Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/8ts_D2EFuC5NIWyZTnZrG08-uDw.roa
File: 8ts_D2EFuC5NIWyZTnZrG08-uDw.roa (raw, json)
Hash identifier: uVBInuvlYFAla83X+x9R16IdCd5FnX0uzcyabx51Ha0=
Subject key identifier: F2:DB:3F:0F:61:05:B8:2E:4D:21:6C:99:4E:76:6B:1B:4F:3E:B8:3C
Certificate issuer: /CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Certificate serial: 0196AAE92DB6796E7261E33042B9BC2ADCD1
Authority key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/8ts_D2EFuC5NIWyZTnZrG08-uDw.roa
Signing time: Wed 07 May 2025 13:22:10 +0000
ROA not before: Wed 07 May 2025 13:22:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29286
IP address blocks: 84.22.86.0/24 maxlen: 24
128.140.128.0/20 maxlen: 20
185.23.96.0/23 maxlen: 23
185.23.99.0/24 maxlen: 24
213.180.225.0/24 maxlen: 24
213.180.226.0/24 maxlen: 24
213.180.228.0/24 maxlen: 24
213.180.229.0/24 maxlen: 24
213.180.230.0/24 maxlen: 24
213.180.247.0/24 maxlen: 24
213.180.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:e9:2d:b6:79:6e:72:61:e3:30:42:b9:bc:2a:dc:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Validity
Not Before: May 7 13:22:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2db3f0f6105b82e4d216c994e766b1b4f3eb83c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7e:21:8e:58:e0:38:3f:c1:da:54:38:92:ba:
38:16:24:8b:a8:38:06:8f:3b:99:48:20:4e:ca:f7:
5c:d9:75:d1:e9:5d:e5:40:f8:b0:d7:9e:14:77:6d:
50:47:d9:4f:f5:2f:ee:8e:96:f1:88:c5:b1:1f:cb:
4e:78:1f:ae:0d:06:8e:31:3a:f5:7d:7a:ee:14:94:
ff:c6:32:33:08:13:ce:a4:fe:4f:ac:6a:2e:65:62:
7e:ab:4d:ca:f1:6c:c1:67:a1:c4:79:c2:09:8a:96:
6f:d0:50:33:8d:9b:d2:72:d9:88:45:60:9d:8a:85:
fa:6f:28:49:90:b7:19:0a:af:d5:e7:7f:29:5e:8d:
98:e2:2f:ad:62:f2:21:dc:03:68:0a:07:3e:f5:c3:
ba:16:ff:e4:87:87:d0:06:87:c8:19:7c:7a:3c:b3:
36:3c:0a:f5:2c:4e:a7:b5:40:a1:c9:5c:25:3e:78:
24:f6:26:28:d4:52:6a:c4:67:00:59:c0:7e:6d:62:
a3:e4:ce:2f:97:dc:de:1f:82:f8:1d:3b:3c:cf:81:
58:c3:8a:ee:c4:46:41:88:fc:4c:b5:50:dd:a0:5f:
6c:65:6d:4f:bf:28:b6:e9:e3:89:97:93:b2:9f:74:
99:a8:10:c5:b8:de:c4:52:01:70:aa:df:35:cb:9f:
bf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DB:3F:0F:61:05:B8:2E:4D:21:6C:99:4E:76:6B:1B:4F:3E:B8:3C
X509v3 Authority Key Identifier:
keyid:47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/8ts_D2EFuC5NIWyZTnZrG08-uDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.22.86.0/24
128.140.128.0/20
185.23.96.0/23
185.23.99.0/24
213.180.225.0-213.180.226.255
213.180.228.0-213.180.230.255
213.180.247.0/24
213.180.252.0/22
Signature Algorithm: sha256WithRSAEncryption
