Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Hg7No9YgDjY0KWfwmZ_pyjXP3zI.roa
File: Hg7No9YgDjY0KWfwmZ_pyjXP3zI.roa (raw, json)
Hash identifier: jm1yv6AfIytyGzDB3lIzZAQkoPT3av3DHWFrvyRVrzo=
Subject key identifier: 1E:0E:CD:A3:D6:20:0E:36:34:29:67:F0:99:9F:E9:CA:35:CF:DF:32
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019986C63D38424D9C8331D7C5BAE791465B
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Hg7No9YgDjY0KWfwmZ_pyjXP3zI.roa
Signing time: Fri 26 Sep 2025 16:06:02 +0000
ROA not before: Fri 26 Sep 2025 16:06:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 89.42.143.0/24 maxlen: 24
89.46.0.0/24 maxlen: 24
89.46.2.0/24 maxlen: 24
89.47.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:86:c6:3d:38:42:4d:9c:83:31:d7:c5:ba:e7:91:46:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Sep 26 16:06:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e0ecda3d6200e36342967f0999fe9ca35cfdf32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c1:1a:d4:af:46:68:23:7e:27:e8:9c:cd:bb:
2d:c5:54:89:e5:91:1c:fc:fa:bf:89:d2:91:1c:5d:
c9:01:8a:1e:33:6b:97:22:be:78:85:65:03:f8:36:
32:dc:5d:e5:14:a8:8c:8a:70:85:e7:1c:43:98:7a:
0d:c4:4b:86:22:31:06:c9:d9:24:ef:ab:17:ca:70:
2b:56:4e:22:29:96:bf:54:c9:7d:1f:65:29:f0:f8:
59:23:40:a5:9d:41:e7:55:61:f7:4b:d2:c4:3f:1b:
fd:06:3f:e4:4d:5e:f8:e0:c8:0c:18:dd:2e:81:91:
73:06:0a:48:66:e6:23:55:c1:ac:45:34:3b:ea:9a:
43:29:34:94:24:c8:68:b2:11:c9:ea:cf:fa:f4:ca:
f7:26:40:01:33:e1:d1:a7:c9:d6:25:fb:27:dc:b2:
73:6c:ff:ec:6d:e4:23:f5:b5:f1:f6:1c:e4:48:14:
b6:18:80:b0:81:83:22:2f:9f:21:ad:7d:49:86:0e:
15:fa:dc:e5:55:10:83:55:cf:1c:91:31:47:cc:dd:
52:f1:fe:1c:8d:f9:55:93:4a:ca:dc:b9:e0:ea:c1:
f7:9c:63:55:a3:ea:3b:f4:fc:8b:51:dd:f0:e9:a3:
f6:ff:8f:ff:77:bf:5d:29:52:bf:ff:1c:eb:8b:e0:
b0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:0E:CD:A3:D6:20:0E:36:34:29:67:F0:99:9F:E9:CA:35:CF:DF:32
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Hg7No9YgDjY0KWfwmZ_pyjXP3zI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.143.0/24
89.46.0.0/24
89.46.2.0/24
89.47.127.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:ef:eb:4a:56:aa:ba:a4:d6:c7:12:d8:4d:77:7d:eb:f4:2f:
a9:50:c5:dc:32:f4:d7:b9:85:86:fe:72:9c:73:35:73:3b:0d:
8b:05:96:4c:31:45:6a:d7:7c:25:4c:fd:a7:7c:5b:97:ad:33:
0d:20:5f:ff:30:43:84:3d:b5:a4:46:c8:f2:47:52:0e:32:23:
2e:2e:28:c3:6a:30:ed:3c:86:7d:41:2b:51:c4:c7:58:1f:88:
e0:67:80:61:f8:6a:08:df:f4:38:35:c9:33:bc:6e:95:e1:a1:
87:79:3e:6b:90:da:31:70:15:cb:d1:1c:20:8c:8a:43:a1:f9:
f0:8a:c6:eb:81:f3:25:ac:fb:5e:52:cf:22:73:24:c0:44:dc:
ec:b5:9f:34:45:06:ac:24:89:25:be:24:8d:ad:0b:d7:54:f8:
f7:14:85:74:0a:bb:57:08:0d:2f:ce:81:90:32:4a:8a:7f:f0:
78:2c:7e:a2:b0:33:68:3c:c2:0a:42:0f:32:69:8b:c2:be:66:
3b:ee:4f:10:c7:c5:2a:1c:27:d1:0a:5a:c1:e3:96:03:ec:1b:
12:92:2b:bc:01:34:d0:d4:88:e9:49:82:b7:39:18:69:ff:cd:
fb:ea:31:2e:bb:71:93:9e:0d:dd:06:67:12:bc:b4:16:bb:07:
74:4b:d2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:31 2025 by rpki-client