce:ab:
aa:c6:1c:00:b7:fb:cd:e4:be:cb:cb:80:34:d7:32:82:af:75:
72:25:a7:58:2f:d1:02:ed:9b:7b:a9:d8:49:7b:31:f5:e2:06:
cf:62:46:35:14:58:a5:ca:a0:ac:47:bc:d2:ac:24:59:ea:fd:
3d:36:94:32:ef:8f:5d:2c:30:6f:58:7a:9f:eb:54:b7:84:f2:
79:2b:6d:6c:71:71:d8:d0:52:2a:0a:e3:70:1d:99:54:4c:fe:
4d:e9:d1:ae:7d:10:51:eb:27:74:8a:4c:03:9b:62:5d:e9:4a:
53:71:7c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:29:47 2025 by rpki-client