Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/iwQbkJtBuAm_xcfzDuJT6i57BjY.roa
File: iwQbkJtBuAm_xcfzDuJT6i57BjY.roa (raw, json)
Hash identifier: RmTZJ40kwHa9kbSdBRPYJl4skgdfEXdZGrx35wy6Kio=
Subject key identifier: 8B:04:1B:90:9B:41:B8:09:BF:C5:C7:F3:0E:E2:53:EA:2E:7B:06:36
Certificate issuer: /CN=a750263823402b83c11c5014d32666dcab111447
Certificate serial: 01980E40DE148130329EA7C502BBED2757D8
Authority key identifier: A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/iwQbkJtBuAm_xcfzDuJT6i57BjY.roa
Signing time: Tue 15 Jul 2025 13:23:08 +0000
ROA not before: Tue 15 Jul 2025 13:23:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 89.28.185.0/24 maxlen: 24
89.28.186.0/24 maxlen: 24
89.28.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0e:40:de:14:81:30:32:9e:a7:c5:02:bb:ed:27:57:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a750263823402b83c11c5014d32666dcab111447
Validity
Not Before: Jul 15 13:23:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b041b909b41b809bfc5c7f30ee253ea2e7b0636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3c:95:80:6f:e3:b1:9b:5a:3d:9f:a2:37:5e:
35:24:96:81:05:02:1a:ee:3a:cc:7d:ad:6c:ec:51:
f6:b0:30:8f:59:37:b6:37:2c:f1:f2:38:b9:aa:3e:
75:f4:57:e1:76:b5:78:36:57:b1:2a:71:f3:f7:5a:
80:79:90:0b:30:8e:6a:30:10:0a:09:c8:69:68:c6:
89:ce:60:60:5a:5b:35:a2:8c:bf:5e:61:52:a0:90:
4d:c7:ef:b8:f6:74:ed:45:b1:05:8e:fe:7b:53:e7:
57:85:6b:e2:6e:6b:73:d7:4f:27:68:58:b5:38:63:
06:a9:09:4f:8b:0b:91:5c:e2:d0:9a:7b:45:23:db:
a2:b0:10:28:b4:1c:fa:68:7a:b6:a7:fc:19:b9:69:
c3:e9:14:2c:c5:62:37:75:45:34:41:40:51:22:cb:
56:e7:ec:c0:ae:c4:8d:16:9d:f3:7f:2f:91:80:5b:
86:bd:10:f5:94:12:56:74:e0:79:bc:00:2c:2e:3f:
cf:23:62:9e:22:56:93:62:e9:ec:7d:ec:49:68:1e:
cc:a8:4c:a4:22:ff:06:16:73:d4:7c:e5:28:fe:47:
d8:ea:2f:f2:8e:05:af:c4:71:dc:a7:04:68:87:f0:
d0:b0:ce:a6:2b:02:6a:95:5c:ef:a8:99:ae:61:4a:
27:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:04:1B:90:9B:41:B8:09:BF:C5:C7:F3:0E:E2:53:EA:2E:7B:06:36
X509v3 Authority Key Identifier:
keyid:A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/iwQbkJtBuAm_xcfzDuJT6i57BjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.28.185.0-89.28.187.255
Signature Algorithm: sha256WithRSAEncryption
ac:05:e3:86:06:3e:c5:6c:bd:32:a9:50:da:91:97:d8:cf:6d:
20:b1:8a:23:32:28:40:5e:58:01:70:7e:e2:51:65:d3:f5:a2:
e1:eb:a2:77:44:7d:6e:cc:20:08:56:d6:90:1f:15:1a:89:8d:
2f:cb:68:67:e1:1e:72:1c:b4:26:4f:e2:d7:fb:a8:88:f8:32:
47:a8:71:6d:df:d7:ac:a9:54:d1:ee:29:1d:30:1b:eb:c2:e6:
82:f6:ba:c3:96:70:c1:ae:e6:c5:b8:e6:1e:23:73:a8:ea:d8:
d0:37:e9:22:87:2b:78:db:ca:1f:93:b2:45:c3:24:7e:da:6b:
9d:65:44:d2:04:4f:51:e9:d5:2b:16:ed:ea:70:69:80:ab:45:
bb:9c:41:8f:92:2a:ea:af:8a:af:7d:c2:ea:56:7e:12:b3:cb:
9c:36:90:e2:da:32:3b:9f:80:1c:4c:1f:fd:18:af:5a:1e:cb:
1f:d5:f4:eb:b6:3a:cb:c2:3c:c8:69:06:79:1a:7b:a6:07:ae:
ef:d8:eb:7a:2c:57:f4:62:b1:f4:37:0a:25:3c:06:db:68:39:
89:69:65:20:6f:65:bb:1a:c7:5d:bc:d5:25:3f:e2:35:90:c3:
6d:68:5a:f9:41:f6:a8:9b:40:8d:3c:a9:36:4c:e9:ab:1a:47:
75:e7:e9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 09:34:48 2025 by rpki-client