Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/m8u-o_vicIqlceoASQ0qNaAVPIQ.roa
File: m8u-o_vicIqlceoASQ0qNaAVPIQ.roa (raw, json)
Hash identifier: yHtYWyIipHFt981m+Z6wuEEsFCa3G3jeZI4OXrwC65o=
Subject key identifier: 9B:CB:BE:A3:FB:E2:70:8A:A5:71:EA:00:49:0D:2A:35:A0:15:3C:84
Certificate issuer: /CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b
Certificate serial: 0198797CEC0F765650327D1216A6E13A21BE
Authority key identifier: B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/m8u-o_vicIqlceoASQ0qNaAVPIQ.roa
Signing time: Tue 05 Aug 2025 09:08:06 +0000
ROA not before: Tue 05 Aug 2025 09:08:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 154049
IP address blocks: 193.3.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 18:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:7c:ec:0f:76:56:50:32:7d:12:16:a6:e1:3a:21:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b
Validity
Not Before: Aug 5 09:08:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bcbbea3fbe2708aa571ea00490d2a35a0153c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3e:81:d4:22:7e:65:7f:2e:32:a1:56:12:4b:
86:b8:a9:ac:ee:be:5e:26:55:e0:ba:bb:f5:f1:11:
bb:9f:97:c1:53:6f:50:29:74:12:fc:15:c0:0a:e6:
72:a1:d9:e6:ac:f4:d5:e7:fa:6a:57:d6:64:76:5f:
40:6f:ed:19:a2:c9:36:5d:3d:24:2c:1c:e2:d0:9c:
be:52:6b:ef:59:19:e0:c1:43:ba:fb:48:13:09:a1:
11:9e:b8:dc:bb:ef:99:a6:28:0f:1f:d2:92:9c:5f:
94:d0:d0:aa:6d:54:07:ed:f5:a8:5d:5e:a7:c8:0f:
6f:bc:aa:b3:2c:c7:ba:90:17:40:1c:42:22:e7:3a:
9f:96:6d:f9:f5:4e:b4:23:bd:23:13:3c:39:72:7a:
5d:cb:52:18:91:ff:c7:3a:a2:5a:6b:8c:1b:a6:e5:
ec:01:a1:b1:08:8c:d6:d3:f2:49:54:28:ae:10:61:
ba:f3:6a:fd:12:d4:7e:d2:2f:2b:f1:ea:04:17:c0:
ba:ec:3a:59:0d:54:09:82:47:70:c6:76:21:30:e1:
8b:e6:4c:8b:a8:f2:9b:b0:ce:ba:ff:d8:a2:4d:58:
77:70:b8:ef:18:53:18:17:06:41:e2:e3:7d:cf:a6:
59:70:44:6b:e9:70:b6:7a:de:84:b6:e5:e4:cf:51:
1c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CB:BE:A3:FB:E2:70:8A:A5:71:EA:00:49:0D:2A:35:A0:15:3C:84
X509v3 Authority Key Identifier:
keyid:B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/m8u-o_vicIqlceoASQ0qNaAVPIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.190.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:a0:2b:17:b6:34:a0:6a:b7:f3:3d:84:da:1b:77:29:e9:81:
8d:f1:89:34:c5:c7:6f:90:9d:e5:2c:ca:7a:be:d5:88:cc:dd:
24:ad:2b:66:03:0c:41:b2:ca:63:f3:48:3c:89:32:80:ef:6c:
a9:66:bc:d2:48:38:b3:7a:23:95:36:36:da:96:38:67:6d:75:
8c:24:6b:a1:1f:d6:9c:16:4f:1f:d2:93:6b:9c:a3:ed:7c:f9:
e4:f2:b5:d0:45:33:09:25:c1:7d:10:19:60:a3:cc:58:9c:92:
7b:00:27:87:66:90:0c:5a:50:21:95:81:18:3e:0c:f5:8f:ac:
b0:77:77:e8:f2:c2:d6:d7:44:f0:52:81:20:df:d0:2e:b6:66:
39:af:36:99:02:3c:8a:55:7c:30:32:af:ce:14:6e:e8:ec:c0:
34:eb:8a:52:dd:88:ea:f8:d7:81:2e:56:70:78:ce:5c:8d:83:
ca:0a:6a:ec:b8:db:c8:83:87:c1:3d:88:7c:f5:24:0c:06:57:
fd:63:5d:6f:d4:4c:7a:d1:96:90:79:de:32:1b:6e:11:cb:b1:
18:48:81:76:75:8b:35:02:e6:12:80:28:ae:5c:71:94:48:b8:
92:24:f8:60:2d:32:b3:2a:1f:21:92:98:93:17:f0:e9:94:9f:
3a:35:15:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:39 2025 by rpki-client