Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8VhhkSiakyjyds2HL3KVl5SAjHk.roa
File: 8VhhkSiakyjyds2HL3KVl5SAjHk.roa (raw, json)
Hash identifier: XMxyFpkWV1CCq0kdHYWIMKgwA50BX4tfunpr2JyfxpQ=
Subject key identifier: F1:58:61:91:28:9A:93:28:F2:76:CD:87:2F:72:95:97:94:80:8C:79
Certificate issuer: /CN=f0d444bc7d5334da14de805172b2625e9830763f
Certificate serial: 0197C55E042DFF404FB823D0CAC4785F22F5
Authority key identifier: F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8VhhkSiakyjyds2HL3KVl5SAjHk.roa
Signing time: Tue 01 Jul 2025 09:42:42 +0000
ROA not before: Tue 01 Jul 2025 09:42:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215573
IP address blocks: 185.246.176.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:5e:04:2d:ff:40:4f:b8:23:d0:ca:c4:78:5f:22:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d444bc7d5334da14de805172b2625e9830763f
Validity
Not Before: Jul 1 09:42:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1586191289a9328f276cd872f72959794808c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8c:8c:04:f9:99:7e:aa:f1:fd:e6:cc:1c:cb:
08:e4:0d:26:99:6b:8d:cb:2d:df:70:e1:d5:a9:65:
3c:48:87:b2:5a:76:8f:03:95:1e:4c:d5:2b:d9:75:
d7:ca:13:59:f3:7a:d8:b7:03:1e:7b:84:1d:e0:a8:
78:6d:aa:5b:7b:7d:e5:b9:a0:a6:40:47:ad:1b:b2:
7e:29:ec:8b:95:54:55:e6:c0:d1:e8:a6:94:46:74:
bc:55:6b:d5:07:68:c1:74:12:d9:94:a4:df:43:8c:
5a:a5:5a:cd:2e:98:f4:50:7f:ee:c8:36:2d:2e:6e:
02:00:02:1f:ac:6a:4d:b1:bb:1e:2e:bf:4d:60:b9:
4e:24:99:0c:cf:bd:0e:aa:d8:95:6d:7b:92:16:26:
8b:a9:a0:63:9d:1e:91:81:28:1f:d5:fd:bb:82:48:
57:e5:02:83:50:3c:5c:9c:1b:ff:8f:a9:87:fc:a1:
21:a5:86:88:df:6b:73:f3:3c:fd:a4:02:3c:19:de:
22:e5:f4:24:ec:9e:c9:8b:01:f7:4a:06:93:da:4a:
93:b9:f8:8e:8a:c0:f9:47:58:52:f4:c9:86:89:cf:
b1:7a:87:2a:60:de:e5:9a:1c:eb:83:69:1a:4e:c9:
a0:1f:94:35:84:72:28:3d:7c:b4:b0:3f:ba:14:04:
c3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:58:61:91:28:9A:93:28:F2:76:CD:87:2F:72:95:97:94:80:8C:79
X509v3 Authority Key Identifier:
keyid:F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8VhhkSiakyjyds2HL3KVl5SAjHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.176.0/23
Signature Algorithm: sha256WithRSAEncryption
90:b8:f0:09:69:06:4f:5f:ea:00:8a:ec:e3:f4:e4:0b:37:3b:
15:f4:47:79:ec:dd:32:29:8f:2e:4e:78:4a:3e:bc:d9:d6:58:
b7:d7:ee:2b:1e:2d:6b:49:0b:1f:1f:1a:6b:56:98:2f:0c:9a:
