Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8-UTSmmikIzDkpf0jL_kGGJPN4s.roa
File: 8-UTSmmikIzDkpf0jL_kGGJPN4s.roa (raw, json)
Hash identifier: EBr/YhkCc/K1S8mfHokN1PL/lYcuifmD75ce6JBSUi8=
Subject key identifier: F3:E5:13:4A:69:A2:90:8C:C3:92:97:F4:8C:BF:E4:18:62:4F:37:8B
Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial: 0199B681BFC0775CE35DC808EE5D35203B68
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8-UTSmmikIzDkpf0jL_kGGJPN4s.roa
Signing time: Sun 05 Oct 2025 22:33:00 +0000
ROA not before: Sun 05 Oct 2025 22:33:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21700
IP address blocks: 109.205.193.0/24 maxlen: 24
2a01:fb02:4000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b6:81:bf:c0:77:5c:e3:5d:c8:08:ee:5d:35:20:3b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Validity
Not Before: Oct 5 22:33:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3e5134a69a2908cc39297f48cbfe418624f378b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:38:4d:e0:cd:0c:72:23:2c:98:95:0d:27:c8:
52:73:0c:fd:10:80:de:b5:fd:54:ea:ba:73:24:d5:
b0:15:5d:df:4b:6a:d6:b9:ae:2f:30:ad:b3:bb:ff:
96:13:d0:8a:26:5c:1b:ce:06:7b:05:32:63:30:4b:
23:f1:e5:cc:00:3d:c3:03:f6:86:7d:f9:ed:2c:72:
9a:35:37:ce:6a:a5:ca:f8:b3:a4:3e:6d:69:ba:67:
b7:98:1d:f2:00:6b:f3:f9:8b:4e:24:1f:e7:12:cb:
86:31:70:f9:b0:0b:64:ee:c8:b3:e5:8d:c7:18:f1:
3f:5e:25:e0:b1:9e:a4:aa:3a:9f:72:f0:cf:a0:49:
bd:76:a2:ac:6f:23:6c:c2:9c:98:a9:ad:da:c6:bc:
f9:2a:25:af:ee:72:8d:60:8d:de:03:68:4a:7d:82:
f8:c2:8f:4c:8b:ea:b8:c6:32:41:e2:de:cc:7a:fb:
99:b2:a2:29:c6:59:e5:14:5a:46:1d:11:d5:19:6d:
22:17:88:ea:f6:16:61:93:de:43:05:e8:b9:07:bc:
f5:64:10:47:61:d0:36:7a:5b:2f:6d:35:22:2f:85:
ef:07:5b:82:b7:d1:28:ae:ab:2d:0e:da:33:e3:85:
9c:8a:bf:03:89:7d:30:0f:c5:df:f9:f8:53:f3:16:
ff:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E5:13:4A:69:A2:90:8C:C3:92:97:F4:8C:BF:E4:18:62:4F:37:8B
X509v3 Authority Key Identifier:
keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8-UTSmmikIzDkpf0jL_kGGJPN4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.193.0/24
IPv6:
2a01:fb02:4000::/34
Signature Algorithm: sha256WithRSAEncryption
1b:d1:44:f6:c3:3c:4e:52:8a:52:72:7e:d4:49:fc:e9:0f:eb:
ab:17:5f:48:c2:3c:8b:6a:63:85:3c:bf:71:85:9e:df:0e:c5:
be:52:2e:48:ec:6b:7a:9d:74:69:97:ad:07:29:d5:55:a4:4c:
78:8d:02:7d:b5:7b:21:bd:c3:54:7d:e7:dc:4c:c0:f4:e0:15:
ee:1a:03:da:25:bf:6e:4b:a6:2c:73:00:f9:be:47:1d:f2:a8:
28:bc:3f:de:f8:b7:ef:c5:40:dc:2d:18:2e:a5:69:2b:84:76:
2c:18:41:4b:dd:b2:1a:44:34:c0:d4:2e:13:72:24:67:20:70:
4b:0b:bf:23:fc:58:cc:28:5b:9d:7c:bd:ed:fd:cd:ad:2f:b5:
fd:3f:f5:b4:0d:c1:7e:88:0c:a8:fe:31:ab:6b:30:f2:cf:76:
09:ab:c3:c9:81:ec:b1:02:3f:4a:da:c0:d9:e4:63:e5:b6:15:
8b:3e:b0:20:a6:d7:a9:27:36:b3:e5:71:e4:ff:df:aa:23:42:
d2:48:66:ae:d5:f6:9b:dc:63:8c:c4:fe:1b:04:06:9c:c2:33:
a2:0a:91:20:9f:cb:ed:a8:3b:79:ef:bb:aa:21:5d:57:53:b5:
17:be:0b:82:ed:71:df:24:26:3a:1b:57:10:90:4b:91:63:5b:
04:8e:2c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:08:31 2025 by rpki-client