Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/S8_Fg8ytFF0tZ9kXzqLdIHZcAe4.roa
File: S8_Fg8ytFF0tZ9kXzqLdIHZcAe4.roa (raw, json)
Hash identifier: k0MUzfyKgSwFW5KYtO8cWP9faKM6iooPUUBEmeIqdP0=
Subject key identifier: 4B:CF:C5:83:CC:AD:14:5D:2D:67:D9:17:CE:A2:DD:20:76:5C:01:EE
Certificate issuer: /CN=33954330349f57502a76ae6e99987efc3e3b8109
Certificate serial: 019856B218C7D3C3E619C946CF590371420B
Authority key identifier: 33:95:43:30:34:9F:57:50:2A:76:AE:6E:99:98:7E:FC:3E:3B:81:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/S8_Fg8ytFF0tZ9kXzqLdIHZcAe4.roa
Signing time: Tue 29 Jul 2025 14:59:29 +0000
ROA not before: Tue 29 Jul 2025 14:59:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198330
IP address blocks: 45.10.180.0/22 maxlen: 24
45.12.224.0/22 maxlen: 24
79.110.56.0/22 maxlen: 24
134.90.136.0/21 maxlen: 24
185.55.96.0/22 maxlen: 24
185.104.172.0/22 maxlen: 24
185.128.64.0/22 maxlen: 24
185.243.1.0/24 maxlen: 24
2a03:c280::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:b2:18:c7:d3:c3:e6:19:c9:46:cf:59:03:71:42:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33954330349f57502a76ae6e99987efc3e3b8109
Validity
Not Before: Jul 29 14:59:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4bcfc583ccad145d2d67d917cea2dd20765c01ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0c:c7:15:f4:fd:86:77:44:84:e9:f3:10:5f:
1f:6d:fb:10:b2:4c:40:24:ef:56:ae:b9:3d:17:70:
92:b0:64:40:75:10:8b:f3:5a:80:d2:18:d4:38:1d:
7e:b8:5d:c6:16:fb:ae:7f:df:de:b6:0d:1f:7f:7e:
d4:e2:6f:cc:e3:b1:6c:71:30:ff:c4:45:5e:65:91:
fd:30:99:53:6e:0b:fd:37:da:0c:1d:1a:24:8a:78:
12:0b:83:e9:9a:f8:64:ea:88:a0:8f:f6:d4:90:bc:
bc:fd:3d:db:94:a3:02:51:82:93:36:4b:43:04:77:
cf:4c:3f:ae:15:ca:86:47:be:28:d3:e7:31:9c:05:
99:75:52:6e:e0:bd:39:d8:39:8d:11:db:c2:31:55:
19:a8:8b:65:da:15:27:ea:6a:ec:eb:1c:60:7a:bb:
c7:ab:83:e0:bf:41:8d:59:0a:7a:66:ea:05:d8:53:
b7:f2:30:a8:e3:dc:e5:09:a3:d4:2f:c9:fa:67:2c:
86:3f:67:63:0b:8d:ab:37:3f:ce:91:82:ba:e8:55:
61:fb:da:24:5c:6f:ad:dd:2e:d1:3b:89:14:cc:4f:
46:df:86:50:42:2e:a4:a2:02:93:06:f0:54:5f:63:
32:01:9b:f1:27:e8:06:06:59:c4:a9:11:4d:b4:b1:
8d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CF:C5:83:CC:AD:14:5D:2D:67:D9:17:CE:A2:DD:20:76:5C:01:EE
X509v3 Authority Key Identifier:
keyid:33:95:43:30:34:9F:57:50:2A:76:AE:6E:99:98:7E:FC:3E:3B:81:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/S8_Fg8ytFF0tZ9kXzqLdIHZcAe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.180.0/22
45.12.224.0/22
79.110.56.0/22
134.90.136.0/21
185.55.96.0/22
185.104.172.0/22
185.128.64.0/22
185.243.1.0/24
IPv6:
2a03:c280::/32
Signature Algorithm: sha256WithRSAEncryption
6c:a0:2f:7a:34:4f:47:46:d9:4f:ee:30:0c:a5:dd:3e:e6:89:
c7:cf:09:b1:ac:50:ab:7f:9b:ae:9a:f3:1c:67:6f:c9:7f:e5:
52:94:83:25:69:2a:2a:49:64:8b:3f:0a:b7:fb:33:34:a3:b4:
59:c0:61:af:f7:17:d5:bf:03:31:af:97:12:3b:7d:e0:b2:0f:
e3:8c:7b:eb:f6:c0:bf:a8:72:40:8e:fb:2f:01:08:8a:c9:f4:
a3:cd:ce:05:12:a2:8b:1f:83:5e:70:e7:09:a4:a5:6b:5f:31:
d0:75:42:c6:8f:57:c5:6d:ca:37:80:3a:da:a7:e3:49:41:90:
d6:4c:1e:2e:5b:72:3c:fb:61:c4:c1:5e:c1:0a:23:67:03:50:
5c:35:92:f1:b2:36:be:90:3b:6e:7f:3b:cb:f3:7e:ae:48:7a:
6d:e2:dc:69:bf:d4:45:25:ae:3d:ef:01:ed:8f:8e:2f:0d:8c:
78:02:b6:e0:be:0f:84:da:c9:2b:b5:4f:eb:b3:e1:6a:60:fd:
46:a7:de:2c:a3:32:56:a8:de:b6:ea:9a:8a:7d:48:24:46:6f:
c9:bc:23:ce:07:77:74:1d:53:52:05:b3:1c:df:e2:86:1a:33:
b6:17:82:1c:e1:7d:bc:d3:05:36:f7:86:e0:5f:a7:44:71:1a:
68:ce:f5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:22:26 2025 by rpki-client