d6:27:4e:07:ce:45:9f:a0:2a:e1:52:c5:9e:4d:74:9a:63:ba:
ba:2c:dd:65:53:6d:6f:27:47:8e:86:34:5b:71:b6:27:6d:a0:
59:4d:51:bf:00:49:bc:a1:0b:29:c8:e8:ca:f1:4e:2d:dc:ae:
c8:34:09:de:5d:af:49:40:33:07:73:bf:9e:eb:de:c0:fc:da:
6c:d0:57:44:60:da:75:74:6b:e8:27:c5:27:fe:35:2e:5a:67:
b6:50:3b:d4:d5:10:39:7e:30:3a:22:97:93:47:3a:80:44:ff:
d9:1f:86:eb:10:70:ec:0f:b7:35:d3:39:d5:83:57:49:b8:1a:
69:9f:27:48:7b:de:16:c9:02:27:00:d6:de:6e:0c:23:0c:64:
61:18:a2:fa:15:9b:8a:d1:8d:4e:51:76:d5:f6:66:4a:0c:b6:
fb:63:be:e5:92:93:f6:df:44:d9:d7:b6:44:ba:17:5d:19:ca:
71:93:6e:7f:a1:fe:52:b1:7d:8f:16:be:2f:c3:5d:5c:bc:10:
70:83:21:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZfFXgQt/0BPuCPQysR4XyL1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZDQ0NGJjN2Q1MzM0ZGExNGRlODA1MTcyYjI2MjVlOTgz
MDc2M2YwHhcNMjUwNzAxMDk0MjQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTU4NjE5MTI4OWE5MzI4ZjI3NmNkODcyZjcyOTU5Nzk0ODA4Yzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoyMBPmZfqrx/ebMHMsI5A0mmWuN
yy3fcOHVqWU8SIeyWnaPA5UeTNUr2XXXyhNZ83rYtwMee4Qd4Kh4bapbe33luaCm
QEetG7J+KeyLlVRV5sDR6KaURnS8VWvVB2jBdBLZlKTfQ4xapVrNLpj0UH/uyDYt
Lm4CAAIfrGpNsbseLr9NYLlOJJkMz70OqtiVbXuSFiaLqaBjnR6RgSgf1f27gkhX
5QKDUDxcnBv/j6mH/KEhpYaI32tz8zz9pAI8Gd4i5fQk7J7JiwH3SgaT2kqTufiO
isD5R1hS9MmGic+xeocqYN7lmhzrg2kaTsmgH5Q1hHIoPXy0sD+6FATDhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPFYYZEompMo8nbNhy9ylZeUgIx5MB8GA1UdIwQY
MBaAFPDURLx9UzTaFN6AUXKyYl6YMHY/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE5SRXZIMVROTm9VM29CUmNySmlYcGd3ZGo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy81ZGMyN2QtNWFkYi00ZGYzLTk5YzIt
OThkOWM0MjU3ZmM2LzEvOFZoaGtTaWFreWp5ZHMySEwzS1ZsNVNBakhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy81ZGMyN2QtNWFkYi00ZGYzLTk5YzItOThkOWM0MjU3ZmM2
LzEvOE5SRXZIMVROTm9VM29CUmNySmlYcGd3ZGo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufawMA0G
CSqGSIb3DQEBCwUAA4IBAQCQuPAJaQZPX+oAiuzj9OQLNzsV9Ed57N0yKY8uTnhK
PrzZ1li31+4rHi1rSQsfHxprVpgvDJrWJ04HzkWfoCrhUsWeTXSaY7q6LN1lU21v
J0eOhjRbcbYnbaBZTVG/AEm8oQspyOjK8U4t3K7INAneXa9JQDMHc7+e697A/Nps
0FdEYNp1dGvoJ8Un/jUuWme2UDvU1RA5fjA6IpeTRzqARP/ZH4brEHDsD7c10znV
g1dJuBppnydIe94WyQInANbebgwjDGRhGKL6FZuK0Y1OUXbV9mZKDLb7Y77lkpP2
30TZ17ZEuhddGcpxk25/of5SsX2PFr4vw11cvBBwgyHk
-----END CERTIFICATE-----
Generated at Tue Aug 12 22:57:30 2025 by rpki-client