Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/8FkWomAa9zdarRHBCGl6XLtx0LU.roa
File: 8FkWomAa9zdarRHBCGl6XLtx0LU.roa (raw, json)
Hash identifier: TxBbyyUbp8nUq3EKrmRwHX6i6r2kO2wuknoeLkFjWx0=
Subject key identifier: F0:59:16:A2:60:1A:F7:37:5A:AD:11:C1:08:69:7A:5C:BB:71:D0:B5
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019854AF34DC2E83BA8411F3D4B7DF92B82C
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/8FkWomAa9zdarRHBCGl6XLtx0LU.roa
Signing time: Tue 29 Jul 2025 05:37:05 +0000
ROA not before: Tue 29 Jul 2025 05:37:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 62.93.164.0/22 maxlen: 24
62.93.176.0/22 maxlen: 24
84.20.4.0/22 maxlen: 24
84.20.16.0/22 maxlen: 24
84.20.24.0/22 maxlen: 24
92.71.34.0/23 maxlen: 24
92.71.40.0/22 maxlen: 24
92.71.44.0/23 maxlen: 24
92.71.66.0/23 maxlen: 24
92.71.98.0/23 maxlen: 24
92.71.124.0/23 maxlen: 24
213.139.8.0/22 maxlen: 24
213.201.242.0/23 maxlen: 24
213.201.252.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:af:34:dc:2e:83:ba:84:11:f3:d4:b7:df:92:b8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 29 05:37:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f05916a2601af7375aad11c108697a5cbb71d0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:15:b5:0f:3a:59:38:1a:9d:3d:9e:db:ef:81:
ca:3c:8f:a3:5a:7a:53:37:82:be:fa:15:cc:f2:fd:
df:60:88:80:db:3f:01:1d:01:a6:e9:68:8a:a0:34:
5a:08:1e:33:aa:68:90:de:c2:57:82:ac:e3:be:a3:
81:84:f1:84:c0:9e:05:fd:8b:17:3f:58:6d:d8:b9:
9a:e2:5e:16:05:3d:d3:15:dc:f6:de:9e:09:ee:d8:
73:0a:81:28:7e:f2:d3:7b:26:89:16:ef:cf:0e:fe:
1c:ee:ee:95:39:ac:26:35:87:d0:75:a9:87:59:a2:
db:3b:d6:27:12:00:b7:7a:85:60:21:d1:e4:2a:12:
fd:95:22:1e:a2:8e:ab:eb:6d:d4:f6:f8:19:00:3d:
9c:cf:83:4a:85:39:6d:a1:97:20:34:c1:6f:73:30:
c4:91:5e:fe:a4:ad:3b:3c:37:b6:72:ee:8e:c9:79:
32:c4:1f:e1:07:f3:ea:d4:e6:d2:10:73:26:03:80:
75:c1:4f:d9:bd:51:5c:40:71:66:7a:ff:61:87:bd:
fd:cf:82:71:20:20:3d:bf:0d:30:f0:00:62:0b:dd:
05:75:6e:52:1f:f1:b2:ad:e4:d6:28:d8:93:e1:1b:
c9:63:78:15:23:5f:4c:be:5c:43:73:69:b3:5f:32:
2b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:59:16:A2:60:1A:F7:37:5A:AD:11:C1:08:69:7A:5C:BB:71:D0:B5
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/8FkWomAa9zdarRHBCGl6XLtx0LU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.93.164.0/22
62.93.176.0/22
84.20.4.0/22
84.20.16.0/22
84.20.24.0/22
92.71.34.0/23
92.71.40.0-92.71.45.255
92.71.66.0/23
92.71.98.0/23
92.71.124.0/23
213.139.8.0/22
213.201.242.0/23
213.201.252.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:af:3a:09:a9:7a:f4:96:cc:91:d8:9a:2d:3f:fb:3d:68:d8:
42:bc:a5:61:ad:ef:7a:ef:17:2a:84:79:90:05:98:16:f1:da:
53:d2:ce:47:2d:10:1d:c0:df:38:20:8d:35:f9:62:9b:e4:0d:
c6:5b:ca:93:6e:9a:75:91:57:03:35:30:fd:b0:c6:02:71:6d:
65:10:f1:91:29:6d:d0:6d:8a:2d:2d:83:81:9d:b7:c9:c8:d3:
73:f8:65:30:7f:6d:f6:64:90:c9:07:b6:41:23:aa:42:c7:39:
b0:ae:5e:7f:7c:d2:1b:7a:06:83:a3:34:35:4b:5d:53:08:9b:
04:8d:76:c2:58:85:a0:8d:f3:14:ed:94:ac:0e:c5:b6:fa:f7:
56:81:a4:a9:e6:0b:a2:88:66:cb:62:4d:4c:5e:18:fb:8a:d2:
60:83:bb:a7:2c:c1:57:77:19:1b:b2:52:18:58:08:76:36:de:
79:29:d3:8b:1d:37:cc:3d:c5:e0:5b:ba:19:30:f2:d0:c8:b2:
56:24:6a:74:4a:ce:6a:51:ba:ec:d5:be:04:e4:b9:28:30:d9:
68:8a:d9:e2:b8:41:2d:4b:3d:85:ee:36:06:1b:df:13:ab:c2:
a0:17:24:6d:69:88:80:84:e5:f7:2a:d3:4d:88:91:99:4a:e3:
47:e3:f1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:31:51 2025 by rpki-client