Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1tNK4NTNIP5G-R5gyO1PxU4VIuM.roa
File: 1tNK4NTNIP5G-R5gyO1PxU4VIuM.roa (raw, json)
Hash identifier: giQpVt4eJxNeF26Go6ZsxW2ZLXP8eb1UNDJMdlWXyb4=
Subject key identifier: D6:D3:4A:E0:D4:CD:20:FE:46:F9:1E:60:C8:ED:4F:C5:4E:15:22:E3
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0198FB90077E3D8F8A5D07DA26977DB63AC5
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1tNK4NTNIP5G-R5gyO1PxU4VIuM.roa
Signing time: Sat 30 Aug 2025 15:19:36 +0000
ROA not before: Sat 30 Aug 2025 15:19:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215433
IP address blocks: 89.44.76.0/24 maxlen: 24
212.192.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:fb:90:07:7e:3d:8f:8a:5d:07:da:26:97:7d:b6:3a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 30 15:19:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6d34ae0d4cd20fe46f91e60c8ed4fc54e1522e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c0:2b:34:c4:bb:f1:19:50:49:e5:e6:47:c0:
85:00:3d:00:fc:86:c6:33:98:25:22:a3:13:d6:9d:
9f:a3:fe:2f:73:3d:35:be:23:22:25:02:6e:21:92:
16:74:05:d1:25:d6:50:2f:5d:6e:44:1e:a5:0d:65:
83:ad:90:4a:72:60:3a:3d:c2:60:34:a2:57:8f:5e:
05:0b:01:d5:29:bd:ad:ec:8d:b0:3a:d1:d7:eb:c6:
e4:02:ec:52:30:a5:8f:8b:4f:2c:79:6d:54:19:8f:
10:46:de:ef:4d:80:94:b7:64:c8:3a:c7:d2:bd:77:
37:bb:80:1a:23:08:ca:10:0b:00:6c:92:9a:9a:32:
80:86:10:02:ce:88:96:4d:dc:72:42:93:f7:4a:56:
dc:0d:fa:56:4e:3f:69:e9:06:d7:22:bc:86:2c:b6:
bd:64:9b:31:d4:eb:5e:40:61:61:a0:42:e0:1f:35:
8c:85:c1:9a:50:89:e1:1e:07:ee:c9:35:de:c0:53:
33:68:0d:66:c6:bd:e1:4a:3d:80:d6:9f:cb:62:9c:
08:33:7c:6c:c2:ff:6e:d9:58:95:d4:2e:d9:83:e0:
3c:7d:e8:63:d0:88:0f:61:16:fa:eb:37:12:3e:fd:
a9:6d:d6:0a:4d:c7:e0:df:b7:d5:f6:90:10:f1:31:
d5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D3:4A:E0:D4:CD:20:FE:46:F9:1E:60:C8:ED:4F:C5:4E:15:22:E3
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1tNK4NTNIP5G-R5gyO1PxU4VIuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.76.0/24
212.192.208.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:b3:b2:cf:81:c6:51:9b:da:d9:e3:98:41:73:a4:cf:e6:07:
74:79:fb:11:72:a0:42:b8:44:ae:60:f0:58:03:5c:ff:48:77:
ec:dd:16:f6:cf:ee:bd:10:30:ca:6b:39:4b:03:80:3e:91:c4:
bb:73:63:30:cb:4f:fd:4f:94:67:02:da:a0:df:99:9a:a9:05:
49:29:34:01:ca:37:21:3e:2f:91:6c:3f:90:2d:9e:a7:ad:f2:
bd:42:f4:36:79:5d:df:d2:72:25:91:13:40:ed:75:29:2e:3a:
6e:dc:08:0b:4d:a5:6c:3f:45:a8:e6:4d:26:bb:e8:15:69:98:
35:4e:74:9c:f1:21:f1:1e:3d:6f:9f:c9:da:7f:bd:5f:0a:9b:
e5:e0:35:58:92:cf:61:ce:de:22:b3:39:2e:89:0d:6d:ed:7b:
65:9f:0e:f3:1c:db:03:8a:1b:62:f8:62:51:49:2c:da:20:07:
36:e6:aa:7d:31:52:b7:0e:90:75:13:02:e0:8f:f6:9a:8d:40:
1b:b2:ec:5a:97:4c:9c:16:9c:2a:5f:ed:ba:c8:e3:a0:82:40:
39:47:ea:6e:30:5e:75:d3:73:dc:7a:84:be:53:ba:cf:8e:6e:
82:8e:ed:17:75:12:38:9a:08:2c:48:f0:ea:19:5c:89:ca:05:
17:50:31:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 15:43:50 2025 by rpki-client