Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS8888.roa
File: AS8888.roa (raw, json)
Hash identifier: aXu+bPtDVXZCFzkmiicA3vMRS/D/1DM0DJYBmC8L11Y=
Subject key identifier: 26:3E:A7:0F:A1:D9:B3:21:05:21:A8:B9:02:50:7A:A7:20:23:7F:A8
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 69641196D17645CEFAE9FBD2BEB0E617D5D963BF
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS8888.roa
Signing time: Tue 30 Sep 2025 15:55:07 +0000
ROA not before: Tue 30 Sep 2025 15:50:07 +0000
ROA not after: Tue 29 Sep 2026 15:55:07 +0000
asID: 8888
IP address blocks: 141.11.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:64:11:96:d1:76:45:ce:fa:e9:fb:d2:be:b0:e6:17:d5:d9:63:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 30 15:50:07 2025 GMT
Not After : Sep 29 15:55:07 2026 GMT
Subject: CN=263EA70FA1D9B3210521A8B902507AA720237FA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:69:80:b9:c3:13:b3:69:cf:f0:5c:a7:f8:73:
93:f3:45:d5:8e:70:0d:3a:c8:4e:57:cc:aa:59:0f:
a1:4a:bf:e9:fa:57:b6:cb:5b:ff:ac:36:c0:fc:a6:
0a:dc:c1:31:84:a7:49:1d:75:99:b5:61:65:67:5b:
9c:4b:df:24:5b:36:3c:2f:d8:9e:6c:52:de:27:c3:
27:4e:fe:f9:b9:61:45:aa:10:f2:7d:83:c4:fd:4f:
3a:df:f9:82:89:f2:81:2b:e2:5d:e4:92:89:24:b8:
fb:51:94:07:9c:2a:87:73:cb:ec:08:67:97:24:67:
43:4b:1e:85:26:e0:94:f4:59:b0:88:98:5f:ed:1c:
15:28:ce:10:7b:f7:9d:a4:ea:93:14:82:6b:cc:d6:
43:e1:b7:82:c8:39:b4:6c:a3:06:ba:25:67:d3:e4:
32:86:ab:78:c6:10:47:c5:56:79:13:5b:cf:a9:b9:
51:12:32:81:34:ab:ad:0f:bc:f2:3d:cc:c3:fe:a7:
89:36:17:d0:ad:c9:27:53:96:fc:38:73:2b:aa:2a:
8e:0c:44:82:07:c1:2e:75:ea:94:02:92:d8:88:53:
45:9f:4e:ea:08:14:10:89:46:40:ec:cf:20:ac:9f:
67:0b:ef:36:9e:05:fa:c5:ec:84:c4:5d:2e:20:ff:
99:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3E:A7:0F:A1:D9:B3:21:05:21:A8:B9:02:50:7A:A7:20:23:7F:A8
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS8888.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.111.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:01:5d:17:f8:f1:0e:10:cd:47:36:b7:45:81:8b:20:e9:16:
e3:4e:26:53:06:ec:0e:20:8c:e4:a7:b9:b1:6e:da:93:a3:1a:
21:13:22:05:13:5c:57:7a:db:73:e8:30:81:02:00:64:f3:d7:
29:4b:80:74:d6:d0:33:a6:75:2c:ed:58:0f:4b:bf:8c:f3:47:
4d:88:1b:d9:00:ba:66:50:da:eb:2b:07:13:4d:5d:3b:76:22:
57:28:fe:a7:26:f2:6c:ca:a1:d0:bf:b8:a9:08:fa:d0:4e:2a:
fd:75:6b:6a:bb:a9:62:a6:76:32:ac:f0:fd:71:77:26:ca:ff:
7f:ce:59:63:5a:15:82:48:fe:89:de:0d:e3:80:e8:07:f0:b8:
b7:8a:d7:c4:41:22:de:39:d1:90:b1:08:e1:52:74:6e:a7:35:
76:90:7c:f5:20:5f:91:eb:ce:56:a8:26:4b:76:7b:38:14:c4:
89:0a:13:f2:8e:8f:c7:67:f7:53:cc:18:9a:6a:6b:18:cf:10:
e3:45:b2:08:cd:b4:50:2b:b8:b8:dd:70:63:68:b9:86:f0:3a:
ec:48:65:61:11:9f:f0:41:5e:a0:5b:a2:a3:61:26:c3:33:6a:
f1:12:98:11:09:2e:5a:f8:87:a7:89:04:02:2f:4f:a9:3e:e7:
4a:87:92:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:30:01 2025 by rpki-client