Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/8Q0mj8ELLT0l3qpTNfSPe5yevws.roa
File: 8Q0mj8ELLT0l3qpTNfSPe5yevws.roa (raw, json)
Hash identifier: 5QH/DPp/MLTxOyf+/vEAFoLpbGaLA0S+MvXcD7V2QGQ=
Subject key identifier: F1:0D:26:8F:C1:0B:2D:3D:25:DE:AA:53:35:F4:8F:7B:9C:9E:BF:0B
Certificate issuer: /CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4
Certificate serial: 0198554AD81DAC7921067D66ADC4B477CA30
Authority key identifier: AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/8Q0mj8ELLT0l3qpTNfSPe5yevws.roa
Signing time: Tue 29 Jul 2025 08:27:04 +0000
ROA not before: Tue 29 Jul 2025 08:27:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 217.149.25.0/24 maxlen: 24
217.149.29.0/24 maxlen: 24
217.149.30.0/24 maxlen: 24
217.149.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:4a:d8:1d:ac:79:21:06:7d:66:ad:c4:b4:77:ca:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4
Validity
Not Before: Jul 29 08:27:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f10d268fc10b2d3d25deaa5335f48f7b9c9ebf0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ac:b5:0a:68:72:45:c9:4b:b4:a2:a2:9f:9b:
c6:45:ad:92:bb:ec:53:03:3e:06:00:55:03:60:fa:
1f:d4:18:cb:21:7a:e2:90:90:d1:dc:d7:84:d4:b1:
0d:71:78:07:db:67:91:a6:66:17:23:04:e7:9b:91:
b0:a5:ed:fd:b7:59:e0:de:f7:3c:da:39:a4:af:89:
e2:36:f6:a8:cb:df:e5:9d:57:d8:0f:0d:ec:51:0b:
cc:da:e1:9d:48:dd:a9:cb:d7:ed:36:de:48:fa:bc:
0b:bb:12:5c:dd:23:0c:fd:05:08:d0:94:b8:e7:21:
36:c6:11:50:49:3d:5a:e4:72:33:40:db:ef:d2:69:
20:b5:71:38:ff:42:c8:48:9b:5c:00:16:22:74:0d:
74:43:de:5f:79:e4:e6:31:e9:85:90:5f:69:96:5a:
27:f7:7c:82:83:8c:8b:9e:85:ce:bc:2b:21:5f:ee:
bb:41:33:fb:9d:f6:ec:ef:48:a7:d4:8a:8f:91:54:
33:ac:dd:18:86:7f:1c:cb:e0:13:65:a6:8a:f0:a7:
aa:5d:0f:9c:84:80:00:4b:92:a4:07:fd:98:fe:d2:
d4:8a:87:22:9e:01:be:45:57:51:e6:9a:69:da:07:
46:c6:14:fe:fd:a1:89:45:fc:53:c1:04:f1:86:1a:
18:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0D:26:8F:C1:0B:2D:3D:25:DE:AA:53:35:F4:8F:7B:9C:9E:BF:0B
X509v3 Authority Key Identifier:
keyid:AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/8Q0mj8ELLT0l3qpTNfSPe5yevws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.149.25.0/24
217.149.29.0-217.149.31.255
Signature Algorithm: sha256WithRSAEncryption
a7:b7:f8:33:f4:db:f9:e5:63:c3:ca:61:5f:6c:ae:e9:62:12:
b1:67:82:8c:00:3a:64:64:7e:2d:96:d9:ff:70:b6:ef:31:d5:
1b:05:ba:f8:ed:8f:ed:10:df:19:5b:8f:e0:3f:28:58:3b:f0:
