Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/x8dIWZmm6O_wjC9mnSs5Y190Rls.roa
File: x8dIWZmm6O_wjC9mnSs5Y190Rls.roa (raw, json)
Hash identifier: XXvfuCbmZ8Tm/xcnQ1IvizcMILdMc99MtHoub3E0mhU=
Subject key identifier: C7:C7:48:59:99:A6:E8:EF:F0:8C:2F:66:9D:2B:39:63:5F:74:46:5B
Certificate issuer: /CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Certificate serial: 019873E0CD6F1C5AC56FE082444814E06D5A
Authority key identifier: 54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/x8dIWZmm6O_wjC9mnSs5Y190Rls.roa
Signing time: Mon 04 Aug 2025 06:59:29 +0000
ROA not before: Mon 04 Aug 2025 06:59:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 185.101.168.0/23 maxlen: 24
185.101.170.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.mft
rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e0:cd:6f:1c:5a:c5:6f:e0:82:44:48:14:e0:6d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Validity
Not Before: Aug 4 06:59:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7c7485999a6e8eff08c2f669d2b39635f74465b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c6:8b:78:4f:79:c8:b1:f9:db:7e:aa:b5:6a:
b5:22:df:51:26:3c:62:8d:a8:5d:3f:74:8b:21:11:
7f:79:65:34:38:46:3e:18:95:ab:0d:b2:d8:4d:8e:
eb:69:62:09:e6:a6:4d:0a:24:66:61:1d:31:c3:d9:
d6:f6:8a:e9:e0:8c:4f:69:b7:a6:6a:f8:27:0b:e9:
25:bd:15:30:33:58:c5:23:59:d3:1d:81:0b:ff:77:
23:b7:dc:ee:06:3b:c3:0b:4f:c7:cd:9a:6f:13:07:
d6:ad:31:0e:29:0d:32:e9:68:67:cc:3d:3f:91:3c:
cb:e9:67:b4:a3:30:b4:76:67:96:e4:6f:5e:9c:fd:
40:4d:4b:c2:5c:bb:86:97:df:fc:5b:5c:aa:7e:3a:
30:e8:e8:6a:47:0a:1f:24:5c:77:7d:65:f8:75:9f:
69:13:d9:f1:e6:61:ce:d7:1a:92:28:69:f0:60:44:
95:79:75:e4:d8:d4:26:35:04:f2:3d:fc:b9:97:93:
53:9b:49:d8:be:9d:60:92:4c:d9:ca:2b:5b:80:63:
f7:07:29:1b:0a:78:97:ea:eb:b7:54:11:7a:38:c3:
05:2d:7a:50:4b:2c:ba:4a:a6:5f:b3:59:05:6b:d2:
a4:ee:59:b5:9f:b6:df:ab:01:88:f2:e9:4b:ab:a3:
10:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C7:48:59:99:A6:E8:EF:F0:8C:2F:66:9D:2B:39:63:5F:74:46:5B
X509v3 Authority Key Identifier:
keyid:54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/x8dIWZmm6O_wjC9mnSs5Y190Rls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.168.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:7d:c8:4c:70:53:d7:c8:33:a7:e5:4b:6c:1f:95:ac:a6:66:
51:de:37:9d:24:09:17:5a:c0:c5:99:41:cb:90:46:9e:88:23:
2d:7f:8e:f6:af:e8:02:38:01:e0:4b:a0:01:23:34:a8:e4:e0:
49:3c:3e:2a:12:13:17:76:f9:0b:51:d8:1d:c8:2c:bb:30:6b:
37:ea:27:84:65:bc:29:28:f1:c4:f7:88:2d:1f:f2:01:80:4c:
14:ad:0a:85:7a:7b:67:d5:3b:51:51:d5:04:94:1a:3d:07:ff:
3c:6d:b4:f9:09:3b:1d:e7:f8:c9:aa:f4:e9:dd:e1:d0:37:04:
2f:68:30:ee:d2:98:23:78:8a:56:9c:2a:ca:7d:a8:9d:e7:7b:
26:46:d3:52:ca:87:5c:ca:fe:56:58:92:33:5e:ca:c0:d7:12:
be:5d:51:2f:10:43:57:08:5c:a1:14:40:1c:96:f9:2b:78:a6:
b9:31:77:be:73:d8:5a:c9:f9:27:35:45:30:9b:64:ca:ba:b0:
c3:27:e0:7a:95:61:21:6d:8b:94:db:95:26:38:21:cc:68:8a:
ec:c5:2e:0f:6c:ce:60:e4:f7:e0:df:ab:a7:34:82:c6:90:8b:
02:a0:18:3e:cf:ba:8f:2e:a0:c4:08:75:d7:6d:9c:10:76:31:
43:dd:04:be
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZhz4M1vHFrFb+CCREgU4G1aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MWZkYzdhMmYxMWE1NzY2ZDNhZDdiZGY2MjVjZTVlMTE5
YThmZGYwHhcNMjUwODA0MDY1OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2M3NDg1OTk5YTZlOGVmZjA4YzJmNjY5ZDJiMzk2MzVmNzQ0NjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMaLeE95yLH5236qtWq1It9RJjxi
jahdP3SLIRF/eWU0OEY+GJWrDbLYTY7raWIJ5qZNCiRmYR0xw9nW9orp4IxPabem
avgnC+klvRUwM1jFI1nTHYEL/3cjt9zuBjvDC0/HzZpvEwfWrTEOKQ0y6WhnzD0/
kTzL6We0ozC0dmeW5G9enP1ATUvCXLuGl9/8W1yqfjow6OhqRwofJFx3fWX4dZ9p
E9nx5mHO1xqSKGnwYESVeXXk2NQmNQTyPfy5l5NTm0nYvp1gkkzZyitbgGP3Bykb
CniX6uu3VBF6OMMFLXpQSyy6SqZfs1kFa9Kk7lm1n7bfqwGI8ulLq6MQ4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMfHSFmZpujv8IwvZp0rOWNfdEZbMB8GA1UdIwQY
MBaAFFQf3HovEaV2bTrXvfYlzl4Rmo/fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkJfY2VpOFJwWFp0T3RlOTlpWE9YaEdhajk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC84ZmFkNjctYmI2Yi00NzczLWI4MWUt
YzkwMGE4OWYyMGYxLzEveDhkSVdabW02T193akM5bW5TczVZMTkwUmxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC84ZmFkNjctYmI2Yi00NzczLWI4MWUtYzkwMGE4OWYyMGYx
LzEvVkJfY2VpOFJwWFp0T3RlOTlpWE9YaEdhajk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWWoMA0G
CSqGSIb3DQEBCwUAA4IBAQBqfchMcFPXyDOn5UtsH5WspmZR3jedJAkXWsDFmUHL
kEaeiCMtf472r+gCOAHgS6ABIzSo5OBJPD4qEhMXdvkLUdgdyCy7MGs36ieEZbwp
KPHE94gtH/IBgEwUrQqFentn1TtRUdUElBo9B/88bbT5CTsd5/jJqvTp3eHQNwQv
aDDu0pgjeIpWnCrKfaid53smRtNSyodcyv5WWJIzXsrA1xK+XVEvEENXCFyhFEAc
lvkreKa5MXe+c9hayfknNUUwm2TKurDDJ+B6lWEhbYuU25UmOCHMaIrsxS4PbM5g
5Pfg36unNILGkIsCoBg+z7qPLqDECHXXbZwQdjFD3QS+
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:17:43 2025 by rpki-client