Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/8VzJ_nao6hvI_mOtfIH1E2Wc0X4.roa
File: 8VzJ_nao6hvI_mOtfIH1E2Wc0X4.roa (raw, json)
Hash identifier: fMdRGDb44+JimEAuaANxuRcrKDd0wALe8Zuv6EbAqVQ=
Subject key identifier: F1:5C:C9:FE:76:A8:EA:1B:C8:FE:63:AD:7C:81:F5:13:65:9C:D1:7E
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019A4578E9FD18CBB2266F13EC0E69D26EEC
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/8VzJ_nao6hvI_mOtfIH1E2Wc0X4.roa
Signing time: Sun 02 Nov 2025 16:49:03 +0000
ROA not before: Sun 02 Nov 2025 16:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19318
IP address blocks: 212.69.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:45:78:e9:fd:18:cb:b2:26:6f:13:ec:0e:69:d2:6e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Nov 2 16:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f15cc9fe76a8ea1bc8fe63ad7c81f513659cd17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:76:4a:e2:b1:a3:70:9d:62:41:7e:1e:57:e6:
73:d2:fc:8b:7b:32:ff:85:c2:2c:ce:a2:e4:e9:58:
e9:ac:41:48:c6:1b:b6:9e:12:61:89:6d:31:f2:e2:
53:b4:e0:c0:e4:b5:fd:8a:0e:4c:c3:5c:25:47:42:
d2:d8:99:ef:31:4c:78:08:3d:66:6e:80:fa:64:5d:
ca:a3:3f:a2:f9:36:87:6f:e1:ac:63:6a:9c:77:c9:
a6:0c:c7:be:fd:79:4f:8f:4c:e9:8e:7f:da:6b:b1:
b6:d2:47:67:6a:f6:c3:aa:4c:46:5d:f4:d0:78:73:
00:cb:07:00:bb:b5:c1:2a:9b:0f:94:4a:27:28:ee:
ef:10:1d:e7:19:88:47:3c:cc:df:17:ab:17:bd:37:
c3:af:be:88:a3:e3:42:90:ab:04:32:aa:aa:8a:1b:
2d:58:7b:2f:6e:b4:35:c8:89:91:e3:fc:53:59:ce:
d9:6c:53:1b:e8:91:2d:88:16:8a:6a:a0:86:00:8b:
f6:40:fe:f5:6a:8f:68:d6:70:63:0b:5a:a4:4a:a1:
58:31:9d:e0:99:a4:7c:76:3c:f7:31:11:f1:a1:25:
95:ea:5c:b7:d5:cd:d8:66:b9:00:a5:7f:96:3f:6d:
0a:98:d7:33:85:75:4b:ed:de:13:ea:34:be:35:ee:
81:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5C:C9:FE:76:A8:EA:1B:C8:FE:63:AD:7C:81:F5:13:65:9C:D1:7E
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/8VzJ_nao6hvI_mOtfIH1E2Wc0X4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.69.8.0/24
Signature Algorithm: sha256WithRSAEncryption
27:d5:83:06:e3:a7:77:8d:a6:16:68:15:c9:0a:56:db:1a:78:
ad:85:3a:65:fb:9a:48:d4:e4:a5:f4:cc:71:7b:c6:b4:76:4f:
b5:30:68:17:59:4c:23:09:05:72:bf:10:e3:6b:b1:87:f1:c6:
ad:13:24:10:dd:5c:bb:d9:bb:f9:63:bc:2e:cb:24:42:ec:65:
28:81:ba:dc:0a:f7:c1:b7:13:66:0c:ae:3a:da:a3:fb:25:89:
57:85:a1:1e:05:22:7d:1f:a0:60:bc:ce:67:c4:58:13:76:19:
cb:09:ab:d6:e6:3a:d9:fc:e9:57:30:d7:ee:65:12:5b:c5:dd:
d3:39:eb:6e:40:47:44:5f:f1:0d:5d:1d:fe:a2:c8:e4:2a:b0:
1d:10:19:df:d1:17:81:3e:b2:17:9a:2e:12:59:23:8c:dd:10:
da:d1:a7:55:d5:4f:06:f9:8b:01:1e:27:b6:c0:41:6d:92:eb:
82:92:3d:98:e4:8a:d3:67:a5:11:79:a9:73:c6:af:71:ab:ab:
62:ea:e2:95:4f:10:c2:4a:85:3c:65:e0:7f:14:eb:09:5b:57:
4c:54:65:86:b0:3a:a8:9f:07:b6:24:0b:07:3c:a8:69:59:44:
4c:6d:fa:d0:57:47:6b:ae:9a:40:b6:55:9e:95:0b:64:ba:d1:
b2:94:59:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZpFeOn9GMuyJm8T7A5p0m7sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjUxMTAyMTY0OTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTVjYzlmZTc2YThlYTFiYzhmZTYzYWQ3YzgxZjUxMzY1OWNkMTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3ZK4rGjcJ1iQX4eV+Zz0vyLezL/
hcIszqLk6VjprEFIxhu2nhJhiW0x8uJTtODA5LX9ig5Mw1wlR0LS2JnvMUx4CD1m
boD6ZF3Koz+i+TaHb+GsY2qcd8mmDMe+/XlPj0zpjn/aa7G20kdnavbDqkxGXfTQ
eHMAywcAu7XBKpsPlEonKO7vEB3nGYhHPMzfF6sXvTfDr76Io+NCkKsEMqqqihst
WHsvbrQ1yImR4/xTWc7ZbFMb6JEtiBaKaqCGAIv2QP71ao9o1nBjC1qkSqFYMZ3g
maR8djz3MRHxoSWV6ly31c3YZrkApX+WP20KmNczhXVL7d4T6jS+Ne6BBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPFcyf52qOobyP5jrXyB9RNlnNF+MB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvOFZ6Sl9uYW82aHZJX21PdGZJSDFFMldjMFg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EUIMA0G
CSqGSIb3DQEBCwUAA4IBAQAn1YMG46d3jaYWaBXJClbbGnithTpl+5pI1OSl9Mxx
e8a0dk+1MGgXWUwjCQVyvxDja7GH8catEyQQ3Vy72bv5Y7wuyyRC7GUogbrcCvfB
txNmDK462qP7JYlXhaEeBSJ9H6BgvM5nxFgTdhnLCavW5jrZ/OlXMNfuZRJbxd3T
OetuQEdEX/ENXR3+osjkKrAdEBnf0ReBPrIXmi4SWSOM3RDa0adV1U8G+YsBHie2
wEFtkuuCkj2Y5IrTZ6URealzxq9xq6ti6uKVTxDCSoU8ZeB/FOsJW1dMVGWGsDqo
nwe2JAsHPKhpWURMbfrQV0drrppAtlWelQtkutGylFlX
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:04:19 2025 by rpki-client