Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IK8k6BLF5hpwzvnffb5QpHLH-dY.roa
File: IK8k6BLF5hpwzvnffb5QpHLH-dY.roa (raw, json)
Hash identifier: x+NqG8OxSbFSfqP09IlobTzQQYjv27u7xjb+3P7G+mQ=
Subject key identifier: 20:AF:24:E8:12:C5:E6:1A:70:CE:F9:DF:7D:BE:50:A4:72:C7:F9:D6
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019928220F74B42C6F57CAC8AE5B9F4BDD10
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IK8k6BLF5hpwzvnffb5QpHLH-dY.roa
Signing time: Mon 08 Sep 2025 07:02:24 +0000
ROA not before: Mon 08 Sep 2025 07:02:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207695
IP address blocks: 77.90.41.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 14:36:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:22:0f:74:b4:2c:6f:57:ca:c8:ae:5b:9f:4b:dd:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 8 07:02:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20af24e812c5e61a70cef9df7dbe50a472c7f9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1f:83:79:7c:d9:1b:97:0b:7b:82:e6:14:e5:
80:6d:5a:0a:62:47:5b:07:e8:dd:d3:28:fe:ad:0e:
a3:6b:fb:23:42:28:55:5d:9d:06:86:2f:ab:81:f1:
5f:9d:8d:c7:fc:69:4b:c4:e5:c5:68:02:40:ad:5d:
d0:e6:12:22:14:ac:c9:74:73:98:e1:c2:69:4f:d7:
70:8b:36:93:a0:01:5b:d2:a4:2c:a9:5b:49:5f:30:
65:6c:0c:5d:87:dc:63:87:df:8b:c6:81:57:df:8f:
62:d2:6f:de:9b:d2:5e:1f:ac:ad:7e:2c:c5:bc:bf:
b1:bd:e6:a1:0d:e2:99:05:ac:78:5e:67:f6:e9:8e:
8a:a5:b5:8f:d2:62:f7:47:36:f5:4c:f4:7a:1f:b1:
e3:bf:b1:a7:24:5a:5d:2b:87:30:74:c7:1a:73:2e:
30:c5:9c:b1:91:fa:b8:86:76:87:6f:8c:b2:ac:10:
3d:b1:7a:54:a6:16:b2:2f:4a:b5:17:40:20:4e:51:
63:41:69:ca:5e:68:2b:6c:90:04:bd:16:75:0b:57:
ce:ed:c6:d1:02:f8:72:c9:18:af:13:c6:87:c6:bb:
72:8f:d0:a5:89:a9:fe:e1:63:39:01:6f:08:d7:14:
86:ab:dc:93:61:5f:77:a0:b0:e2:bc:56:9f:da:17:
1f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AF:24:E8:12:C5:E6:1A:70:CE:F9:DF:7D:BE:50:A4:72:C7:F9:D6
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IK8k6BLF5hpwzvnffb5QpHLH-dY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.41.0/24
77.90.52.0/24
Signature Algorithm: sha256WithRSAEncryption
25:67:20:c6:e7:a0:81:27:84:e0:48:fc:4a:5e:90:fe:45:31:
c3:42:74:4f:18:16:f1:a8:7c:48:ae:b2:4e:6d:cf:4c:ee:a3:
99:54:14:f4:db:29:5a:6d:cc:ba:bb:35:99:c5:57:cf:96:16:
32:ef:74:54:64:b2:75:28:33:3d:85:6d:83:d3:1e:82:6f:2a:
18:94:cd:f2:9e:ea:73:dc:2f:8c:ff:5d:5e:fa:cf:8b:15:4e:
c8:9f:e9:bf:65:7b:a5:be:30:79:9e:f7:21:58:3b:f9:d6:1e:
a6:3c:9d:f8:86:5c:6e:50:36:3f:77:0b:b1:23:48:9e:f8:60:
25:cb:e6:db:cf:fc:98:d2:ff:4e:32:0e:45:e7:8e:69:af:89:
7d:da:16:f7:4a:1f:6f:dd:df:4a:a4:42:cf:42:fd:ec:ed:fe:
aa:85:d9:b6:10:fa:5c:e0:2b:6f:63:0c:51:bb:27:8b:c7:79:
b9:c3:dd:35:32:1f:a7:b9:40:b3:c4:e4:77:19:78:82:70:e7:
21:b0:fc:65:f2:79:7b:6d:b0:1c:f1:2d:3f:fb:2b:ef:f1:7e:
6e:81:6e:98:f8:8e:d5:58:54:f2:43:a3:31:ad:b6:e5:2d:4e:
e8:8b:ec:f9:d2:01:18:7b:a7:9a:69:d5:04:48:19:51:d2:3d:
25:eb:98:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 18:20:27 2025 by rpki-client