Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/8W6gEnbSbHB4zwWx578JWmNIZ9s.roa
File: 8W6gEnbSbHB4zwWx578JWmNIZ9s.roa (raw, json)
Hash identifier: HhOmkvbfHuyLR8S9fvlNMW34CV2ZzM/vCu2LBQ3dRHc=
Subject key identifier: F1:6E:A0:12:76:D2:6C:70:78:CF:05:B1:E7:BF:09:5A:63:48:67:DB
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 0197629E1A56CF077CDC16D877472C4DEE43
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/8W6gEnbSbHB4zwWx578JWmNIZ9s.roa
Signing time: Thu 12 Jun 2025 05:30:17 +0000
ROA not before: Thu 12 Jun 2025 05:30:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 45.146.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:9e:1a:56:cf:07:7c:dc:16:d8:77:47:2c:4d:ee:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Jun 12 05:30:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f16ea01276d26c7078cf05b1e7bf095a634867db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a5:3d:aa:35:e1:11:2b:3e:ec:eb:14:97:5d:
0b:a1:c7:cd:ca:27:dc:4d:6a:11:c7:3b:60:0d:ec:
08:22:c1:32:3e:67:a9:fd:f4:28:93:11:20:10:80:
7c:65:32:ce:c9:07:53:5a:31:d3:4a:fd:0c:e0:9f:
14:1c:63:a1:ac:d8:88:1b:5e:ea:02:10:bd:ba:1d:
a1:b9:09:ee:37:e9:1a:ca:ad:7a:da:09:be:78:65:
35:02:cb:b6:8f:9a:e4:12:2f:e4:87:bd:0c:81:bd:
96:d0:56:0a:2a:9a:1b:66:dc:ac:53:f2:73:91:df:
cf:92:3e:e6:35:52:7e:f6:90:93:11:82:9b:14:cd:
76:97:e3:e8:d9:82:5b:b6:5b:63:33:00:cb:b7:cc:
10:ce:e2:44:09:8c:58:1f:53:7b:4c:45:3e:2b:cd:
ee:38:fd:80:c0:14:1b:14:42:ff:3e:81:aa:b2:5f:
4b:42:34:45:2c:9d:77:95:e1:25:90:e8:74:a4:7b:
ec:aa:47:c6:b2:40:2f:71:54:5e:d8:02:3d:eb:00:
7d:a1:7f:ae:38:78:d5:2d:8a:7e:27:ce:c3:d2:08:
b5:b5:a5:3b:d2:d9:04:7f:7e:ae:31:76:87:60:7a:
ef:57:53:a4:63:76:79:09:2a:10:d4:06:58:39:9f:
af:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6E:A0:12:76:D2:6C:70:78:CF:05:B1:E7:BF:09:5A:63:48:67:DB
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/8W6gEnbSbHB4zwWx578JWmNIZ9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.201.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:76:52:2c:7a:ff:06:2c:44:65:f4:f1:3e:c1:06:31:36:5b:
13:a2:77:b5:24:bd:bc:ba:12:c1:97:89:ed:0a:9f:a4:30:39:
ad:3e:c5:00:bc:c2:2d:ee:e4:4c:32:78:63:1a:ed:ff:21:be:
fa:b3:cf:b4:8d:d1:a1:e9:57:4c:64:5a:6d:95:a2:32:6d:f3:
bf:06:a2:61:6f:7f:6f:eb:8a:cc:87:17:18:44:2e:b2:d1:7f:
80:cc:5f:d5:b6:16:c2:c6:e4:57:4f:3c:02:95:c6:db:b4:9d:
c4:cf:8a:c7:82:0b:25:0d:b5:37:07:ea:42:56:4c:02:4a:ff:
da:9d:9f:ab:bd:29:71:bf:cb:56:4c:63:00:10:b8:ea:57:a4:
15:ce:0d:6c:7a:fc:33:59:0a:ab:ba:70:71:49:46:e6:28:76:
31:f0:d0:2c:b1:13:fb:22:d8:d2:f8:67:86:88:64:bc:11:91:
4b:38:bf:b4:ee:db:ca:7c:55:de:55:23:f8:f8:18:29:ef:a4:
07:02:a3:2a:73:24:42:6c:50:3f:e2:96:30:16:9e:00:68:35:
ad:0e:37:90:6e:4c:4c:26:d8:d6:d2:7c:e0:57:63:84:cc:11:
11:b1:b4:59:ea:66:4f:3a:e4:fb:b6:d7:e7:03:97:b1:f5:b4:
be:8c:36:43
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZdinhpWzwd83BbYd0csTe5DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz
MGVhMTAwHhcNMjUwNjEyMDUzMDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTZlYTAxMjc2ZDI2YzcwNzhjZjA1YjFlN2JmMDk1YTYzNDg2N2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6U9qjXhESs+7OsUl10LocfNyifc
TWoRxztgDewIIsEyPmep/fQokxEgEIB8ZTLOyQdTWjHTSv0M4J8UHGOhrNiIG17q
AhC9uh2huQnuN+kayq162gm+eGU1Asu2j5rkEi/kh70Mgb2W0FYKKpobZtysU/Jz
kd/Pkj7mNVJ+9pCTEYKbFM12l+Po2YJbtltjMwDLt8wQzuJECYxYH1N7TEU+K83u
OP2AwBQbFEL/PoGqsl9LQjRFLJ13leElkOh0pHvsqkfGskAvcVRe2AI96wB9oX+u
OHjVLYp+J87D0gi1taU70tkEf36uMXaHYHrvV1OkY3Z5CSoQ1AZYOZ+vCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPFuoBJ20mxweM8Fsee/CVpjSGfbMB8GA1UdIwQY
MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt
YWRkZjBlMTg0OWViLzEvOFc2Z0VuYlNiSEI0endXeDU3OEpXbU5JWjlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi
LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZLJMA0G
CSqGSIb3DQEBCwUAA4IBAQBbdlIsev8GLERl9PE+wQYxNlsTone1JL28uhLBl4nt
Cp+kMDmtPsUAvMIt7uRMMnhjGu3/Ib76s8+0jdGh6VdMZFptlaIybfO/BqJhb39v
64rMhxcYRC6y0X+AzF/VthbCxuRXTzwClcbbtJ3Ez4rHggslDbU3B+pCVkwCSv/a
nZ+rvSlxv8tWTGMAELjqV6QVzg1sevwzWQqrunBxSUbmKHYx8NAssRP7ItjS+GeG
iGS8EZFLOL+07tvKfFXeVSP4+Bgp76QHAqMqcyRCbFA/4pYwFp4AaDWtDjeQbkxM
JtjW0nzgV2OEzBERsbRZ6mZPOuT7ttfnA5ex9bS+jDZD
-----END CERTIFICATE-----
Generated at Sun Jun 15 00:01:16 2025 by rpki-client