Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/56vdXltBouc6rFiViAKhXtpFHaw.roa
File: 56vdXltBouc6rFiViAKhXtpFHaw.roa (raw, json)
Hash identifier: 8iPbm+SvKwS4rzvGz6rP+KeC6G194/tb47uL3dZFYF4=
Subject key identifier: E7:AB:DD:5E:5B:41:A2:E7:3A:AC:58:95:88:02:A1:5E:DA:45:1D:AC
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019909863C7F1A1530E9A867D907307EFBBC
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/56vdXltBouc6rFiViAKhXtpFHaw.roa
Signing time: Tue 02 Sep 2025 08:23:36 +0000
ROA not before: Tue 02 Sep 2025 08:23:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.21.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:09:86:3c:7f:1a:15:30:e9:a8:67:d9:07:30:7e:fb:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Sep 2 08:23:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7abdd5e5b41a2e73aac58958802a15eda451dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a5:e1:d8:57:ae:1b:e7:26:45:a5:b4:7d:06:
df:9e:1c:d1:89:1a:6a:2b:e3:04:1d:4b:24:77:5c:
00:0b:70:b1:34:89:18:c6:69:41:9e:eb:27:e5:32:
3d:61:d7:38:9a:7a:a6:02:e5:e3:3d:86:cd:08:63:
da:9e:60:92:f3:9c:73:9d:0c:a7:82:80:df:e3:05:
6c:13:6c:ba:d6:04:2b:85:78:83:97:f4:0a:83:f0:
50:c8:76:0c:88:25:77:3f:f6:ad:3e:41:3d:44:28:
b3:ab:ad:db:b7:98:0c:a0:34:02:8f:14:36:75:24:
98:23:07:26:df:f3:7a:28:40:ff:ce:62:86:0d:85:
86:26:dd:e8:86:40:eb:88:f8:68:f8:25:f0:04:f9:
dc:5b:03:5d:a9:8c:85:3a:ad:1d:d7:4b:1f:c2:05:
74:29:cf:a0:34:0c:86:e3:29:7d:02:83:0d:f3:84:
1b:25:a6:af:b6:dc:2a:d9:c2:43:62:63:2c:0a:8f:
56:66:4d:d4:a4:38:26:32:98:b8:70:5c:30:63:08:
66:94:59:d6:00:eb:c9:9d:55:a8:b5:a8:98:f1:29:
f1:51:cd:64:b1:1c:79:83:4d:eb:ce:b7:9f:4b:5d:
3a:8a:16:51:89:ba:72:27:d9:34:44:4e:bc:08:49:
b4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AB:DD:5E:5B:41:A2:E7:3A:AC:58:95:88:02:A1:5E:DA:45:1D:AC
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/56vdXltBouc6rFiViAKhXtpFHaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.21.87.0/24
Signature Algorithm: sha256WithRSAEncryption
98:e0:1d:ab:ec:96:8a:d3:81:06:04:13:3c:98:88:ff:d2:3b:
7b:f4:9b:7f:ef:aa:04:fa:19:34:a3:59:32:9d:4b:c2:4d:a8:
a8:b8:65:fd:77:f1:f2:f9:f9:56:49:55:c6:32:b5:6b:ba:83:
c7:53:5b:c0:49:8e:05:7d:26:cc:e2:b8:cc:35:18:01:cd:58:
83:1f:e3:5b:16:b9:2f:e2:61:e4:05:2c:7a:a9:23:0b:7f:aa:
e4:42:c5:ef:7e:d6:68:bc:bf:be:8a:80:3d:ca:3a:e1:50:7e:
80:68:9a:36:3d:4c:15:00:f6:7a:a2:09:0f:13:af:a3:d9:d2:
fc:7f:cd:2d:2b:ea:88:8c:56:18:67:45:6d:a4:74:32:69:ec:
82:90:18:39:fd:0f:32:db:00:f2:8a:6c:33:44:75:7c:f0:80:
d5:b7:0d:a9:4a:f6:b9:93:b6:4d:dc:04:1b:90:1b:50:0d:f6:
74:c8:3b:2f:d1:b2:0e:cc:ce:68:19:38:76:a9:5d:a3:9f:fb:
25:28:ba:ba:23:60:92:92:68:ae:8c:f1:e0:1f:3c:e8:4e:16:
64:92:39:59:86:8d:84:3d:89:53:ac:4f:7b:08:4d:f4:64:d4:
fc:33:50:cf:52:6c:bb:85:61:53:e3:e1:4e:58:32:ec:84:ec:
bb:c0:71:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 22:24:53 2025 by rpki-client