Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/1-2Iyh2Pm09_LZIVUT4M6jXMJeJc.roa
File: 1-2Iyh2Pm09_LZIVUT4M6jXMJeJc.roa (raw, json)
Hash identifier: 1oymOvKiw1IjyRT46dBqGRvFNqFUmuGZg2PUU03JtnE=
Subject key identifier: FB:62:32:87:63:E6:D3:DF:CB:64:85:54:4F:83:3A:8D:73:09:78:97
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0199B47D65F6732B26B4EABB68540F058219
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/1-2Iyh2Pm09_LZIVUT4M6jXMJeJc.roa
Signing time: Sun 05 Oct 2025 13:09:00 +0000
ROA not before: Sun 05 Oct 2025 13:09:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215728
IP address blocks: 93.114.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Oct 2025 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b4:7d:65:f6:73:2b:26:b4:ea:bb:68:54:0f:05:82:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Oct 5 13:09:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb62328763e6d3dfcb6485544f833a8d73097897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:70:aa:05:4f:ae:28:ec:cc:48:a0:c0:9d:9f:
ad:35:2f:06:74:ae:b3:66:95:20:a5:f9:80:dd:31:
33:70:9d:ec:d3:b6:94:00:d1:98:2c:72:5d:8d:f0:
ef:a9:f9:3f:bc:02:35:be:fa:13:22:be:37:d5:e7:
8f:f9:fe:7f:e9:a0:bf:03:ec:f7:ca:a8:c4:49:a5:
84:38:d5:96:27:3a:63:00:23:f1:81:d3:cf:21:dd:
bc:36:f1:33:5f:62:b1:27:72:c2:eb:b2:8e:cc:0c:
e4:a5:49:c2:00:65:18:53:a0:61:8b:09:6b:24:ba:
62:dd:92:d0:e3:9a:8d:75:a9:0f:52:9b:31:cc:b9:
fe:70:98:01:75:98:ee:ae:34:1c:bd:17:d3:e1:f8:
9b:96:e1:28:cc:ec:8d:41:f6:d3:bc:a5:24:d8:cd:
3e:5f:1e:01:c8:f9:33:b6:30:04:a5:a3:56:da:28:
21:76:65:29:34:a6:f6:49:cd:13:19:87:4f:4f:84:
b3:f4:10:bf:62:dd:f9:52:5f:32:27:c9:5f:a1:0a:
3f:3a:7b:69:9e:19:df:7b:fd:cc:ba:4a:2b:87:b6:
ff:1c:c1:19:ee:61:b7:00:95:19:56:0f:51:94:19:
e8:dc:19:63:ce:bc:d2:16:ed:a7:56:18:d4:07:c3:
4f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:62:32:87:63:E6:D3:DF:CB:64:85:54:4F:83:3A:8D:73:09:78:97
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/1-2Iyh2Pm09_LZIVUT4M6jXMJeJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.72.0/24
Signature Algorithm: sha256WithRSAEncryption
13:13:af:ac:c3:d8:fb:16:1b:ef:78:a7:33:39:d6:16:fc:13:
cf:75:53:78:73:63:52:67:3a:2f:79:83:db:a3:e4:bf:ea:26:
0a:cf:69:65:ca:b1:e0:8e:d9:d7:a8:b4:d2:52:c4:ff:89:15:
b9:fe:d8:25:f1:ac:e5:b0:61:6e:56:14:63:4d:01:eb:17:f1:
a3:ca:b1:e6:72:d3:08:d8:d6:d1:81:11:13:cc:5b:2a:48:e3:
68:29:16:6e:52:8d:a1:19:32:ea:51:68:2a:0a:9a:8f:ea:36:
e8:58:af:ee:66:4c:91:27:39:60:3a:41:8d:5b:a4:ab:05:7c:
e2:b0:df:24:6f:8e:2f:ca:ea:b5:9a:03:b9:17:d9:e3:f2:40:
0f:dc:20:b7:78:1c:b3:06:ee:b2:49:30:81:e9:1d:11:f4:35:
94:34:65:30:02:7e:94:be:53:91:ac:94:8f:ce:28:4a:94:9b:
ba:eb:2d:c7:a0:07:6c:98:4b:4f:e4:fc:b8:9e:fd:e3:ad:39:
d2:c7:d5:08:70:d1:04:09:b3:9f:2c:30:07:76:aa:26:4e:f5:
9d:ea:8e:02:d8:d4:e7:15:ef:53:02:3b:15:37:72:9e:2f:1d:
0f:d9:c7:90:92:cc:e2:c2:3e:a1:25:d3:62:4e:b0:1c:d9:96:
3d:f4:b8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 23:26:17 2025 by rpki-client