Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/nU8hgESLKBu6Ob3yLQF3UsQiPM4.roa
File: nU8hgESLKBu6Ob3yLQF3UsQiPM4.roa (raw, json)
Hash identifier: a/9sg+eOjNLEsVOrZH7G2TJzr56FEuq1f5qT7/3GNTA=
Subject key identifier: 9D:4F:21:80:44:8B:28:1B:BA:39:BD:F2:2D:01:77:52:C4:22:3C:CE
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 01987EC92B2FE833BAA79ABDBB7E0F6C0AA6
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/nU8hgESLKBu6Ob3yLQF3UsQiPM4.roa
Signing time: Wed 06 Aug 2025 09:49:29 +0000
ROA not before: Wed 06 Aug 2025 09:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60117
IP address blocks: 212.81.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:c9:2b:2f:e8:33:ba:a7:9a:bd:bb:7e:0f:6c:0a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Aug 6 09:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d4f2180448b281bba39bdf22d017752c4223cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e1:de:0f:99:dd:23:fe:ad:bf:0b:bf:fd:9b:
25:8a:b7:16:25:ef:37:51:69:36:32:95:2e:dc:64:
5f:b2:a2:25:89:d6:7b:c6:83:e4:d7:e0:5b:ce:62:
bc:2e:0f:63:bd:87:ad:20:37:fa:8e:e8:de:54:d5:
16:aa:e8:c3:15:fb:87:ed:2d:62:c6:f6:56:d2:5e:
a8:cc:31:fd:bc:4a:ba:96:51:02:39:41:4c:83:f6:
3b:fb:02:dd:04:bb:8a:66:32:52:c7:1a:f9:bf:76:
d0:ac:48:67:0a:94:40:4b:69:2a:7e:47:1d:24:f2:
80:f3:11:9f:6a:5d:92:cd:a4:1c:04:91:e6:50:93:
7a:43:5e:eb:3c:67:c6:65:59:d1:a9:75:60:9d:b5:
e0:e3:9c:7a:3b:67:a0:0c:b2:9b:ba:19:80:7f:3d:
68:f5:2b:b0:e1:4a:63:eb:cd:9a:92:60:db:62:d1:
cf:9f:13:63:56:f3:66:58:82:2c:7c:a4:91:67:3c:
5e:b9:47:81:6e:23:dd:b3:75:a6:0e:ad:86:4d:d1:
9d:d5:9e:1e:5d:36:00:61:ce:86:4a:02:57:21:df:
fe:39:5e:ed:ef:53:89:70:7a:ac:75:64:2f:e6:22:
69:eb:50:4b:0d:41:22:ce:60:89:d6:52:5b:06:88:
30:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4F:21:80:44:8B:28:1B:BA:39:BD:F2:2D:01:77:52:C4:22:3C:CE
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/nU8hgESLKBu6Ob3yLQF3UsQiPM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.81.44.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:7f:46:3f:57:9c:4b:be:14:51:6a:aa:00:9a:f4:35:50:4a:
e6:a5:aa:b6:13:7f:78:57:8f:8a:56:81:7d:73:f2:e7:58:9a:
64:d5:da:d3:04:dc:26:70:48:2c:bd:a7:72:82:63:5b:1f:ad:
ad:6b:91:85:54:c0:f2:c2:89:65:e1:e4:26:bc:ba:a4:d6:2f:
57:b3:9f:f6:0c:53:9a:6d:da:6d:cd:f0:79:83:db:64:e4:77:
a9:1d:60:68:cb:e3:b0:c8:61:ea:0a:ff:03:af:06:b4:b3:e1:
90:d1:bc:8f:d4:88:3c:38:f2:2f:46:49:53:fe:96:0a:12:c9:
65:74:c3:36:46:a3:26:01:2a:65:43:42:4f:dc:01:2f:63:dc:
ee:e3:d5:ea:65:72:af:cb:53:53:e1:41:72:17:d2:71:fd:62:
2d:9a:ee:a8:32:7e:64:18:06:94:8f:4c:f8:36:89:0c:89:40:
4c:79:70:ec:6e:6e:43:76:c6:c6:d2:10:da:2c:c4:74:71:a1:
86:96:af:a4:62:5d:c4:05:07:14:f7:57:3b:72:77:2f:24:a0:
6e:56:6e:f3:b3:50:4d:97:a8:64:03:2e:bb:ef:d7:0c:c4:d8:
69:3a:c8:a5:64:16:7a:1b:b3:19:89:5f:2e:b5:4d:ef:54:48:
2e:74:e9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:36:25 2025 by rpki-client