Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/KY1KwBIbpDWv4CCjx8UiHN7VKq8.roa
File: KY1KwBIbpDWv4CCjx8UiHN7VKq8.roa (raw, json)
Hash identifier: QqbpkR5TMS78tB/CNfk/NYSyIt/oi3j5b92wPVimYfk=
Subject key identifier: 29:8D:4A:C0:12:1B:A4:35:AF:E0:20:A3:C7:C5:22:1C:DE:D5:2A:AF
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019929461B7301DA050067DC01CD207F9CE1
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/KY1KwBIbpDWv4CCjx8UiHN7VKq8.roa
Signing time: Mon 08 Sep 2025 12:21:24 +0000
ROA not before: Mon 08 Sep 2025 12:21:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 89.47.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:29:46:1b:73:01:da:05:00:67:dc:01:cd:20:7f:9c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Sep 8 12:21:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=298d4ac0121ba435afe020a3c7c5221cded52aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:f9:7c:63:54:52:a9:ec:48:56:26:8b:95:05:
06:13:a5:93:22:30:85:c6:54:1a:ad:77:25:33:0c:
3c:33:5d:27:f9:b1:a4:de:89:77:e0:95:65:f9:2f:
a5:15:33:59:31:d2:a7:49:11:2f:a8:be:04:f3:f2:
f1:ad:81:e0:ac:ac:ae:41:89:c0:fa:44:f1:58:ab:
3d:a0:ef:8a:6e:b5:69:7f:2b:51:20:b6:de:fb:31:
61:c0:86:91:ed:23:c5:f6:51:9e:d9:83:3b:95:25:
24:0d:87:ad:a8:fa:15:83:f7:90:ab:4f:d1:31:a7:
31:4e:51:ee:b2:c6:a2:e2:4b:95:3a:74:a6:66:88:
79:cd:4b:43:d0:6e:5e:37:e5:88:90:83:99:fb:16:
b2:50:67:85:7e:d4:d4:50:20:a7:4e:92:02:a1:11:
71:39:76:0e:f4:37:65:e5:5f:03:3d:ef:7a:b4:a7:
02:12:70:66:a8:c4:d3:79:76:f1:a8:6d:3d:b5:37:
37:d3:81:5d:c2:e2:4c:9f:fc:99:db:e8:17:bb:90:
5d:e8:2a:30:a1:aa:63:a6:0f:18:1c:2f:ff:02:43:
f5:97:33:3d:06:c1:66:c3:de:12:fd:3d:10:2d:06:
0c:78:59:6e:fd:54:bd:97:83:43:01:1f:7f:df:0b:
13:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8D:4A:C0:12:1B:A4:35:AF:E0:20:A3:C7:C5:22:1C:DE:D5:2A:AF
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/KY1KwBIbpDWv4CCjx8UiHN7VKq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.116.0/24
Signature Algorithm: sha256WithRSAEncryption
38:d8:43:0e:a7:0b:0b:3e:43:27:99:0a:8a:67:16:52:70:a8:
af:a4:26:51:c8:b0:60:96:62:6e:41:22:5e:42:95:02:52:8e:
41:16:73:ab:44:f7:11:b9:a3:02:da:14:53:89:38:c3:89:1c:
52:7d:dc:65:7e:b9:ba:c0:bf:81:09:f9:be:e9:ff:1d:b2:4c:
38:5c:eb:b7:03:c9:02:76:46:e5:80:c2:f9:b7:3f:46:2d:fc:
a7:99:c4:26:4c:c3:9f:ea:75:5b:db:89:3e:68:d2:ec:5d:0e:
74:2f:47:a0:68:52:27:fa:9f:03:08:d3:52:34:62:99:da:a3:
80:5d:7f:2a:c3:9e:9d:a6:e9:54:b1:12:f4:4d:3e:67:ac:c2:
ea:cd:fb:f1:d8:f4:55:68:50:c7:43:3e:67:a1:cc:bd:e2:17:
eb:d4:2e:26:1d:ee:18:4b:5b:9d:f8:43:b0:46:11:23:e2:bb:
08:38:8b:d8:1b:4c:c4:88:37:64:d7:84:1e:9c:fe:b9:0a:5c:
20:31:7e:92:ed:4d:e8:c0:fe:a5:d3:02:46:2a:b1:17:6f:19:
f1:66:5b:43:1d:70:a1:b7:5c:6e:40:c3:f0:dc:5b:76:39:41:
d7:2a:98:54:ab:da:b6:3f:d5:7d:3f:3b:c9:15:45:31:55:36:
70:f2:b6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:28:31 2025 by rpki-client