Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_xgIBNqquta9P9UZb8dyD9rzKXY.roa
File: _xgIBNqquta9P9UZb8dyD9rzKXY.roa (raw, json)
Hash identifier: 6+BlekqRTyrcWOhWUu20KTz0UtODACAU6Mr9WAYy1vw=
Subject key identifier: FF:18:08:04:DA:AA:BA:D6:BD:3F:D5:19:6F:C7:72:0F:DA:F3:29:76
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019980DCE0D1F9915A3790C79A63F870F5D3
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_xgIBNqquta9P9UZb8dyD9rzKXY.roa
Signing time: Thu 25 Sep 2025 12:33:03 +0000
ROA not before: Thu 25 Sep 2025 12:33:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51847
IP address blocks: 89.213.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:80:dc:e0:d1:f9:91:5a:37:90:c7:9a:63:f8:70:f5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 25 12:33:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff180804daaabad6bd3fd5196fc7720fdaf32976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b8:a5:00:25:ae:d5:98:8c:ac:41:0c:04:5e:
b5:50:eb:cc:04:21:c9:8e:31:0a:8e:83:9a:99:13:
7d:46:bb:42:aa:4c:07:4e:67:64:cd:77:7b:90:b2:
ea:0e:5a:df:c9:7a:bd:09:20:10:40:28:56:5e:dd:
a0:aa:ae:a9:40:03:bb:89:71:b3:74:48:60:76:8b:
77:1f:06:fe:11:2f:e7:50:da:27:e3:5b:a6:e5:4b:
28:b4:e5:46:5d:cb:fa:5f:f8:99:72:0c:e9:8b:ae:
50:95:a5:84:fd:18:2d:f1:8e:4c:8f:d6:a5:d4:f1:
f4:04:1c:1b:c8:42:f6:c5:a0:26:e7:e8:a2:3d:8c:
42:45:f2:35:2d:53:2b:e7:1c:b7:e6:61:1e:e6:93:
9d:65:12:e4:a9:b0:fc:8b:09:b6:20:fd:3b:14:94:
56:00:84:7e:8a:92:ae:09:01:c9:f3:bb:2c:7d:5c:
42:a3:0e:c3:47:82:3d:49:64:ba:ca:f6:f4:51:eb:
fd:5b:38:3e:b6:b1:ab:a2:dd:79:5e:41:11:ba:a8:
6b:7d:f8:f9:29:64:1b:9e:e6:78:af:9d:6e:af:7d:
ee:92:8e:23:0e:6d:04:85:5f:51:26:1d:9a:31:61:
4e:1a:a0:24:1d:46:4a:27:35:21:df:bf:aa:f0:88:
7f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:18:08:04:DA:AA:BA:D6:BD:3F:D5:19:6F:C7:72:0F:DA:F3:29:76
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_xgIBNqquta9P9UZb8dyD9rzKXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.123.0/24
Signature Algorithm: sha256WithRSAEncryption
69:1f:8a:8e:5f:ca:d1:69:f0:d8:a3:ef:b7:0f:d9:a8:bf:e1:
4b:28:00:a6:5e:b4:b3:94:8b:3c:bd:9c:33:3e:ef:ce:f5:ec:
86:27:e8:22:c8:40:78:04:75:9a:a3:55:25:4e:25:5b:56:8f:
b0:0c:05:82:5c:a3:19:60:0d:bc:b4:2f:b1:42:70:00:28:53:
b7:67:08:07:ca:4e:bd:59:82:66:bc:57:45:1e:8d:e8:47:37:
25:33:1e:8d:13:0f:45:98:c3:44:ef:d9:46:97:bd:73:c6:51:
7d:9c:13:1c:66:2b:4e:f3:17:aa:ea:ae:10:de:f9:f4:5e:66:
ac:c0:d0:51:e1:ca:5f:12:cb:97:f3:6b:2a:01:66:a0:c3:71:
28:83:d8:53:27:dd:47:37:96:9b:41:bf:c1:53:ba:0f:71:00:
7e:ff:c2:3c:f8:80:9d:66:a7:7e:82:7c:22:1f:5a:7e:ea:c9:
5b:21:a4:ee:d0:21:f9:c7:30:03:a4:91:a6:f4:fb:13:55:4c:
ae:57:bf:71:67:48:cd:ca:f0:34:32:16:1f:7f:c3:11:3b:40:
82:81:64:c4:9b:9b:83:ad:15:dd:24:38:44:fd:c2:52:59:01:
ee:7d:ad:78:1f:c7:12:e4:95:dc:72:b2:ee:1a:07:eb:97:72:
f9:13:af:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZmA3ODR+ZFaN5DHmmP4cPXTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwOTI1MTIzMzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjE4MDgwNGRhYWFiYWQ2YmQzZmQ1MTk2ZmM3NzIwZmRhZjMyOTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LilACWu1ZiMrEEMBF61UOvMBCHJ
jjEKjoOamRN9RrtCqkwHTmdkzXd7kLLqDlrfyXq9CSAQQChWXt2gqq6pQAO7iXGz
dEhgdot3Hwb+ES/nUNon41um5UsotOVGXcv6X/iZcgzpi65QlaWE/Rgt8Y5Mj9al
1PH0BBwbyEL2xaAm5+iiPYxCRfI1LVMr5xy35mEe5pOdZRLkqbD8iwm2IP07FJRW
AIR+ipKuCQHJ87ssfVxCow7DR4I9SWS6yvb0Uev9Wzg+trGrot15XkERuqhrffj5
KWQbnuZ4r51ur33uko4jDm0EhV9RJh2aMWFOGqAkHUZKJzUh37+q8Ih/GQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP8YCATaqrrWvT/VGW/Hcg/a8yl2MB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvX3hnSUJOcXF1dGE5UDlVWmI4ZHlEOXJ6S1hZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWdV7MA0G
CSqGSIb3DQEBCwUAA4IBAQBpH4qOX8rRafDYo++3D9mov+FLKACmXrSzlIs8vZwz
Pu/O9eyGJ+giyEB4BHWao1UlTiVbVo+wDAWCXKMZYA28tC+xQnAAKFO3ZwgHyk69
WYJmvFdFHo3oRzclMx6NEw9FmMNE79lGl71zxlF9nBMcZitO8xeq6q4Q3vn0Xmas
wNBR4cpfEsuX82sqAWagw3Eog9hTJ91HN5abQb/BU7oPcQB+/8I8+ICdZqd+gnwi
H1p+6slbIaTu0CH5xzADpJGm9PsTVUyuV79xZ0jNyvA0MhYff8MRO0CCgWTEm5uD
rRXdJDhE/cJSWQHufa14H8cS5JXccrLuGgfrl3L5E68y
-----END CERTIFICATE-----
Generated at Thu Oct 9 01:27:59 2025 by rpki-client