Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/Cm8RCYhViL8QXogPawjCQz1KEOE.roa
File: Cm8RCYhViL8QXogPawjCQz1KEOE.roa (raw, json)
Hash identifier: 0Bf8kPU+ifdON2kDga7X6CtCb4LJyzlqkerUdEy/siA=
Subject key identifier: 0A:6F:11:09:88:55:88:BF:10:5E:88:0F:6B:08:C2:43:3D:4A:10:E1
Certificate issuer: /CN=98b11161b9ed4bb08a0026d5cfd1fec9687c19c3
Certificate serial: 019856A9DADE55A9E468BF573DC4A8EA0F0F
Authority key identifier: 98:B1:11:61:B9:ED:4B:B0:8A:00:26:D5:CF:D1:FE:C9:68:7C:19:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mLERYbntS7CKACbVz9H-yWh8GcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/Cm8RCYhViL8QXogPawjCQz1KEOE.roa
Signing time: Tue 29 Jul 2025 14:50:28 +0000
ROA not before: Tue 29 Jul 2025 14:50:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 193.8.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mLERYbntS7CKACbVz9H-yWh8GcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:a9:da:de:55:a9:e4:68:bf:57:3d:c4:a8:ea:0f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98b11161b9ed4bb08a0026d5cfd1fec9687c19c3
Validity
Not Before: Jul 29 14:50:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a6f1109885588bf105e880f6b08c2433d4a10e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:76:d1:8f:16:3a:96:af:71:86:83:82:17:5c:
a3:fa:99:b1:9c:7a:fd:93:6d:9e:03:be:3b:ec:a2:
84:f5:c8:3b:97:d9:c6:0a:1b:ce:83:dd:16:bc:10:
3f:c4:9c:76:a1:0d:04:28:cb:64:b7:65:b3:60:8c:
b1:89:69:33:4d:1b:23:fa:e4:9d:38:a1:e6:02:83:
bf:d8:78:03:d6:6b:bf:c6:4d:a6:00:35:9a:56:31:
d8:04:47:6c:6e:09:ac:32:75:d5:8e:cb:8b:11:ec:
be:70:f9:a0:86:25:07:ac:6a:01:b2:c0:b9:95:de:
30:fd:69:1e:8d:e7:5e:94:f7:bb:b7:8b:c6:7c:89:
9c:f2:b2:c5:9f:61:ba:73:86:d2:a2:ba:2f:9e:ae:
55:82:e9:88:39:94:0f:4d:b7:d2:43:5a:ad:ff:e5:
e8:aa:b1:3d:3d:3e:27:5b:3c:ef:35:60:7d:b2:09:
bd:0d:5d:b6:a9:55:c8:e8:f0:65:70:b8:ce:5f:f0:
34:bd:ae:45:98:8b:ac:d0:ed:8a:c0:aa:4c:3c:95:
5f:50:f2:c7:20:17:29:ab:c2:d1:87:3c:46:05:30:
15:14:21:62:db:3f:b5:cf:f8:1c:d7:6c:0d:e4:82:
6a:a7:02:24:2e:45:87:c7:1a:06:dc:f8:9e:10:26:
79:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6F:11:09:88:55:88:BF:10:5E:88:0F:6B:08:C2:43:3D:4A:10:E1
X509v3 Authority Key Identifier:
keyid:98:B1:11:61:B9:ED:4B:B0:8A:00:26:D5:CF:D1:FE:C9:68:7C:19:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLERYbntS7CKACbVz9H-yWh8GcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/Cm8RCYhViL8QXogPawjCQz1KEOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/504bfb-2941-447f-9c5e-c0f9f3d66872/1/mLERYbntS7CKACbVz9H-yWh8GcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.95.0/24
Signature Algorithm: sha256WithRSAEncryption
66:35:23:71:3e:15:b1:d3:59:c8:b2:74:88:7d:67:47:46:96:
0a:54:20:70:48:57:c9:03:97:5d:e5:14:3f:2b:cb:c0:26:aa:
e8:01:85:7c:20:f1:a2:ce:5b:f5:11:f3:23:80:a9:f9:70:cb:
27:32:d8:5d:d8:63:9b:4e:e6:f5:19:51:a5:60:72:a4:98:6d:
72:85:61:53:0b:9b:e2:2c:e4:5a:7d:d4:08:fc:47:c4:58:0d:
00:79:79:19:1f:ec:dd:80:3a:2b:42:bd:0c:29:bc:f8:5c:28:
2f:c8:0b:5e:8d:14:6d:4c:a0:9f:ff:83:e1:87:d8:c3:5b:9b:
77:c2:4b:d0:d5:f3:f3:e7:ca:3a:73:46:e3:05:99:af:93:d3:
0d:9f:b3:d3:61:36:22:32:1d:9b:f6:e3:2f:7b:69:f8:ae:78:
11:fe:8a:a0:2c:76:65:11:ec:af:77:d9:01:02:95:fe:cd:ef:
f0:7b:83:e7:65:93:90:3d:90:ad:56:1e:b6:4b:94:c6:fd:93:
5c:8c:d6:2a:4b:16:24:52:75:df:45:74:84:c1:e7:7e:79:aa:
5d:c9:85:f8:4b:9d:bc:fa:37:be:73:9d:28:9a:a5:41:d9:35:
f5:a1:cd:5d:a2:d9:90:ee:ab:3d:50:5b:eb:49:b3:d0:2a:16:
b8:76:f8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:48:54 2025 by rpki-client