Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/K8gb2IugzK8IgsCtvVgzoDUY6tM.roa
File: K8gb2IugzK8IgsCtvVgzoDUY6tM.roa (raw, json)
Hash identifier: wR8LR0jtRTOAWt2SjVhqd0hsllRe9a/OzBTCiGqDDfI=
Subject key identifier: 2B:C8:1B:D8:8B:A0:CC:AF:08:82:C0:AD:BD:58:33:A0:35:18:EA:D3
Certificate issuer: /CN=a61a8f667a3dddbd4a352318d8f0606c46e9f063
Certificate serial: 0198E274870B1AAA26AD6FEC12B62C35C88D
Authority key identifier: A6:1A:8F:66:7A:3D:DD:BD:4A:35:23:18:D8:F0:60:6C:46:E9:F0:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/K8gb2IugzK8IgsCtvVgzoDUY6tM.roa
Signing time: Mon 25 Aug 2025 18:19:04 +0000
ROA not before: Mon 25 Aug 2025 18:19:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35055
IP address blocks: 45.14.240.0/22 maxlen: 24
185.64.120.0/22 maxlen: 24
185.190.64.0/22 maxlen: 24
2a03:1460::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e2:74:87:0b:1a:aa:26:ad:6f:ec:12:b6:2c:35:c8:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a61a8f667a3dddbd4a352318d8f0606c46e9f063
Validity
Not Before: Aug 25 18:19:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2bc81bd88ba0ccaf0882c0adbd5833a03518ead3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1a:35:54:53:d0:48:91:af:af:1c:19:6e:b4:
0c:a4:f0:d8:88:c1:0d:ca:9f:eb:d0:5e:ef:e1:a3:
43:da:47:15:92:0d:88:06:9e:96:cf:cf:34:b2:39:
23:e9:46:77:87:c4:58:a3:1d:1e:32:a0:41:55:e5:
95:14:92:13:57:b8:aa:47:f0:34:78:f6:1f:f5:7a:
c3:dd:1c:a0:0f:e4:5d:81:99:bc:eb:2f:de:0e:da:
b4:16:e0:af:ec:ae:38:41:9d:27:75:0a:7a:ef:eb:
e8:cb:06:87:6f:9f:c9:b5:94:98:65:79:ab:af:5e:
63:96:c5:d9:b4:33:a2:d6:d1:f8:f8:50:9c:f2:3e:
bc:69:db:0d:5c:29:50:c2:5e:91:44:5a:5b:a3:00:
a5:cf:d1:81:1c:6b:34:13:e6:fe:30:c1:82:24:0b:
96:5b:83:32:ae:0a:7f:e2:89:e5:53:2c:13:22:e9:
7d:b0:d8:42:ec:1b:22:46:d3:87:c8:4e:2b:de:1c:
97:38:35:20:03:09:ce:eb:e8:aa:c2:76:3e:ec:9f:
66:06:5a:40:af:75:58:ce:d6:57:a2:ce:1c:74:07:
44:99:b7:80:cd:02:7b:60:63:09:fa:7f:7b:c9:fd:
c9:a1:e3:6b:d6:ff:66:69:5f:7b:ac:41:d9:1f:1b:
2e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C8:1B:D8:8B:A0:CC:AF:08:82:C0:AD:BD:58:33:A0:35:18:EA:D3
X509v3 Authority Key Identifier:
keyid:A6:1A:8F:66:7A:3D:DD:BD:4A:35:23:18:D8:F0:60:6C:46:E9:F0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/K8gb2IugzK8IgsCtvVgzoDUY6tM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.240.0/22
185.64.120.0/22
185.190.64.0/22
IPv6:
2a03:1460::/32
Signature Algorithm: sha256WithRSAEncryption
0f:a6:a5:a2:55:03:fc:77:7b:96:6c:01:25:91:06:17:39:b0:
3e:44:0e:e5:ba:64:e2:8c:e6:8b:e4:ce:7a:4d:49:db:b2:4d:
c0:f4:4f:52:52:05:0f:a5:35:68:65:2c:60:84:38:da:dd:0f:
41:ce:dc:62:11:8d:db:a3:a3:f9:9a:05:91:b5:e2:ac:d3:10:
a8:4b:d4:29:6d:55:37:bb:f5:1a:65:8c:a7:f5:af:bf:b6:1c:
ef:4a:3c:22:d2:c5:92:84:49:a5:8e:ab:3d:d5:2f:af:3a:d2:
b9:8c:30:b2:97:39:e1:91:83:52:4c:50:77:a6:7e:db:99:9e:
3c:f0:a6:a1:6a:f5:4c:b3:ba:24:9f:6d:f9:aa:83:b3:5a:57:
05:a3:fb:bc:fd:49:22:c2:ba:22:d9:e6:18:c1:0d:5f:53:29:
5c:5b:c7:a6:59:d8:70:da:54:33:95:ee:cc:41:6e:ff:60:fc:
97:56:37:ad:05:29:88:d4:6b:bd:ec:0e:1f:e3:da:e2:a0:40:
3c:fd:62:d0:d3:2c:e7:40:4b:3e:72:bf:42:43:4c:71:b0:37:
54:d3:21:cb:f3:03:2f:e6:ba:19:0f:8f:f7:c0:c0:74:54:ac:
79:9e:8d:03:c0:8d:ea:3e:63:17:05:36:d6:72:08:7a:8e:df:
9e:ea:47:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:46:09 2025 by rpki-client