Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Lsisa8J9QtuuO6Aln_kVqJP3xUA.roa
File: Lsisa8J9QtuuO6Aln_kVqJP3xUA.roa (raw, json)
Hash identifier: 2x04fPZRGHkyW1kITLr2MbL057f/oV8NJ3ZKhLsbVNE=
Subject key identifier: 2E:C8:AC:6B:C2:7D:42:DB:AE:3B:A0:25:9F:F9:15:A8:93:F7:C5:40
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01999EF07AC987C6DA92BCBAAED895E3143D
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Lsisa8J9QtuuO6Aln_kVqJP3xUA.roa
Signing time: Wed 01 Oct 2025 08:43:04 +0000
ROA not before: Wed 01 Oct 2025 08:43:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215026
IP address blocks: 89.213.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9e:f0:7a:c9:87:c6:da:92:bc:ba:ae:d8:95:e3:14:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 1 08:43:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ec8ac6bc27d42dbae3ba0259ff915a893f7c540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2f:fb:c1:ec:ff:f6:cc:e5:ca:15:0a:2d:cb:
0a:63:ff:83:b8:7f:80:9b:33:ab:74:5d:e0:d2:41:
6f:96:55:39:2b:8f:cf:dd:db:96:02:9e:ca:7a:14:
5d:51:86:e6:c0:a9:b6:40:e1:38:eb:c3:27:8b:02:
31:48:c8:50:66:12:b5:bc:30:3a:a9:08:9e:f9:f8:
7a:7d:e5:6d:2f:54:1a:f2:fb:21:4a:38:e7:0d:c5:
7c:89:be:f7:8d:04:81:d2:0e:44:31:6b:c6:ce:ce:
7c:c2:3f:5a:c6:07:e7:5e:6e:5a:31:46:f9:52:83:
47:fb:82:f8:37:33:a3:e0:f0:7b:6e:e5:1c:ae:77:
f8:85:2a:28:eb:20:0a:79:fb:92:21:15:70:1d:45:
b5:ef:3b:cf:e3:14:68:aa:a5:e7:e5:50:a1:e4:70:
fe:b9:ad:17:77:16:8e:60:ef:f2:7f:72:a7:e9:44:
3a:92:a1:4d:de:13:a0:cb:d2:75:3d:30:d2:66:e7:
d3:76:d2:05:f2:fa:b1:2d:25:bc:74:a6:62:e1:65:
ab:c9:68:e3:b4:6a:33:6d:e9:13:c9:1d:31:60:b2:
42:5e:89:e2:86:82:c7:cb:02:6a:62:d2:ca:02:ee:
24:14:ae:ff:b1:bd:67:bf:81:20:02:b2:9e:dc:dd:
16:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C8:AC:6B:C2:7D:42:DB:AE:3B:A0:25:9F:F9:15:A8:93:F7:C5:40
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Lsisa8J9QtuuO6Aln_kVqJP3xUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.96.0/24
Signature Algorithm: sha256WithRSAEncryption
00:c6:8d:a3:f9:7b:b1:26:fe:7d:1d:ce:1b:4c:e4:91:3c:43:
d8:3d:34:a9:4e:e5:90:6c:e2:1c:92:39:33:58:e1:93:6a:f1:
dc:a8:0e:f0:a0:0e:1d:5e:70:15:29:89:2f:a0:ab:60:2f:94:
8e:45:0e:dd:a9:d6:4a:ae:d2:75:aa:97:55:7b:0b:ee:3a:36:
ad:1b:b1:46:21:87:27:6c:e3:44:22:d6:a3:33:66:82:b6:8a:
b8:23:34:31:95:07:1b:bc:65:9a:eb:65:43:73:f3:84:0a:b8:
64:ac:ba:3a:da:28:5b:2d:6f:8b:f5:36:c1:11:69:ce:1b:6b:
d5:ff:44:a5:22:c5:17:75:88:8f:cd:41:d7:6a:cc:1b:84:bf:
c7:f4:0d:40:37:9b:c3:75:5f:70:ed:be:14:c8:d7:73:50:69:
45:70:db:5d:c3:ab:f6:53:41:a9:02:f9:01:47:db:fd:b0:87:
7d:f3:0e:3c:6a:a8:75:23:38:64:b5:70:c2:1f:cb:14:1d:f3:
ef:90:b4:28:33:75:71:e5:20:64:cb:c5:7c:b7:4d:9e:a2:4b:
71:af:b7:20:25:9c:9d:7d:d1:91:9c:11:a8:38:90:eb:23:5f:
d7:90:16:2e:27:f8:34:25:eb:1e:43:3d:0a:81:d7:d5:22:f7:
f1:d0:6b:b1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZme8HrJh8bakry6rtiV4xQ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUxMDAxMDg0MzA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZWM4YWM2YmMyN2Q0MmRiYWUzYmEwMjU5ZmY5MTVhODkzZjdjNTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoi/7wez/9szlyhUKLcsKY/+DuH+A
mzOrdF3g0kFvllU5K4/P3duWAp7KehRdUYbmwKm2QOE468MniwIxSMhQZhK1vDA6
qQie+fh6feVtL1Qa8vshSjjnDcV8ib73jQSB0g5EMWvGzs58wj9axgfnXm5aMUb5
UoNH+4L4NzOj4PB7buUcrnf4hSoo6yAKefuSIRVwHUW17zvP4xRoqqXn5VCh5HD+
ua0XdxaOYO/yf3Kn6UQ6kqFN3hOgy9J1PTDSZufTdtIF8vqxLSW8dKZi4WWryWjj
tGozbekTyR0xYLJCXonihoLHywJqYtLKAu4kFK7/sb1nv4EgArKe3N0WWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC7IrGvCfULbrjugJZ/5FaiT98VAMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvTHNpc2E4SjlRdHV1TzZBbG5fa1ZxSlAzeFVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWdVgMA0G
CSqGSIb3DQEBCwUAA4IBAQAAxo2j+XuxJv59Hc4bTOSRPEPYPTSpTuWQbOIckjkz
WOGTavHcqA7woA4dXnAVKYkvoKtgL5SORQ7dqdZKrtJ1qpdVewvuOjatG7FGIYcn
bONEItajM2aCtoq4IzQxlQcbvGWa62VDc/OECrhkrLo62ihbLW+L9TbBEWnOG2vV
/0SlIsUXdYiPzUHXaswbhL/H9A1AN5vDdV9w7b4UyNdzUGlFcNtdw6v2U0GpAvkB
R9v9sId98w48aqh1IzhktXDCH8sUHfPvkLQoM3Vx5SBky8V8t02eoktxr7cgJZyd
fdGRnBGoOJDrI1/XkBYuJ/g0JeseQz0KgdfVIvfx0Gux
-----END CERTIFICATE-----
Generated at Thu Oct 9 01:28:01 2025 by rpki-client