Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/n8grRcjYI8DzhU_PyxKKYOTlQMo.roa
File: n8grRcjYI8DzhU_PyxKKYOTlQMo.roa (raw, json)
Hash identifier: xgJvnRHC/iqc2iSgxKESHKwatBFYEv01jlV2QZqtIKM=
Subject key identifier: 9F:C8:2B:45:C8:D8:23:C0:F3:85:4F:CF:CB:12:8A:60:E4:E5:40:CA
Certificate issuer: /CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4
Certificate serial: 0198555FE7132B3CC58E8A072F455515FE8F
Authority key identifier: AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/n8grRcjYI8DzhU_PyxKKYOTlQMo.roa
Signing time: Tue 29 Jul 2025 08:50:04 +0000
ROA not before: Tue 29 Jul 2025 08:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31512
IP address blocks: 217.149.16.0/22 maxlen: 22
217.149.20.0/25 maxlen: 25
217.149.20.128/27 maxlen: 27
217.149.20.160/27 maxlen: 27
217.149.20.192/29 maxlen: 29
217.149.23.0/25 maxlen: 25
217.149.23.128/25 maxlen: 25
217.149.24.0/24 maxlen: 24
217.149.26.0/24 maxlen: 24
217.149.27.0/24 maxlen: 24
217.149.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 Aug 2025 13:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:5f:e7:13:2b:3c:c5:8e:8a:07:2f:45:55:15:fe:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4
Validity
Not Before: Jul 29 08:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fc82b45c8d823c0f3854fcfcb128a60e4e540ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fe:ee:71:b6:4a:3c:b6:14:8d:34:65:8f:e8:
a2:9c:e6:a5:24:4d:d0:cd:30:06:11:cc:35:1b:62:
6e:0e:0a:d6:03:00:21:2a:46:4a:1e:39:52:ec:cc:
c0:d4:20:cb:95:ed:7c:e7:2a:c5:37:f0:35:3e:7d:
b4:de:e4:7c:74:90:fb:28:3a:2a:21:98:a3:d4:e9:
15:47:dd:d2:e1:0b:f4:9d:f9:03:3d:b2:d0:2e:ce:
22:a6:ac:ab:d2:c8:82:81:77:8c:da:4b:8e:77:0c:
2e:2b:23:6e:1a:b3:d8:6d:47:b5:6a:93:de:f9:12:
fc:3b:2d:a9:79:b6:39:ee:97:4a:71:ef:97:03:c4:
fd:5a:f5:06:e1:2a:61:bd:72:e1:f9:c8:64:02:ea:
dd:f2:e2:5c:19:19:24:19:a8:c0:d4:e6:af:47:95:
c7:e2:d6:73:80:27:64:cb:db:bc:db:4d:fc:90:f5:
eb:69:59:ce:7c:b9:31:50:89:5e:3e:cf:a8:a0:08:
ae:22:c1:db:a9:49:a1:c7:cc:d8:30:bc:4b:0a:eb:
e9:f9:7c:ae:66:8c:47:41:59:51:4c:73:f3:1f:46:
dc:12:6e:b1:6e:b2:fd:87:2a:40:6c:17:d3:95:9d:
09:89:d6:f0:bf:0c:a2:74:e7:01:4d:1a:9e:15:78:
2f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C8:2B:45:C8:D8:23:C0:F3:85:4F:CF:CB:12:8A:60:E4:E5:40:CA
X509v3 Authority Key Identifier:
keyid:AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/n8grRcjYI8DzhU_PyxKKYOTlQMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.149.16.0-217.149.20.199
217.149.23.0-217.149.24.255
217.149.26.0-217.149.28.255
Signature Algorithm: sha256WithRSAEncryption
85:89:33:e9:5a:a6:16:52:fc:16:ff:00:ff:4b:a8:4c:d0:0d:
fc:5a:f8:7b:de:1e:9d:a0:c9:64:5e:9a:b3:13:ce:43:05:d8:
79:8b:d6:4c:62:d4:41:1b:cf:a1:ab:d1:d1:1e:ea:9b:73:ea:
db:20:5b:5a:7d:8d:e4:b0:90:5f:7b:2a:bc:95:c4:e9:03:10:
14:fd:3d:36:84:ec:7f:64:55:f2:4a:82:d8:f5:bb:f0:e2:94:
b8:a3:4b:79:b8:4f:3c:b2:96:c6:09:02:cb:7f:f7:4e:07:57:
a1:15:c2:34:7e:4b:99:ed:73:4b:3f:c1:c4:29:38:e7:ab:7f:
46:bc:13:93:84:90:1f:36:38:f5:74:7a:5d:6e:9c:88:42:04:
58:74:d5:bd:e3:e3:28:9c:71:97:71:60:60:8b:2f:b0:d8:55:
de:84:2b:2a:d1:51:2e:a7:6d:26:11:9b:bd:99:33:bc:fa:4a:
6b:19:7c:fa:15:c4:cd:c2:5b:09:cd:fc:b6:d9:42:45:63:a7:
2f:8f:1b:2f:28:3d:4c:f1:1b:ca:af:70:f4:41:c4:b8:70:f1:
bd:5c:ed:92:6a:8c:c5:06:82:3c:92:3c:57:88:a4:fc:da:c7:
11:20:92:a9:df:55:74:db:45:71:49:61:27:ee:72:1e:9b:93:
9b:5b:91:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 20:17:22 2025 by rpki-client