Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/8lacBmVZsphFu0d-DTUjjbuS8oc.roa
File: 8lacBmVZsphFu0d-DTUjjbuS8oc.roa (raw, json)
Hash identifier: c2zm9p5x65urWg2J1m1vDTWXpjxdW+8WhoVhZA8O5rg=
Subject key identifier: F2:56:9C:06:65:59:B2:98:45:BB:47:7E:0D:35:23:8D:BB:92:F2:87
Certificate issuer: /CN=bdd244214d76468d3fb72abad1892ef23dede978
Certificate serial: 019A0DF9C138A307C208E8A7056C53D55DF9
Authority key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/8lacBmVZsphFu0d-DTUjjbuS8oc.roa
Signing time: Wed 22 Oct 2025 22:11:03 +0000
ROA not before: Wed 22 Oct 2025 22:11:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204697
IP address blocks: 185.235.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0d:f9:c1:38:a3:07:c2:08:e8:a7:05:6c:53:d5:5d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd244214d76468d3fb72abad1892ef23dede978
Validity
Not Before: Oct 22 22:11:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2569c066559b29845bb477e0d35238dbb92f287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:97:95:a1:69:e3:a1:e0:a4:26:8e:fe:8d:42:
6b:dd:f2:f4:e7:71:69:fa:ed:43:21:58:db:2b:ae:
c0:20:cd:39:2b:c8:fd:96:2e:6c:f2:d4:72:1b:c5:
6e:57:96:26:bf:94:f9:b6:b9:6e:ef:9c:a6:e8:fd:
8b:30:81:72:fb:1e:cf:e3:6d:d6:8d:c1:b1:2e:44:
2c:bd:11:96:de:a0:6b:e9:8f:1e:db:da:b8:ae:ed:
85:b1:3b:d7:e7:02:4a:e3:a1:93:43:56:c3:69:35:
2f:24:72:e3:1f:13:49:f2:b5:9d:13:27:32:c5:20:
cc:b3:db:fd:fc:88:18:be:02:b1:f2:70:26:65:66:
67:61:0c:a5:60:2d:eb:53:a3:19:bb:d0:ca:1f:87:
06:e7:eb:9b:de:ac:2f:91:cd:1f:80:cf:4b:10:68:
bf:bb:b7:1b:e9:08:5c:24:dc:b3:5d:60:e0:70:b2:
00:c8:9f:c0:b0:53:18:bd:71:83:bb:8a:0f:ab:e5:
d4:64:d6:90:8e:8a:28:84:27:2d:09:5a:9e:d5:12:
08:79:cd:cf:81:7f:85:f8:1a:d5:75:b8:f2:fd:97:
55:ee:05:1c:50:75:86:76:39:04:6b:63:10:18:51:
0b:45:84:19:a6:cc:0b:5c:6c:28:d7:67:37:20:4b:
c8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:56:9C:06:65:59:B2:98:45:BB:47:7E:0D:35:23:8D:BB:92:F2:87
X509v3 Authority Key Identifier:
keyid:BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/8lacBmVZsphFu0d-DTUjjbuS8oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.159.0/24
Signature Algorithm: sha256WithRSAEncryption
78:f1:cf:e2:e3:9d:26:b2:fe:71:47:25:ad:cd:9a:04:0f:8f:
65:a7:a8:45:ec:b4:fc:43:c7:8f:84:42:5b:5e:34:9d:e8:f0:
53:e8:e5:df:3e:a6:68:91:39:82:d9:a9:fc:8c:f2:a5:b3:e5:
05:a7:d4:e7:da:64:55:85:cb:5a:ad:9e:d9:72:84:27:8f:9e:
89:9b:eb:d7:c0:2c:dc:db:00:cc:59:ba:d6:3e:72:e5:b3:dd:
d5:ef:3b:5c:2d:9c:96:9c:9e:55:36:66:92:85:84:c3:42:6c:
c3:f7:1f:cc:bf:2c:94:d5:7d:11:66:b0:e2:ef:f6:d5:cb:73:
3b:47:58:cf:8b:0c:be:e8:6b:b7:2f:57:49:2f:03:d1:cb:f4:
2a:eb:56:a8:85:bf:b2:f3:03:1b:fe:a0:b2:64:0a:1b:0d:65:
de:b2:14:0c:30:08:b7:02:a8:95:82:0b:78:45:99:59:eb:e4:
85:1c:e8:0f:7e:92:1d:0e:45:18:a8:0b:2a:e9:cc:c4:86:a4:
71:21:b8:c1:9a:1b:ce:ee:26:34:40:c6:e9:d0:27:e1:6e:04:
78:e5:68:34:c0:f1:ea:f1:10:99:23:26:eb:0d:64:ae:fd:d7:
b1:64:0b:3b:d1:43:e6:a3:25:0d:e0:2e:96:58:d5:f0:9b:2b:
6f:a9:fc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:33:14 2025 by rpki-client