16:76:12:ec:85:0a:89:f7:74:ca:25:58:01:88:7e:d0:50:dd:
32:34:36:d0:75:1e:c6:ef:4f:c4:72:ef:f7:19:b5:78:09:c5:
40:f5:13:06:5d:75:29:15:87:f2:89:c5:7a:b3:61:a9:4d:7b:
2e:c6:db:23:f8:42:d5:11:07:89:d3:72:7d:da:a5:7d:f5:8d:
9a:fe:db:fc:90:0a:f0:04:f2:13:78:a8:15:99:48:7b:27:5f:
23:10:3f:01:58:0a:01:00:6d:38:9c:dd:24:20:21:be:92:fd:
28:d3:7a:e5:12:42:7c:75:a8:b1:37:4f:c8:28:a5:c5:85:82:
3c:f9:2d:91:da:0f:aa:45:e8:6b:bf:d4:e3:fe:d1:8c:df:a0:
67:d8:9c:25:fb:6e:f4:bb:9f:83:fd:45:de:ec:71:2f:c8:b5:
91:b8:11:0f:e7:56:96:e5:f1:f8:a5:ce:3f:03:55:f9:21:79:
0f:92:2d:2d:cb:fe:b0:a1:97:e5:a1:29:cd:d6:00:82:5e:40:
c9:a4:b0:0c
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZhVStgdrHkhBn1mrcS0d8owMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNjc4MmNkN2JiOTIyY2E0YmM2ZTgwZTc4NTdmNDkyMmY1
YzIzYzQwHhcNMjUwNzI5MDgyNzA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTBkMjY4ZmMxMGIyZDNkMjVkZWFhNTMzNWY0OGY3YjljOWViZjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKy1CmhyRclLtKKin5vGRa2Su+xT
Az4GAFUDYPof1BjLIXrikJDR3NeE1LENcXgH22eRpmYXIwTnm5Gwpe39t1ng3vc8
2jmkr4niNvaoy9/lnVfYDw3sUQvM2uGdSN2py9ftNt5I+rwLuxJc3SMM/QUI0JS4
5yE2xhFQST1a5HIzQNvv0mkgtXE4/0LISJtcABYidA10Q95feeTmMemFkF9pllon
93yCg4yLnoXOvCshX+67QTP7nfbs70in1IqPkVQzrN0Yhn8cy+ATZaaK8KeqXQ+c
hIAAS5KkB/2Y/tLUiocingG+RVdR5ppp2gdGxhT+/aGJRfxTwQTxhhoYAwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFPENJo/BCy09Jd6qUzX0j3ucnr8LMB8GA1UdIwQY
MBaAFKpngs17uSLKS8boDnhX9JIvXCPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW1lQ3pYdTVJc3BMeHVnT2VGZjBraTljSThRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8zOWY0YmYtMzhmYy00MzEyLTg1MTYt
YjQzMGU4ZGU3NzQ3LzEvOFEwbWo4RUxMVDBsM3FwVE5mU1BlNXlldndzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8zOWY0YmYtMzhmYy00MzEyLTg1MTYtYjQzMGU4ZGU3NzQ3
LzEvcW1lQ3pYdTVJc3BMeHVnT2VGZjBraTljSThRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQA2ZUZMAwD
BADZlR0DBAXZlQAwDQYJKoZIhvcNAQELBQADggEBAKe3+DP02/nlY8PKYV9sruli
ErFngowAOmRkfi2W2f9wtu8x1RsFuvjtj+0Q3xlbj+A/KFg78BZ2EuyFCon3dMol
WAGIftBQ3TI0NtB1HsbvT8Ry7/cZtXgJxUD1EwZddSkVh/KJxXqzYalNey7G2yP4
QtURB4nTcn3apX31jZr+2/yQCvAE8hN4qBWZSHsnXyMQPwFYCgEAbTic3SQgIb6S
/SjTeuUSQnx1qLE3T8gopcWFgjz5LZHaD6pF6Gu/1OP+0YzfoGfYnCX7bvS7n4P9
Rd7scS/ItZG4EQ/nVpbl8filzj8DVfkheQ+SLS3L/rChl+WhKc3WAIJeQMmksAw=
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:52:16 2025 by rpki-client