Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/j8PJCMfL-2SvuBG23LQYEJgY63s.roa
File: j8PJCMfL-2SvuBG23LQYEJgY63s.roa (raw, json)
Hash identifier: fJIocQT62SfQbnA5bXpDD/xsFuwqME4KTG7HOArM0YA=
Subject key identifier: 8F:C3:C9:08:C7:CB:FB:64:AF:B8:11:B6:DC:B4:18:10:98:18:EB:7B
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01986129D9C36AB1FAF71C1E8F43D52718D6
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/j8PJCMfL-2SvuBG23LQYEJgY63s.roa
Signing time: Thu 31 Jul 2025 15:46:29 +0000
ROA not before: Thu 31 Jul 2025 15:46:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398083
IP address blocks: 46.3.80.0/21 maxlen: 22
46.3.216.0/21 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:61:29:d9:c3:6a:b1:fa:f7:1c:1e:8f:43:d5:27:18:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jul 31 15:46:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fc3c908c7cbfb64afb811b6dcb418109818eb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:22:61:46:86:11:84:20:f7:b2:b6:69:bb:fb:
e5:df:3f:3e:c1:d4:fd:a3:9d:bf:38:43:60:91:86:
fc:63:60:01:8f:b4:3c:0b:c2:96:e4:5e:4e:34:58:
e3:aa:dc:2b:d3:ab:4b:9e:04:ae:d5:06:6b:61:0f:
2e:d6:9c:94:49:fb:d2:f3:18:18:e4:67:c9:7f:3e:
a4:fa:8c:24:d9:39:a4:da:7c:64:9d:88:fc:e0:4c:
4c:82:7c:2a:92:4e:67:4a:66:8e:44:ed:41:0e:c4:
74:0e:8d:2b:1f:22:d6:e8:ce:bb:ef:89:3d:d7:bf:
54:cc:61:06:a5:9a:bd:f9:1c:f8:cf:a3:7b:df:f5:
67:79:16:c4:02:6b:72:6c:3e:42:9e:71:63:a3:9d:
36:82:a7:fe:b5:56:9d:2a:65:37:0d:b3:81:06:38:
73:30:40:b1:64:ae:c8:85:39:c3:47:4d:3d:ec:58:
6f:18:be:7a:5a:04:b0:02:6c:7d:e5:50:2d:25:a6:
1d:6e:cb:62:66:bd:bd:88:5a:f9:de:8d:66:92:43:
38:db:0f:11:4a:02:c6:cf:03:3d:f4:60:9d:22:3b:
1d:75:97:09:7a:5f:e2:95:bd:dc:64:07:1a:0b:a3:
89:61:df:cd:57:74:2f:90:00:1c:86:17:6d:82:1f:
26:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C3:C9:08:C7:CB:FB:64:AF:B8:11:B6:DC:B4:18:10:98:18:EB:7B
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/j8PJCMfL-2SvuBG23LQYEJgY63s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.80.0/21
46.3.216.0/21
Signature Algorithm: sha256WithRSAEncryption
8e:69:56:b0:0b:53:47:a3:a3:45:5b:b6:09:0c:1b:79:c4:a0:
59:ff:16:77:e6:20:80:9b:f0:7d:c5:46:5b:34:47:88:31:e6:
d0:ca:df:07:35:22:03:f4:e1:c6:4a:79:43:18:7f:ea:d7:87:
ed:69:7d:53:0a:8b:b1:2c:15:60:cc:7f:fc:67:36:a5:0c:a4:
d2:e6:05:b9:fd:66:d1:41:c3:72:1d:9c:db:ba:80:3e:1d:91:
52:aa:be:b8:8d:33:d1:89:33:0c:e9:d4:da:42:22:d9:77:f3:
22:18:02:2c:27:0f:4c:11:ee:2f:69:0b:ea:4c:10:0a:8b:67:
f7:ce:7e:fe:3f:29:75:f1:fb:b2:a3:79:f4:b2:2f:d4:06:41:
6d:5d:f4:e1:46:bd:d1:de:57:95:eb:54:d6:1d:95:48:59:e9:
03:51:88:d4:23:56:99:77:da:17:32:31:95:c4:fd:58:13:44:
e3:ca:f3:5d:62:ce:a2:cc:9c:d1:b6:bb:2e:bf:5c:4a:0d:f5:
15:ae:14:16:1c:48:89:75:9f:88:ae:4d:10:bc:e3:90:05:10:
96:bb:3b:95:b5:3e:90:76:c8:54:fe:64:07:24:09:1d:b3:dc:
7e:fc:d1:7e:47:b0:42:6c:f6:dd:60:18:5f:3d:e4:d9:14:94:
4a:84:93:1d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZhhKdnDarH69xwej0PVJxjWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjUwNzMxMTU0NjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmMzYzkwOGM3Y2JmYjY0YWZiODExYjZkY2I0MTgxMDk4MThlYjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyJhRoYRhCD3srZpu/vl3z8+wdT9
o52/OENgkYb8Y2ABj7Q8C8KW5F5ONFjjqtwr06tLngSu1QZrYQ8u1pyUSfvS8xgY
5GfJfz6k+owk2Tmk2nxknYj84ExMgnwqkk5nSmaORO1BDsR0Do0rHyLW6M6774k9
179UzGEGpZq9+Rz4z6N73/VneRbEAmtybD5CnnFjo502gqf+tVadKmU3DbOBBjhz
MECxZK7IhTnDR0097FhvGL56WgSwAmx95VAtJaYdbstiZr29iFr53o1mkkM42w8R
SgLGzwM99GCdIjsddZcJel/ilb3cZAcaC6OJYd/NV3QvkAAchhdtgh8mpQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFI/DyQjHy/tkr7gRtty0GBCYGOt7MB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvajhQSkNNZkwtMlN2dUJHMjNMUVlFSmdZNjNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLgNQAwQD
LgPYMA0GCSqGSIb3DQEBCwUAA4IBAQCOaVawC1NHo6NFW7YJDBt5xKBZ/xZ35iCA
m/B9xUZbNEeIMebQyt8HNSID9OHGSnlDGH/q14ftaX1TCouxLBVgzH/8ZzalDKTS
5gW5/WbRQcNyHZzbuoA+HZFSqr64jTPRiTMM6dTaQiLZd/MiGAIsJw9MEe4vaQvq
TBAKi2f3zn7+Pyl18fuyo3n0si/UBkFtXfThRr3R3leV61TWHZVIWekDUYjUI1aZ
d9oXMjGVxP1YE0TjyvNdYs6izJzRtrsuv1xKDfUVrhQWHEiJdZ+Irk0QvOOQBRCW
uzuVtT6QdshU/mQHJAkds9x+/NF+R7BCbPbdYBhfPeTZFJRKhJMd
-----END CERTIFICATE-----
Generated at Thu Aug 7 05:13:31 2025 by rpki-client