Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/_8MCzl0l1tQuihsF_I64BRSs2tc.roa
File: _8MCzl0l1tQuihsF_I64BRSs2tc.roa (raw, json)
Hash identifier: hgK1WfvVvkljiSPw5yBzGlfOpy6Z+LRSv3D2IqqcYQ4=
Subject key identifier: FF:C3:02:CE:5D:25:D6:D4:2E:8A:1B:05:FC:8E:B8:05:14:AC:DA:D7
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 019850207F4654C6FEA1EE6BB9AFB7FAD961
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/_8MCzl0l1tQuihsF_I64BRSs2tc.roa
Signing time: Mon 28 Jul 2025 08:22:43 +0000
ROA not before: Mon 28 Jul 2025 08:22:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42372
IP address blocks: 193.33.64.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:50:20:7f:46:54:c6:fe:a1:ee:6b:b9:af:b7:fa:d9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jul 28 08:22:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffc302ce5d25d6d42e8a1b05fc8eb80514acdad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b4:0b:2c:ae:79:f8:48:91:7a:e9:b3:ad:44:
ae:2e:33:dd:47:94:4f:3c:08:e7:96:6e:9e:27:68:
c1:fb:f9:5b:2a:98:f8:11:62:f1:a9:8c:62:e1:9c:
ba:20:79:61:75:4a:96:19:70:8d:7f:6b:29:53:94:
7a:cd:ff:8b:39:16:18:80:93:69:11:c3:25:61:46:
26:e3:2c:f6:df:fd:ab:34:2f:d8:54:b4:d1:ea:1e:
9b:61:ae:4f:d7:45:ee:d6:41:69:66:e2:1f:9e:c6:
49:68:fa:81:99:0e:fa:b0:c6:58:85:24:d2:a7:31:
fc:6d:41:76:b9:83:32:13:7e:c2:0e:10:ce:70:6e:
98:89:b0:06:ef:87:87:5c:1b:d6:e0:e2:2b:a6:9e:
f6:a0:0d:2e:ce:b2:ed:70:2f:c9:38:2c:e1:a7:32:
87:1e:d8:48:75:02:f3:57:91:0f:e9:dd:17:7d:db:
e4:44:9e:9a:ec:d4:ac:a5:10:f2:4a:e4:0c:2e:a8:
2e:1b:11:44:06:8f:31:3b:4e:75:ec:ef:e2:27:73:
81:b4:b2:b2:57:fc:d0:e5:a4:24:b3:77:71:3b:0a:
2e:0c:db:5d:22:f7:b5:32:71:b4:58:36:7b:d7:93:
6e:3b:84:10:e2:55:c0:97:af:c8:7b:e5:bc:da:bc:
cc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C3:02:CE:5D:25:D6:D4:2E:8A:1B:05:FC:8E:B8:05:14:AC:DA:D7
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/_8MCzl0l1tQuihsF_I64BRSs2tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.64.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:58:72:53:9e:cd:8e:8b:49:58:57:b9:65:bd:cb:26:83:ab:
28:d9:a1:7c:2d:6f:12:00:d9:f4:b2:53:35:9e:82:19:20:84:
fa:8f:db:13:f1:42:56:10:34:55:e2:b7:f9:0d:e0:13:75:ae:
26:74:e0:aa:b4:0b:0f:ac:59:be:ea:65:e4:a7:0e:0c:f7:d1:
92:50:61:e8:52:45:7f:9e:25:a3:25:99:0e:85:e1:76:48:e3:
6c:22:54:c1:dd:fd:22:d4:ba:2d:d6:73:05:a4:87:b3:8e:d0:
7d:eb:fe:60:b1:43:88:8d:59:5c:c9:a8:50:77:cb:04:20:ba:
55:e5:1c:c4:94:09:87:7c:02:bd:3b:c1:1f:82:f8:84:ce:19:
b4:80:24:d3:fd:11:e6:df:3e:e2:a2:f7:9e:f4:f0:44:be:a4:
b4:74:81:fc:32:fe:f7:3a:36:22:34:14:fc:e8:0b:2e:0d:4d:
dc:e1:d4:ca:37:38:b6:b0:45:e2:f8:79:d8:ca:53:03:11:65:
12:53:9a:0b:e7:80:9e:ff:16:28:ba:85:31:d6:11:38:bb:6a:
2e:01:f6:e9:07:4b:33:e2:03:21:e3:7f:67:16:1f:5f:38:42:
cf:64:c3:fd:63:ca:a1:21:3f:30:ee:5c:f5:f6:56:15:8d:5c:
31:d8:2e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:29:17 2025 by rpki-client