Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/88CRO9M71MEZCnMdLkANdOStiJc.roa
File: 88CRO9M71MEZCnMdLkANdOStiJc.roa (raw, json)
Hash identifier: iKRO/NpRojBEm10Vq1B+H6d6szy6j5t9Kczkk6vBBS4=
Subject key identifier: F3:C0:91:3B:D3:3B:D4:C1:19:0A:73:1D:2E:40:0D:74:E4:AD:88:97
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019825E2EEB57E67B7EA1F4122F0C8C34CCF
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/88CRO9M71MEZCnMdLkANdOStiJc.roa
Signing time: Sun 20 Jul 2025 03:31:25 +0000
ROA not before: Sun 20 Jul 2025 03:31:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213413
IP address blocks: 89.144.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 04:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:25:e2:ee:b5:7e:67:b7:ea:1f:41:22:f0:c8:c3:4c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 20 03:31:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3c0913bd33bd4c1190a731d2e400d74e4ad8897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1d:fa:0c:a6:45:94:c9:f4:b2:5f:51:bb:97:
a1:92:67:c6:ed:c5:8b:6e:2a:67:29:fc:29:74:66:
1b:17:9c:70:66:bc:e9:26:21:70:38:d0:a3:f5:4e:
f0:74:62:14:27:cd:3b:b0:7b:e2:6b:b8:2d:37:3f:
e3:28:d3:84:da:4b:ad:cc:be:13:c8:0e:b6:de:53:
cf:22:af:12:51:c6:22:a1:7e:34:73:46:34:bd:dc:
6d:9c:da:8b:84:f4:73:69:51:31:8e:92:ac:2a:68:
cb:89:23:ce:9c:5f:39:c0:d9:e2:87:46:f3:8d:89:
bf:4e:56:3b:38:2f:c3:bc:01:f3:50:dd:00:34:65:
51:2e:ad:b1:d9:dc:d2:cd:17:46:b3:bb:a1:0a:ac:
ee:36:66:56:17:62:30:dd:dd:7c:8a:0c:f0:22:cb:
a3:7a:01:e4:c4:18:dc:2c:1b:7a:2d:d8:48:03:17:
3a:99:16:fd:b9:70:c6:20:2c:b6:ed:62:2d:44:38:
5e:a5:fb:16:02:85:54:6b:1f:bf:6a:d6:80:7b:e8:
b5:ed:2e:21:b5:3e:37:af:c1:7d:74:c5:2d:e2:10:
b8:ab:a2:5e:82:64:26:39:bb:bf:0f:d6:12:88:58:
07:06:c2:f5:a6:9e:8b:4e:2b:f4:83:fe:ce:1f:f0:
5d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C0:91:3B:D3:3B:D4:C1:19:0A:73:1D:2E:40:0D:74:E4:AD:88:97
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/88CRO9M71MEZCnMdLkANdOStiJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.35.0/24
Signature Algorithm: sha256WithRSAEncryption
23:ea:e7:6c:ff:55:67:0b:d2:dd:fd:e2:9a:9c:86:6e:37:bc:
45:e6:26:76:1e:73:71:ef:13:a0:53:5b:f3:a1:fc:b5:0e:dc:
b2:42:86:22:dc:f7:ee:74:67:32:44:83:16:e7:e8:a2:47:10:
06:bb:0d:b3:fe:60:9c:6d:e7:05:89:3d:94:20:d9:1c:b6:f2:
15:e4:67:b1:a3:f3:db:bf:86:11:75:f2:e3:70:0b:3b:c6:1f:
e5:c6:b9:c8:e7:61:c9:c4:9b:d9:7b:2a:ca:99:a4:bb:96:00:
93:9a:d6:c3:dc:a3:a8:99:8d:ea:5f:7d:a6:0e:59:8c:cf:82:
44:49:29:5f:4a:8f:62:df:56:8a:8c:35:17:4e:10:62:f6:0c:
a8:a2:0b:a3:f5:82:79:ec:bb:ef:6c:a8:28:ef:8f:4d:3d:56:
55:45:44:1a:c0:2d:80:f4:a0:c5:70:61:27:35:27:49:63:87:
06:65:ca:52:ee:7f:ec:31:4e:2a:e9:b1:29:2f:46:20:68:af:
60:1c:6b:82:fb:9f:bc:e5:c3:5f:7f:df:2c:e7:d3:86:9c:4a:
09:b2:20:d4:3d:c1:b7:5a:9a:e1:7c:da:cf:ec:85:ff:92:bd:
00:37:c5:b1:26:5d:9e:e3:7d:9c:a0:d6:f1:ff:85:8c:ae:6f:
09:56:ea:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:56:25 2025 by rpki-client