Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/g6Feglz5Y2iJd2IBmxCbye1Hoxc.roa
File: g6Feglz5Y2iJd2IBmxCbye1Hoxc.roa (raw, json)
Hash identifier: 2/pDMQ3zZm7kV6rmIJXWGwJDBdxlhjnP68Nc7os7Hk0=
Subject key identifier: 83:A1:5E:82:5C:F9:63:68:89:77:62:01:9B:10:9B:C9:ED:47:A3:17
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019843D629B41600F4E9203702793E901320
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/g6Feglz5Y2iJd2IBmxCbye1Hoxc.roa
Signing time: Fri 25 Jul 2025 23:06:05 +0000
ROA not before: Fri 25 Jul 2025 23:06:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208111
IP address blocks: 89.106.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:06:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:d6:29:b4:16:00:f4:e9:20:37:02:79:3e:90:13:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 25 23:06:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83a15e825cf96368897762019b109bc9ed47a317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:35:f7:8e:f9:42:56:1c:8f:ea:a5:69:86:32:
ed:3a:d5:4d:d9:1c:da:4d:cb:45:00:a1:4f:57:0e:
de:12:d2:1d:49:a8:32:29:f9:0b:4e:40:63:87:bd:
fa:47:95:3e:05:94:7e:62:e1:8e:2a:97:29:fe:79:
f0:36:72:20:c7:6a:37:8f:92:d3:d3:81:95:64:fd:
be:d4:4d:d5:1f:a3:52:52:e6:65:51:ff:eb:e2:0a:
ae:8f:d8:56:7f:a0:c8:8e:3d:40:e0:df:f4:52:b9:
a5:50:36:90:1b:21:4b:93:86:f6:d7:24:97:2b:9a:
67:9a:93:1f:2d:e1:65:a5:4c:66:9e:4f:d7:23:19:
60:70:72:b3:1d:c7:4f:2c:fd:c7:28:59:86:e8:9a:
2a:61:00:c2:20:61:0b:ec:aa:6e:52:0a:c2:6b:8c:
55:74:cc:d9:c4:d5:28:cf:a7:db:e8:ab:29:ec:cf:
48:52:b8:c8:ac:69:39:b9:3c:b6:5b:33:bd:bc:66:
99:f5:7c:9b:a6:11:87:d7:db:f8:9f:66:6d:07:13:
80:c0:58:28:47:76:71:b9:08:4a:99:50:92:e6:d2:
39:95:c4:75:6f:08:2c:d2:bb:bb:39:29:40:70:4b:
fa:79:75:a0:80:9c:cb:4e:c3:54:17:25:95:6b:e3:
48:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A1:5E:82:5C:F9:63:68:89:77:62:01:9B:10:9B:C9:ED:47:A3:17
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/g6Feglz5Y2iJd2IBmxCbye1Hoxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.64.0/24
Signature Algorithm: sha256WithRSAEncryption
eb:8d:25:4b:3a:0a:9a:d0:2f:7c:4a:1c:3f:db:5c:84:8e:65:
f2:b6:78:59:30:87:9e:f3:b2:f4:f5:a5:54:b9:39:e3:1a:ad:
97:b8:8a:d7:25:1d:e0:b2:c2:5e:fe:99:ee:a6:2d:a4:9f:a4:
f7:f0:c6:07:9a:d4:48:dd:eb:f7:71:a8:dd:99:90:05:0c:9a:
d3:49:49:48:5a:f3:3c:d2:aa:d0:f0:41:46:1c:a4:1a:11:eb:
46:c8:90:c3:a3:bf:65:4c:38:85:e5:ad:48:e4:d4:9f:70:a6:
55:ac:09:db:46:e1:31:0d:19:18:f0:cf:9b:1a:ae:7f:5f:c8:
2c:42:4f:66:22:fb:fd:29:8c:c7:f4:e7:13:56:27:3e:4d:ef:
c9:86:1f:7f:ec:f9:09:8b:d2:4e:9f:49:0a:3f:1c:db:c8:88:
21:c3:8d:56:9a:37:8d:c8:9e:1c:8a:28:6e:67:d2:61:c2:6c:
5a:9f:46:a9:76:7d:d0:eb:42:70:3b:58:33:ab:3f:ef:f1:3f:
15:00:43:90:8d:11:18:1c:27:ac:30:fc:64:15:0c:bd:b7:ce:
75:3a:10:5e:12:40:ac:4c:1c:c4:ad:65:2a:24:e1:4d:57:d1:
f3:49:e8:51:63:20:4a:60:d0:23:d2:d7:33:21:0c:97:5b:fa:
eb:07:5a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:34:00 2025 by rpki-client