Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/8zCmtrRnMBfqD7huu00hKG-6dWU.roa
File: 8zCmtrRnMBfqD7huu00hKG-6dWU.roa (raw, json)
Hash identifier: BDm16YVWuKLeyxmSEyYqD51Mg/stzj242GbVHHagGik=
Subject key identifier: F3:30:A6:B6:B4:67:30:17:EA:0F:B8:6E:BB:4D:21:28:6F:BA:75:65
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01985EE2A7AD1764AB101754F52E2F1C2961
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/8zCmtrRnMBfqD7huu00hKG-6dWU.roa
Signing time: Thu 31 Jul 2025 05:09:29 +0000
ROA not before: Thu 31 Jul 2025 05:09:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 77.246.212.0/22 maxlen: 22
88.80.140.0/24 maxlen: 24
88.80.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5e:e2:a7:ad:17:64:ab:10:17:54:f5:2e:2f:1c:29:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jul 31 05:09:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f330a6b6b4673017ea0fb86ebb4d21286fba7565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8b:98:f6:96:bd:b4:2b:dd:5b:91:de:fc:ab:
07:fb:05:63:bf:31:9f:f7:ac:b3:e6:ae:9f:eb:ec:
8a:4e:2c:30:bc:eb:2f:89:75:7c:0c:33:1e:22:a7:
a9:1f:c7:07:73:62:c9:9b:10:02:9a:69:9d:88:d2:
b3:9c:19:dc:36:3d:75:59:a4:b7:d3:cc:c6:80:d0:
16:84:cd:a6:58:aa:6f:19:24:7b:93:a7:b6:9a:3d:
f4:2a:15:92:49:32:25:db:d7:fc:ad:23:c8:a2:28:
b8:c8:1a:fd:55:8f:d6:2b:46:4a:c3:f0:09:14:cf:
b1:8b:6d:39:23:09:f4:fe:74:c3:7d:c8:39:fc:6f:
40:99:2f:3a:a0:cc:1d:a4:86:52:40:37:83:24:8b:
a4:62:46:32:94:87:dc:a4:17:d2:99:ac:2b:b6:7c:
03:6b:77:51:ad:03:65:52:33:d0:43:ab:55:31:3b:
0f:0b:75:02:2b:fb:6d:7e:a4:1e:04:66:82:44:5a:
e9:61:8f:38:76:4a:1c:f8:fd:f3:a2:09:fa:ea:65:
5a:6e:f4:dd:b7:3a:23:e2:fd:51:48:ef:75:76:ee:
9f:4a:30:45:6c:6b:0a:c6:2e:ed:45:55:c7:ec:43:
d3:e6:08:2c:ba:6e:a4:13:c3:ab:02:59:a4:73:fb:
8a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:30:A6:B6:B4:67:30:17:EA:0F:B8:6E:BB:4D:21:28:6F:BA:75:65
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/8zCmtrRnMBfqD7huu00hKG-6dWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.212.0/22
88.80.140.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:3b:7b:01:de:53:24:4d:07:25:97:9e:be:49:47:48:76:12:
7d:4e:a7:e8:aa:50:4a:07:b1:c6:78:ee:97:18:d8:4e:21:f1:
3c:5f:04:70:5d:20:81:a3:e4:ab:13:d7:33:83:e3:bc:f4:4f:
1f:5d:fa:d9:21:3d:0d:5c:7c:47:be:31:99:5f:bc:df:71:8e:
7d:53:ac:24:5c:3b:28:78:35:37:50:d8:0c:fe:cf:2f:27:27:
bb:b9:d7:a5:b4:1d:1a:b3:88:2b:a4:2f:1b:54:3c:68:38:36:
1d:de:cf:35:bc:26:b0:43:29:6d:f5:23:f0:b6:28:e6:5c:5c:
03:93:22:1a:a6:2f:3e:27:a8:11:73:f8:ff:c5:7a:fa:08:7f:
8c:21:b2:e7:59:0f:ff:a5:d6:a5:d5:22:78:99:c2:e8:13:63:
ba:26:e7:7b:5c:c2:fb:d5:ff:40:24:d5:69:80:d8:be:78:6a:
39:5c:b8:af:eb:4b:d1:4b:24:0a:bd:05:a1:01:49:26:14:fc:
e3:59:b9:df:58:d6:b3:c8:91:19:a1:71:ff:f6:0c:b0:9a:60:
ca:4d:f0:80:cc:23:e7:32:51:9c:95:6d:50:f0:28:c2:9d:df:
fe:ed:c2:4f:0e:8e:b7:48:2d:8a:81:88:15:13:26:0e:0c:19:
93:4c:46:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:08:21 2025 by rpki-client