Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/8Bl_uVVQOuNTAYB4MJGJvtmHpC0.roa
File: 8Bl_uVVQOuNTAYB4MJGJvtmHpC0.roa (raw, json)
Hash identifier: TlelRdg2AvLDMhtiuqfO42FikSgwVhiKJDAQT7WdJj0=
Subject key identifier: F0:19:7F:B9:55:50:3A:E3:53:01:80:78:30:91:89:BE:D9:87:A4:2D
Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Certificate serial: 01979B8A54199589E84B254612F2DC4FC37D
Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/8Bl_uVVQOuNTAYB4MJGJvtmHpC0.roa
Signing time: Mon 23 Jun 2025 06:47:03 +0000
ROA not before: Mon 23 Jun 2025 06:47:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 31.130.144.0/21 maxlen: 24
31.130.152.0/22 maxlen: 24
77.233.220.0/22 maxlen: 24
81.17.154.0/24 maxlen: 24
94.141.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9b:8a:54:19:95:89:e8:4b:25:46:12:f2:dc:4f:c3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Validity
Not Before: Jun 23 06:47:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0197fb955503ae353018078309189bed987a42d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:44:42:5f:7d:80:5d:4c:9a:e6:8e:c7:0d:e8:
68:44:36:bb:35:df:b0:98:34:8e:e6:17:a1:46:13:
35:32:fd:1b:9f:f2:41:0c:a9:f3:85:80:d3:2c:30:
db:e0:68:c2:86:c8:4c:ee:54:e7:b3:2c:e4:97:53:
c9:07:7d:80:cd:2e:a8:48:ae:57:89:98:71:60:1b:
d1:93:b3:5c:4b:f0:75:f2:74:ee:c5:e1:56:e5:54:
ed:80:e4:34:c0:ef:d5:8a:c2:9a:58:22:2f:ed:c6:
3f:e2:3d:49:8d:b5:e3:27:dc:6f:12:52:43:e3:fd:
f9:36:42:02:67:5e:77:8d:8c:fa:a0:4b:88:88:6a:
3c:da:d4:01:a1:51:73:e5:64:5b:55:25:c1:12:7f:
e4:fa:78:0f:f8:4c:a1:11:1b:af:ed:57:6c:56:96:
32:c1:43:49:15:c9:52:c0:b9:4c:22:8f:da:1f:aa:
17:01:5e:f3:ae:e4:f7:63:b3:13:91:17:ae:18:63:
3f:f6:d6:7f:48:22:a5:e4:79:bd:66:b8:6a:64:8b:
31:a7:7c:95:19:16:8d:40:fe:b1:e2:e8:bd:e7:8d:
ab:ad:c8:47:df:d9:7d:d9:01:15:75:0c:02:8a:5b:
c2:18:96:8f:a9:a0:5b:46:f3:92:f3:33:ef:e0:2e:
6e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:19:7F:B9:55:50:3A:E3:53:01:80:78:30:91:89:BE:D9:87:A4:2D
X509v3 Authority Key Identifier:
keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/8Bl_uVVQOuNTAYB4MJGJvtmHpC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.144.0-31.130.155.255
77.233.220.0/22
81.17.154.0/24
94.141.162.0/24
Signature Algorithm: sha256WithRSAEncryption
21:35:e2:5b:88:3e:2a:a3:be:a0:68:9c:e5:08:15:f4:68:dc:
f9:d7:2a:6b:73:7d:cf:64:fc:5d:06:54:e6:ae:d0:6f:dc:d5:
7b:f1:39:6a:67:45:da:f3:d3:4d:84:8c:c5:e8:b2:c8:e9:ae:
cd:43:97:24:d8:a5:d0:63:35:7c:d3:af:1c:bc:61:25:db:eb:
b9:dc:c2:b0:de:f7:d7:64:9b:8a:e6:5c:8a:1d:b8:8a:37:d7:
ea:f3:d9:70:f1:1d:5d:20:26:c6:f7:da:9c:bd:1b:eb:3b:60:
f7:3f:6d:49:c5:dd:c4:ef:58:f4:2b:0c:82:18:88:ac:9c:97:
00:49:11:c1:29:f5:08:bb:7d:2f:5e:b6:75:f6:fd:15:2d:7c:
c4:a0:fd:6c:ed:0a:12:67:2e:01:e6:c7:64:05:48:89:2e:3c:
6f:4a:12:30:df:f8:f9:f9:e7:93:68:08:6c:4f:c7:03:3c:1c:
b3:df:20:d8:80:31:c8:58:5c:32:9e:0c:de:9e:08:ed:ce:f3:
d6:2f:a8:3c:04:a7:8f:23:bf:90:13:d0:fa:d6:d0:db:94:2c:
94:d6:82:57:10:6e:09:e6:61:a8:21:ff:15:62:cf:cd:53:0b:
93:13:c4:9d:aa:a4:7b:57:d6:ff:df:bc:8c:03:8a:f8:62:ad:
c7:11:c9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 23:10:56 2025 by rpki-client