Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/8vP2d11FLf0Wpo0ddj1YJpLbyzg.roa
File: 8vP2d11FLf0Wpo0ddj1YJpLbyzg.roa (raw, json)
Hash identifier: vB7iA5nOWyth9KzMrt+bVfHZjSv+5KxapmgUrd4mNu4=
Subject key identifier: F2:F3:F6:77:5D:45:2D:FD:16:A6:8D:1D:76:3D:58:26:92:DB:CB:38
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0199E289625AB78EC6FB80D3321CED7638B4
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/8vP2d11FLf0Wpo0ddj1YJpLbyzg.roa
Signing time: Tue 14 Oct 2025 11:44:38 +0000
ROA not before: Tue 14 Oct 2025 11:44:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41949
IP address blocks: 193.183.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e2:89:62:5a:b7:8e:c6:fb:80:d3:32:1c:ed:76:38:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Oct 14 11:44:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2f3f6775d452dfd16a68d1d763d582692dbcb38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8c:83:1b:20:36:7d:34:27:76:2b:b6:f6:78:
97:9a:78:5d:50:c2:bf:ac:23:9b:03:26:75:86:1f:
c8:cf:5f:c3:01:25:0a:1d:73:dd:6f:63:64:2f:c0:
e1:18:46:b0:c5:8b:5a:f4:aa:aa:33:59:e9:dc:ee:
17:dc:18:bd:d7:9b:f9:63:d9:d8:3a:5a:01:07:93:
83:db:1c:2f:90:d1:9c:47:6b:41:dc:59:23:63:89:
7e:11:9c:9f:11:c7:69:1f:22:16:6a:05:51:39:f1:
cd:b7:41:40:be:f1:42:af:54:3f:f4:cf:b8:af:6e:
bc:24:d8:bf:45:24:bf:d9:07:52:52:a9:f7:a0:80:
e6:8a:53:0e:ec:e4:3c:eb:18:8e:c7:ef:ec:3a:08:
cd:49:37:d5:06:74:27:d3:55:31:2b:c1:0e:a8:aa:
e5:8d:c0:dc:47:33:e5:f0:4c:e6:4e:d6:41:90:2d:
91:cf:6d:38:7e:8a:b5:0e:ee:a5:3c:03:3c:3a:a8:
71:08:66:c4:53:62:0d:54:a6:06:46:48:f1:fe:14:
27:e3:21:ce:04:b8:13:60:fe:a3:f8:f1:63:28:55:
1d:ad:04:5a:d3:bb:29:74:b6:41:75:c8:f1:75:7b:
a5:f2:53:9b:ed:be:e1:8e:70:8f:d7:f4:f1:47:2d:
45:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F3:F6:77:5D:45:2D:FD:16:A6:8D:1D:76:3D:58:26:92:DB:CB:38
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/8vP2d11FLf0Wpo0ddj1YJpLbyzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.183.112.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:fa:4c:d6:aa:e4:db:55:50:dc:c9:a3:80:8b:7e:16:29:f0:
2f:48:e6:2b:73:18:fb:18:13:a2:da:f1:44:bf:ae:2a:e0:6a:
60:88:ab:c7:db:1b:0d:03:3a:1a:ae:5f:29:4f:f5:aa:e7:2e:
65:54:a0:aa:ed:91:e3:49:f7:d3:1d:df:93:2c:fc:fb:93:d0:
a4:61:f3:92:55:6d:8b:9a:b8:f1:09:dd:55:ab:01:a4:41:be:
2d:3f:cd:9f:72:80:f4:cf:39:83:05:d8:8a:3f:0c:73:a8:e8:
1c:b0:66:6a:3a:1c:d6:f0:76:40:9a:fe:8e:4d:48:8e:ea:1e:
a6:08:a0:ed:b6:ef:27:52:e4:0e:ba:ad:b7:6a:cd:7a:86:51:
2f:c3:d9:d4:d0:3a:32:b9:4a:b1:37:d5:30:af:00:ba:ef:94:
6c:0f:ed:f8:9e:d6:b1:95:9a:70:0a:7a:88:b3:f0:82:10:84:
67:6d:d4:c5:58:b4:f6:7f:9a:81:0e:6b:96:ad:8f:5f:be:9d:
7f:a7:59:17:6a:3e:ef:58:2c:da:56:3c:6c:a6:60:b6:83:f3:
bb:4b:8f:85:7c:eb:d9:4f:cc:50:a8:8d:f0:dc:41:89:f0:0e:
99:37:79:e8:31:d2:ec:df:5a:3f:6e:4a:22:ed:7c:40:df:84:
b4:4e:83:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:46:04 2025 by rpki-client