Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/2OE08r0HVaPkUyQCfPYa18KfRVg.roa
File: 2OE08r0HVaPkUyQCfPYa18KfRVg.roa (raw, json)
Hash identifier: oPUY4tycdurJmN4YFVOJW3ptRzFs9QL2EBmNw0lcLg8=
Subject key identifier: D8:E1:34:F2:BD:07:55:A3:E4:53:24:02:7C:F6:1A:D7:C2:9F:45:58
Certificate issuer: /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Certificate serial: 0198C2E8A9B6E5A128F786C94BBEE21CDCC1
Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/2OE08r0HVaPkUyQCfPYa18KfRVg.roa
Signing time: Tue 19 Aug 2025 15:18:04 +0000
ROA not before: Tue 19 Aug 2025 15:18:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14445
IP address blocks: 79.110.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c2:e8:a9:b6:e5:a1:28:f7:86:c9:4b:be:e2:1c:dc:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Validity
Not Before: Aug 19 15:18:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8e134f2bd0755a3e45324027cf61ad7c29f4558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6a:42:08:d8:f7:4c:19:e4:dc:fb:3d:8a:aa:
a4:a9:5b:5e:d6:16:18:9d:8b:6a:e9:d4:34:0e:43:
90:35:55:89:bc:7a:15:b1:0c:9f:5c:73:5b:dd:66:
76:e5:a5:73:21:4a:fa:05:08:e2:e1:d8:1c:6f:bb:
78:61:21:bc:2f:70:46:95:78:58:7a:92:f5:39:1d:
a7:77:61:10:c0:65:43:bd:1f:19:c1:cf:d2:2f:f1:
a2:61:77:5b:cb:28:1c:05:61:d8:41:44:17:71:25:
9e:19:3a:27:d0:29:17:d5:b2:94:b0:a8:c2:a5:af:
3a:60:44:57:0b:08:73:59:92:83:10:dd:1b:31:35:
d3:db:09:2c:79:dd:8a:cb:7f:f1:b7:99:e1:cb:6f:
f1:c2:a7:62:d0:42:9f:b5:2b:5c:17:26:78:82:5e:
63:b7:dc:35:7a:fd:0b:14:19:3b:af:b7:3b:22:cc:
6c:bc:4d:25:4f:7a:bf:47:10:70:af:ba:7a:08:75:
cc:8c:d3:2d:ce:03:8e:24:74:1e:82:86:72:69:7e:
a9:5b:1f:8f:4c:e3:ea:24:e8:77:e9:89:ca:2b:d0:
0d:47:7d:07:85:e1:7d:0e:e6:0d:9f:14:40:d4:e1:
2b:8d:de:3b:bc:a3:e6:87:1b:88:a2:88:c2:ed:71:
fe:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E1:34:F2:BD:07:55:A3:E4:53:24:02:7C:F6:1A:D7:C2:9F:45:58
X509v3 Authority Key Identifier:
keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/2OE08r0HVaPkUyQCfPYa18KfRVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.167.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:b3:93:0e:99:6d:88:69:50:68:6d:96:08:bf:9a:dd:07:a4:
df:1e:1e:07:68:95:6c:e4:5f:eb:42:c2:6f:58:42:a7:cb:32:
5a:a4:f1:8c:5f:33:8c:3e:67:ba:f8:45:14:47:dd:cb:91:54:
a1:27:aa:87:a6:39:96:77:6a:7d:4b:e5:3f:10:3b:79:2c:05:
73:9c:06:58:38:72:d0:07:15:77:29:68:a5:39:02:22:0e:e2:
f1:28:59:1f:d7:ad:83:92:e2:ab:de:26:67:65:ae:e5:aa:ac:
f6:57:ce:e9:81:d4:04:0a:9f:9a:05:b4:41:25:d0:18:20:f1:
e9:36:7a:e5:71:f1:9a:45:3e:9b:b3:d4:66:9e:f5:fd:60:39:
39:b3:c5:1c:83:e4:f4:85:b1:02:b0:2e:0b:72:69:26:16:57:
f8:50:53:38:c4:96:1d:7d:91:cd:d3:0a:5b:9a:82:ff:21:57:
50:23:b8:cb:32:77:01:74:65:ed:dd:05:eb:60:b4:71:b7:b4:
1d:2e:f4:9a:65:d5:71:97:f2:27:83:fd:a6:86:a5:28:b7:36:
83:9e:6a:65:9e:73:37:73:b3:b8:ab:80:a3:ff:0e:9a:a6:10:
c1:6a:d7:5d:61:3a:6b:36:ea:5a:ea:30:05:6a:03:32:1a:ce:
a3:55:54:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:13:32 2025 by rpki-client