Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/1LUgjj7ov-D18235s2ZQMS4tHzY.roa
File: 1LUgjj7ov-D18235s2ZQMS4tHzY.roa (raw, json)
Hash identifier: UEi+jnPCSYFB8at753cQs95MMeTUd/LDPkAmCWkVszw=
Subject key identifier: D4:B5:20:8E:3E:E8:BF:E0:F5:F3:6D:F9:B3:66:50:31:2E:2D:1F:36
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 019807BF84A78034E48E99B94B7C1E0BD7FE
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/1LUgjj7ov-D18235s2ZQMS4tHzY.roa
Signing time: Mon 14 Jul 2025 07:04:08 +0000
ROA not before: Mon 14 Jul 2025 07:04:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.249.192.0/21 maxlen: 24
89.249.200.0/24 maxlen: 24
89.249.206.0/23 maxlen: 24
212.42.192.0/20 maxlen: 24
212.42.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:07:bf:84:a7:80:34:e4:8e:99:b9:4b:7c:1e:0b:d7:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Jul 14 07:04:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4b5208e3ee8bfe0f5f36df9b36650312e2d1f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6e:44:11:13:aa:49:36:15:30:8d:41:bc:35:
76:54:10:a6:5e:04:5b:fd:72:d2:6c:9a:b8:22:25:
c0:b4:0b:dd:0b:55:54:db:e4:79:03:89:46:da:59:
90:ad:43:e3:55:d9:ba:3e:a2:be:3c:89:27:42:62:
d8:42:77:3c:bd:c3:83:14:6c:bc:11:34:52:22:05:
c0:70:96:9a:05:f1:f3:1e:58:54:35:9d:40:74:a0:
8b:05:89:10:f1:7a:61:57:6f:61:f7:7c:b8:c2:d3:
9d:78:7c:8a:8b:9b:86:01:06:0a:65:db:df:b7:d1:
8d:db:f4:34:a4:e9:ca:7e:f4:cc:d7:6e:dc:aa:f6:
c2:72:c4:bc:7f:27:0d:4e:fc:39:a0:d4:e7:c7:ad:
87:e6:9f:c6:19:13:95:22:a4:c0:90:42:19:20:82:
34:6d:18:ec:fd:ac:e4:06:71:e5:bb:f5:bb:77:79:
ca:46:24:c4:9e:27:31:c7:a1:21:cf:eb:f5:53:bd:
7a:52:cc:c1:ff:85:f5:3f:63:c1:d3:b5:d6:e0:e7:
b4:0f:f2:53:9d:ed:0c:22:19:97:d9:56:e0:08:68:
6d:db:1d:87:4b:55:c0:f0:8c:32:75:f6:07:46:0c:
8e:64:bc:c1:ad:55:04:88:1e:3a:35:39:e0:7e:ce:
86:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B5:20:8E:3E:E8:BF:E0:F5:F3:6D:F9:B3:66:50:31:2E:2D:1F:36
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/1LUgjj7ov-D18235s2ZQMS4tHzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.192.0-89.249.200.255
89.249.206.0/23
212.42.192.0/19
Signature Algorithm: sha256WithRSAEncryption
43:97:c6:03:31:f5:33:a4:98:58:b2:0e:5f:63:b0:34:42:db:
fd:01:89:62:37:38:55:f0:4e:dc:1c:a3:b4:02:a2:78:0d:12:
0e:cd:13:62:fc:c9:09:f1:9b:33:4a:19:0f:15:a8:dd:6d:ab:
75:44:aa:76:c1:05:3d:28:75:28:4c:e4:5e:3e:ff:0f:25:46:
4d:ca:c6:39:ad:5a:53:19:b1:e5:e5:dc:6d:17:f1:c1:66:a4:
3e:c9:20:b4:23:0e:33:14:13:53:24:17:a4:12:28:c8:eb:97:
83:ef:e4:fc:45:b2:6a:29:ff:23:61:4d:71:27:6c:da:3d:cb:
46:37:d6:be:78:dd:35:da:f7:c3:fb:b9:39:a0:72:84:39:d6:
c8:71:64:4e:51:2b:53:1a:de:6d:0e:d0:db:e7:8b:23:c8:ae:
73:0d:bc:7c:01:1b:74:7b:f2:ae:cf:09:bf:f3:aa:47:75:57:
61:fa:b1:bf:28:47:f1:83:b0:a0:44:98:60:0a:b9:a7:ee:5d:
e9:98:f2:d3:e5:c6:cf:20:94:81:b7:af:bc:fe:2d:29:e1:b5:
9d:29:2b:3e:09:da:ef:54:88:3b:dc:0e:86:65:90:56:be:5d:
29:fc:26:20:ba:72:74:c3:fd:ad:24:07:5b:97:0a:29:36:1d:
79:41:52:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 18:15:54 2025 by rpki-client