Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/jMB-k8pBGp88vItJMomyVdZ2_gE.roa
File: jMB-k8pBGp88vItJMomyVdZ2_gE.roa (raw, json)
Hash identifier: tlwqcgZ5QLTir7mj2symAU7niQUfF+NgGNX2eVjL9Tc=
Subject key identifier: 8C:C0:7E:93:CA:41:1A:9F:3C:BC:8B:49:32:89:B2:55:D6:76:FE:01
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 0198AA02C31CA3BAD1B52B000DFC5D32ADA4
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/jMB-k8pBGp88vItJMomyVdZ2_gE.roa
Signing time: Thu 14 Aug 2025 19:16:04 +0000
ROA not before: Thu 14 Aug 2025 19:16:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205896
IP address blocks: 89.187.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:aa:02:c3:1c:a3:ba:d1:b5:2b:00:0d:fc:5d:32:ad:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Aug 14 19:16:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cc07e93ca411a9f3cbc8b493289b255d676fe01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2b:0e:6b:eb:3e:1a:79:68:aa:9c:f0:02:b5:
82:d8:55:5d:87:cf:a2:2a:5b:23:30:20:4f:82:83:
a9:85:5e:31:b5:2a:8f:50:87:41:44:4d:5e:f6:e0:
7b:71:ab:d2:1f:be:11:4f:c2:ba:cc:17:74:68:7c:
f6:af:07:e8:df:9b:86:df:3b:35:30:8a:ab:bd:f7:
c9:96:48:63:3d:3b:3f:30:e6:82:0d:3a:70:ae:ee:
c0:3d:07:79:fd:1d:0c:1e:37:64:a7:87:13:ae:88:
51:dd:37:30:3a:ab:dc:fb:c4:51:fd:0a:09:38:fc:
c9:24:52:a0:11:cf:ca:cb:10:98:cd:5c:6c:d8:e9:
61:a2:51:ab:76:eb:25:1c:95:f2:f5:e3:ef:74:ff:
d3:45:34:2f:81:8d:9f:68:d9:f6:96:82:55:a2:45:
85:bc:ef:63:fe:c7:26:d1:fc:30:05:98:fd:f6:e4:
b0:97:6e:7c:75:a4:5a:4f:da:7c:cc:6a:f0:43:fe:
27:10:1b:90:4f:98:41:42:3e:25:b0:03:21:14:e2:
8c:cb:08:f6:7e:ed:9e:d9:d4:5d:81:fe:90:a0:ba:
eb:0b:a8:4f:96:ee:f4:b3:34:78:a2:bf:e0:e3:6f:
45:4f:0f:e4:96:e3:9e:2f:03:3f:27:25:d3:e6:73:
b5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C0:7E:93:CA:41:1A:9F:3C:BC:8B:49:32:89:B2:55:D6:76:FE:01
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/jMB-k8pBGp88vItJMomyVdZ2_gE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.30.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:85:77:ed:d5:c8:06:36:ef:95:0b:69:ca:ec:d3:12:99:bc:
ad:c9:63:ab:43:69:49:94:18:5a:46:28:38:5a:5b:36:8c:07:
2e:5e:f0:e7:e3:c0:bb:10:2c:12:81:a0:77:17:7b:55:ad:ab:
30:fe:d9:8c:40:bc:dc:58:13:5f:4e:4a:7c:82:ed:33:4a:95:
d4:2e:ce:92:c7:2e:88:28:17:02:27:b1:4e:0b:c8:74:e0:a5:
f0:d1:33:24:c0:42:40:e3:8b:ef:93:fc:1f:1e:15:5a:6d:d6:
9b:59:f9:34:22:be:f1:bd:cd:1f:74:a6:1f:f5:51:b2:9f:fe:
cb:f5:74:af:54:ce:6e:0a:92:e0:16:22:70:5c:8e:48:d7:e0:
ec:81:48:97:f8:f2:78:29:f7:64:11:99:2e:40:f8:5e:98:d4:
8b:8d:9d:13:fd:70:f0:9a:14:c2:45:4c:69:f3:80:16:c4:84:
9b:65:e6:cc:e1:fd:1b:65:43:e3:44:51:12:9c:09:1c:2f:96:
cc:8a:27:b2:3f:12:3b:e5:c5:1d:96:f1:55:aa:0b:70:d0:7a:
9b:10:8a:9f:0a:85:dd:c0:b8:1b:0b:e3:5b:e5:c9:ef:03:3f:
96:76:e2:79:00:8b:98:f5:dd:9c:02:c6:3e:8b:9a:84:9c:e4:
5c:eb:04:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 03:20:19 2025 by rpki-client