Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/G8EdfZKFW8uYcHc--s5iLeZKssQ.roa
File: G8EdfZKFW8uYcHc--s5iLeZKssQ.roa (raw, json)
Hash identifier: umqam3Wbg2iqJ3zJ/1WLiY5F6ucm17RieGxMmVvzD0o=
Subject key identifier: 1B:C1:1D:7D:92:85:5B:CB:98:70:77:3E:FA:CE:62:2D:E6:4A:B2:C4
Certificate issuer: /CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
Certificate serial: 019860E3599339B9CE0A64FFE9FA1F45485D
Authority key identifier: CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/G8EdfZKFW8uYcHc--s5iLeZKssQ.roa
Signing time: Thu 31 Jul 2025 14:29:28 +0000
ROA not before: Thu 31 Jul 2025 14:29:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 176.124.200.0/24 maxlen: 24
176.124.208.0/24 maxlen: 24
176.124.209.0/24 maxlen: 24
176.124.210.0/24 maxlen: 24
176.124.211.0/24 maxlen: 24
176.124.212.0/24 maxlen: 24
176.124.213.0/24 maxlen: 24
176.124.214.0/24 maxlen: 24
176.124.215.0/24 maxlen: 24
176.124.216.0/24 maxlen: 24
176.124.217.0/24 maxlen: 24
176.124.218.0/24 maxlen: 24
176.124.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:60:e3:59:93:39:b9:ce:0a:64:ff:e9:fa:1f:45:48:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
Validity
Not Before: Jul 31 14:29:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bc11d7d92855bcb9870773eface622de64ab2c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:29:c6:c5:0a:7e:9a:6e:b8:27:1b:61:3c:32:
4d:50:c4:53:aa:eb:ec:3a:bf:30:17:02:dd:55:96:
59:e3:03:c3:01:0a:34:eb:3b:21:e7:da:29:fe:ec:
8d:80:8c:6f:e6:bd:1f:ec:5d:a2:bf:70:f1:53:72:
8c:4c:e2:32:39:da:eb:54:fc:6e:4b:07:33:a5:70:
29:d4:96:74:d4:be:fb:d6:1b:7f:be:c3:f9:b3:0e:
b5:64:f1:8f:22:58:f2:6e:03:2d:c9:70:1a:5e:7d:
a8:60:af:f8:94:bc:54:57:3c:af:3f:cb:da:d4:d2:
21:6b:c0:c9:8c:2d:d0:9c:91:69:d8:96:60:75:5e:
67:96:64:0c:db:17:c2:c8:d5:36:db:c2:d9:83:b4:
9d:15:8c:98:23:02:17:1a:f3:f3:59:d7:4c:f8:7b:
6f:0b:13:92:b0:ab:19:62:f5:f0:e3:04:99:67:81:
26:0b:c3:af:41:4c:44:39:7e:73:8b:41:fd:ff:03:
56:ab:e6:1f:e6:db:ea:7b:02:93:0c:e3:a4:ba:77:
d4:4a:db:d8:72:82:03:40:3d:28:ed:01:fe:ba:da:
74:7a:8b:ea:29:6e:f1:2a:a5:ee:8c:77:6d:c4:a5:
af:12:99:10:f8:93:57:02:4a:80:0f:73:68:80:9e:
dc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C1:1D:7D:92:85:5B:CB:98:70:77:3E:FA:CE:62:2D:E6:4A:B2:C4
X509v3 Authority Key Identifier:
keyid:CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/G8EdfZKFW8uYcHc--s5iLeZKssQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.200.0/24
176.124.208.0-176.124.219.255
Signature Algorithm: sha256WithRSAEncryption
62:0b:04:7e:35:51:86:60:ad:7e:5f:9d:99:30:82:e8:a4:b1:
2d:52:cf:1b:45:f2:fa:20:28:20:37:a2:9b:c1:d4:9f:5b:5d:
ba:2b:a1:7d:64:44:16:5e:33:7c:eb:96:c6:2c:6a:24:b9:af:
fc:91:9c:c6:7f:d6:74:ac:52:88:b7:a3:fb:99:f6:fb:67:b2:
97:cf:71:9e:e2:51:03:7e:75:33:ab:65:73:c5:8b:cc:b5:4b:
1b:5f:23:b1:07:1a:e5:f3:da:83:39:fc:9b:2c:38:00:9b:16:
92:08:ee:f5:0e:77:5a:a1:2c:66:60:2c:be:e7:d5:23:a2:0e:
1e:88:3c:53:d2:7f:5c:05:4e:7a:4e:ab:7d:0e:e9:78:9b:2c:
29:9c:77:8f:b5:c6:ba:46:f9:8f:91:36:70:72:60:e6:a6:6b:
d7:32:69:5f:95:96:6e:ce:a4:53:18:7b:a7:dd:a0:0f:ae:87:
5b:d0:c7:22:08:95:7d:10:8c:11:4e:c9:24:f3:1e:97:30:7d:
74:b2:67:04:7f:4d:46:58:b6:bf:2d:b2:df:07:c7:35:7d:97:
d5:0c:d0:9c:85:b2:a1:0f:ff:1a:ce:48:23:3e:10:0c:fc:75:
6f:4c:fd:a4:00:28:ff:1f:87:37:2f:73:53:5f:a8:e3:15:e6:
b0:f7:af:62
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:06:03 2025 by rpki-client