Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/uAJ5YEwLa8vFd6ZT3ZsbQ7S3dsg.roa
File: uAJ5YEwLa8vFd6ZT3ZsbQ7S3dsg.roa (raw, json)
Hash identifier: 57upNSHrg2V1Qh8Bdh+Hje35HpeVx87rlWz/YvTzTOU=
Subject key identifier: B8:02:79:60:4C:0B:6B:CB:C5:77:A6:53:DD:9B:1B:43:B4:B7:76:C8
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0198194409455A56B6F86DBB13EC263DA7E6
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/uAJ5YEwLa8vFd6ZT3ZsbQ7S3dsg.roa
Signing time: Thu 17 Jul 2025 16:42:25 +0000
ROA not before: Thu 17 Jul 2025 16:42:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216145
IP address blocks: 89.33.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 19:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:19:44:09:45:5a:56:b6:f8:6d:bb:13:ec:26:3d:a7:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 17 16:42:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b80279604c0b6bcbc577a653dd9b1b43b4b776c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e7:01:3d:3a:25:c1:9e:35:11:83:0b:f2:be:
15:68:77:fc:ca:91:4c:82:2c:97:a4:77:e9:36:d9:
ed:bc:a8:c2:c6:b5:0d:8b:c5:05:7f:8d:82:0e:36:
38:74:78:3e:5a:75:05:8d:fc:f2:2b:ee:ff:b3:18:
46:c1:4f:c0:55:e8:e5:fd:b8:f0:4a:a6:0c:df:1a:
1e:78:91:5e:81:f2:37:d5:60:af:40:9c:9b:7c:79:
d8:16:74:f3:7d:58:44:89:4c:55:b1:e5:58:16:e1:
15:48:02:0a:4f:22:32:a9:1b:7a:b9:68:43:40:da:
cc:c9:ef:60:2d:42:a5:b2:a0:2d:56:92:84:22:3b:
f3:f3:da:23:13:df:4e:db:c2:f2:8c:ab:70:c7:d9:
64:dd:f2:17:a8:e9:6e:49:02:7e:c5:d4:0b:0d:18:
b2:f8:f8:a1:3d:4a:01:9e:05:8c:86:a2:e1:3c:c0:
fc:5d:5c:14:d8:b0:75:7b:41:a9:d4:e4:34:f6:76:
27:ee:9a:92:ba:2c:67:b4:2c:26:96:8d:f2:0d:c6:
12:d5:a0:3d:60:29:e3:49:55:09:d8:55:db:91:fd:
00:22:fc:05:c8:df:46:7b:2b:3b:37:c8:9a:fa:c9:
49:fa:8e:48:74:bf:34:fc:0a:0c:49:32:86:ad:cf:
57:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:02:79:60:4C:0B:6B:CB:C5:77:A6:53:DD:9B:1B:43:B4:B7:76:C8
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/uAJ5YEwLa8vFd6ZT3ZsbQ7S3dsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.193.0/24
Signature Algorithm: sha256WithRSAEncryption
88:79:38:71:cf:cb:c4:c6:ed:85:8e:26:09:16:f8:b9:5d:73:
2e:d0:9c:b0:c1:5e:6b:32:94:6c:01:af:ca:02:35:73:df:36:
aa:48:f9:8a:4c:97:02:37:bb:e3:0d:98:91:47:e8:d0:89:45:
6a:34:82:54:23:e8:9a:5a:70:80:2b:59:23:a7:e2:57:5a:d9:
8c:74:54:dc:df:79:0e:a5:5d:c6:1e:3f:51:04:e2:1f:70:4f:
29:cb:61:0f:20:d8:f5:18:73:1b:1a:f8:17:b3:b5:78:86:37:
6a:88:76:6d:d0:a3:34:43:6b:0f:98:fb:91:d9:be:e1:2e:ad:
03:04:dc:1f:42:8c:ec:61:0e:2a:9c:88:1d:c2:a8:f9:2b:22:
d0:5c:56:da:dc:ac:50:02:fe:b9:c1:e0:73:d0:2d:cb:4a:37:
f7:b3:c1:32:99:b7:66:ad:97:25:74:b9:eb:d1:d6:40:eb:b2:
c5:85:7b:0a:c9:d0:bf:62:8e:ec:20:59:ee:7d:41:d9:6d:99:
d6:d1:26:ec:00:32:fd:31:dc:68:70:4b:a1:51:63:26:bb:68:
7b:db:0a:8c:1e:6b:ca:a9:a0:71:57:88:4e:f0:dd:4c:28:90:
43:fe:f2:9c:11:64:b0:5b:b1:4a:ef:de:ab:33:9c:f7:7b:da:
84:ad:71:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 03:50:25 2025 by rpki-client