c5:9b:24:1e:e2:cb:6b:73:c8:cf:2e:46:66:85:5b:92:6c:e7:
40:8b:c4:98:5c:53:c6:71:ff:a6:54:e6:a9:db:e6:99:2c:03:
30:94:fb:e4:b0:1c:dc:18:8c:92:ec:cc:ca:36:82:39:29:dc:
2a:cb:b8:83:b6:19:82:9d:c6:d2:d4:a0:4d:5c:c3:86:0f:e2:
a4:8d:e5:44:b8:b5:64:03:71:74:36:7a:d8:18:08:4d:3d:d1:
70:64:a4:28:29:28:97:8c:66:3d:58:64:89:b6:86:f1:f2:9f:
f9:7e:eb:12:15:75:f0:78:e6:4d:8d:9c:99:ec:0b:3f:69:2d:
d7:f0:7f:04:11:a5:7b:ab:ba:ce:23:b4:e5:d0:f7:97:7a:b7:
6f:90:64:84:09:17:5e:ff:2e:71:a7:31:fb:a0:2a:1a:cd:c6:
fa:47:7d:42:b4:e0:06:0f:c3:d2:07:bf:15:39:f8:4e:78:ab:
37:8f:7e:39:d7:ed:1a:a9:70:eb:16:e5:b5:33:b6:1f:b3:72:
26:bd:5e:3a:f2:db:00:59:87:3a:18:5d:bb:08:78:c4:e8:b4:
b8:25:99:61:48:9b:d0:1d:da:70:89:7b:64:e7:16:23:1f:a1:
d4:da:d7:8b:b6:96:71:c4:04:bb:89:f0:98:49:ed:7d:02:96:
2f:a7:5a:9f
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgISAZaq6S22eW5yYeMwQrm8KtzRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ZTk0Y2NiN2I2MDFkYTBjYTA5NDY5ZjYwZjY1MzY0MGZl
ZDhjMWMwHhcNMjUwNTA3MTMyMjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmRiM2YwZjYxMDViODJlNGQyMTZjOTk0ZTc2NmIxYjRmM2ViODNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx34hjljgOD/B2lQ4kro4FiSLqDgG
jzuZSCBOyvdc2XXR6V3lQPiw154Ud21QR9lP9S/ujpbxiMWxH8tOeB+uDQaOMTr1
fXruFJT/xjIzCBPOpP5PrGouZWJ+q03K8WzBZ6HEecIJipZv0FAzjZvSctmIRWCd
ioX6byhJkLcZCq/V538pXo2Y4i+tYvIh3ANoCgc+9cO6Fv/kh4fQBofIGXx6PLM2
PAr1LE6ntUChyVwlPngk9iYo1FJqxGcAWcB+bWKj5M4vl9zeH4L4HTs8z4FYw4ru
xEZBiPxMtVDdoF9sZW1Pvyi26eOJl5Oyn3SZqBDFuN7EUgFwqt81y5+/wQIDAQAB
o4ICQzCCAj8wHQYDVR0OBBYEFPLbPw9hBbguTSFsmU52axtPPrg8MB8GA1UdIwQY
MBaAFEfpTMt7YB2gyglGn2D2U2QP7YwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUi1sTXkzdGdIYURLQ1VhZllQWlRaQV90akJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC85ZTI5ZGMtY2VjOS00OWUyLWJjZTQt
YmQ5MGEzZjA2ZTE2LzEvOHRzX0QyRUZ1QzVOSVd5WlRuWnJHMDgtdUR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC85ZTI5ZGMtY2VjOS00OWUyLWJjZTQtYmQ5MGEzZjA2ZTE2
LzEvUi1sTXkzdGdIYURLQ1VhZllQWlRaQV90akJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAAwQAVBZWAwQE
gIyAAwQBuRdgAwQAuRdjMAwDBADVtOEDBADVtOIwDAMEAtW05AMEANW05gMEANW0
9wMEAtW0/DANBgkqhkiG9w0BAQsFAAOCAQEAxZskHuLLa3PIzy5GZoVbkmznQIvE
mFxTxnH/plTmqdvmmSwDMJT75LAc3BiMkuzMyjaCOSncKsu4g7YZgp3G0tSgTVzD
hg/ipI3lRLi1ZANxdDZ62BgITT3RcGSkKCkol4xmPVhkibaG8fKf+X7rEhV18Hjm
TY2cmewLP2kt1/B/BBGle6u6ziO05dD3l3q3b5BkhAkXXv8ucacx+6AqGs3G+kd9
QrTgBg/D0ge/FTn4TnirN49+OdftGqlw6xbltTO2H7NyJr1eOvLbAFmHOhhduwh4
xOi0uCWZYUib0B3acIl7ZOcWIx+h1NrXi7aWccQEu4nwmEntfQKWL6danw==
-----END CERTIFICATE-----
Generated at Sat May 10 19:22:27 2025 by rpki-client