Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hlX7eraRVA6V1OWrJgw3vScm_8I.roa
File: hlX7eraRVA6V1OWrJgw3vScm_8I.roa (raw, json)
Hash identifier: WzN/+8rGbP3M4oUIXsikOwK7Ci6mcDo1vKvYAQSLU3c=
Subject key identifier: 86:55:FB:7A:B6:91:54:0E:95:D4:E5:AB:26:0C:37:BD:27:26:FF:C2
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0199949C6B6BFDBEA183DD0A6386D01E1972
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hlX7eraRVA6V1OWrJgw3vScm_8I.roa
Signing time: Mon 29 Sep 2025 08:35:03 +0000
ROA not before: Mon 29 Sep 2025 08:35:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48529
IP address blocks: 89.213.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:94:9c:6b:6b:fd:be:a1:83:dd:0a:63:86:d0:1e:19:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 29 08:35:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8655fb7ab691540e95d4e5ab260c37bd2726ffc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:30:44:ef:6b:53:35:d6:69:17:de:5a:44:27:
19:4f:03:1b:d4:71:81:b9:d8:11:c0:a4:c6:7c:61:
dc:83:9c:cc:70:d6:1b:8d:f1:9a:e9:a1:98:b2:c5:
46:99:87:63:5c:52:f5:d9:61:75:bf:37:f4:2d:e4:
dc:19:63:cc:d8:ab:83:12:68:e1:81:8e:5f:96:d3:
41:03:58:87:f4:b3:26:fc:61:9b:7d:f6:3d:39:43:
dd:b1:c5:42:ca:96:2b:74:e8:72:2b:f8:5f:09:5e:
23:12:ba:e8:93:6e:83:50:95:9e:38:8d:3b:ee:8a:
10:84:e5:a9:19:0a:2a:e3:68:0a:be:45:b7:7d:72:
1a:8a:4e:2c:96:35:76:d3:80:21:7e:ba:d8:c0:0b:
fc:10:d4:f2:b6:ae:e8:54:3f:09:37:31:9a:19:49:
f9:9e:10:15:34:cd:c4:c2:90:41:2a:d9:7a:c8:f7:
92:4f:32:92:59:28:c0:a3:af:c1:d8:67:53:02:65:
92:5e:d0:15:3d:73:2e:3f:18:28:fd:5e:2e:49:8c:
a8:eb:f0:9f:55:b7:bf:a7:b8:71:5f:86:9e:55:63:
89:20:ab:84:92:1a:f7:9e:58:1b:2c:a8:a5:7f:a9:
10:43:38:90:c8:71:ae:91:72:a1:19:0a:9d:02:d6:
83:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:55:FB:7A:B6:91:54:0E:95:D4:E5:AB:26:0C:37:BD:27:26:FF:C2
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hlX7eraRVA6V1OWrJgw3vScm_8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.160.0/24
Signature Algorithm: sha256WithRSAEncryption
27:0b:e4:19:ff:18:a3:d5:77:99:7f:fc:aa:71:90:eb:7e:a7:
67:58:51:e6:ae:8b:4c:9b:23:b6:0f:0c:7b:d5:49:3f:32:c5:
b3:ce:1a:12:e6:df:e9:20:fd:b2:f3:ee:a5:c3:20:6f:27:04:
5f:8d:15:88:a0:92:56:55:53:75:d9:21:8a:91:90:51:ea:3f:
a4:0a:69:54:72:44:a2:7f:1f:95:b7:ba:7a:96:a0:21:ad:eb:
6d:71:3d:03:d4:47:34:60:11:44:08:da:85:86:07:89:6c:71:
10:58:f9:0f:1a:44:65:8c:5c:1e:c2:92:42:cb:36:e2:cf:8b:
a0:cb:0c:71:8a:98:7f:24:36:7c:ae:78:a6:9b:f3:4f:c5:1a:
f7:24:ef:99:04:1e:86:24:00:1f:05:57:60:b4:21:cc:4f:60:
f6:2e:8d:b4:60:0d:f5:93:75:49:1a:39:94:c2:de:ed:5d:a5:
4f:a0:b4:e9:c5:70:18:09:4d:68:9f:80:0b:f8:26:15:90:fa:
0e:f4:1d:43:43:7e:34:8e:b6:4b:42:c9:46:79:1b:e4:b2:a8:
57:17:75:69:75:98:48:48:fa:0a:cd:b6:29:fa:96:b8:50:ce:
44:ff:0f:e4:c2:9f:61:64:59:62:26:cc:6d:0d:cd:3a:08:39:
83:99:9e:a9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZmUnGtr/b6hg90KY4bQHhlyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwOTI5MDgzNTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjU1ZmI3YWI2OTE1NDBlOTVkNGU1YWIyNjBjMzdiZDI3MjZmZmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jBE72tTNdZpF95aRCcZTwMb1HGB
udgRwKTGfGHcg5zMcNYbjfGa6aGYssVGmYdjXFL12WF1vzf0LeTcGWPM2KuDEmjh
gY5fltNBA1iH9LMm/GGbffY9OUPdscVCypYrdOhyK/hfCV4jErrok26DUJWeOI07
7ooQhOWpGQoq42gKvkW3fXIaik4sljV204AhfrrYwAv8ENTytq7oVD8JNzGaGUn5
nhAVNM3EwpBBKtl6yPeSTzKSWSjAo6/B2GdTAmWSXtAVPXMuPxgo/V4uSYyo6/Cf
Vbe/p7hxX4aeVWOJIKuEkhr3nlgbLKilf6kQQziQyHGukXKhGQqdAtaD9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIZV+3q2kVQOldTlqyYMN70nJv/CMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvaGxYN2VyYVJWQTZWMU9XckpndzN2U2NtXzhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWdWgMA0G
CSqGSIb3DQEBCwUAA4IBAQAnC+QZ/xij1XeZf/yqcZDrfqdnWFHmrotMmyO2Dwx7
1Uk/MsWzzhoS5t/pIP2y8+6lwyBvJwRfjRWIoJJWVVN12SGKkZBR6j+kCmlUckSi
fx+Vt7p6lqAhrettcT0D1Ec0YBFECNqFhgeJbHEQWPkPGkRljFwewpJCyzbiz4ug
ywxxiph/JDZ8rnimm/NPxRr3JO+ZBB6GJAAfBVdgtCHMT2D2Lo20YA31k3VJGjmU
wt7tXaVPoLTpxXAYCU1on4AL+CYVkPoO9B1DQ340jrZLQslGeRvksqhXF3VpdZhI
SPoKzbYp+pa4UM5E/w/kwp9hZFliJsxtDc06CDmDmZ6p
-----END CERTIFICATE-----
Generated at Thu Oct 9 01:28:03 2025 by rpki-client