Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/LDyqRLM3vkhPlbUjPI9cWvHHjDY.roa
File: LDyqRLM3vkhPlbUjPI9cWvHHjDY.roa (raw, json)
Hash identifier: xODlFFVMWsP/GQ3uX5cAV65y3Fh8GzPj+Btz2ZcacdY=
Subject key identifier: 2C:3C:AA:44:B3:37:BE:48:4F:95:B5:23:3C:8F:5C:5A:F1:C7:8C:36
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019984D51D3793B1422F11423A8C4414B665
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/LDyqRLM3vkhPlbUjPI9cWvHHjDY.roa
Signing time: Fri 26 Sep 2025 07:03:03 +0000
ROA not before: Fri 26 Sep 2025 07:03:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 89.42.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:84:d5:1d:37:93:b1:42:2f:11:42:3a:8c:44:14:b6:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Sep 26 07:03:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c3caa44b337be484f95b5233c8f5c5af1c78c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f4:29:7e:84:eb:d4:d7:d6:e9:a6:84:49:76:
d3:07:da:2d:8b:9f:a9:fa:49:ec:1a:61:c9:f2:ac:
b0:c0:e5:05:13:93:ac:6a:4f:8b:c0:4a:32:53:d5:
94:3e:79:f5:df:2e:27:0d:68:9a:c3:ec:bd:01:f5:
2a:7e:7b:f0:1b:4e:63:31:45:75:d6:18:bf:f0:20:
95:f1:9f:89:4b:3e:a6:9e:0f:1c:c6:d0:44:3f:74:
20:87:50:5c:1a:ea:c1:4e:96:a5:46:0b:69:78:7b:
f1:e2:3a:0c:f7:6a:03:04:d9:0b:33:c1:19:53:d7:
51:e0:25:5f:e8:43:c1:60:5e:5d:48:ad:a3:86:5a:
a2:d7:d8:d0:8c:45:8e:28:6f:4e:8b:3c:b6:4e:60:
7c:12:a8:a5:e2:11:19:1a:e4:43:eb:af:fe:d8:ad:
aa:6d:3a:15:de:5a:34:94:27:f7:25:5e:18:c3:4f:
5f:a9:f5:6d:89:5b:31:f8:32:93:95:c9:3a:5e:cb:
b4:d5:4d:46:d3:fe:e6:be:4f:df:bf:97:b0:ca:c1:
ef:91:44:55:66:bb:42:2c:49:f6:50:5e:cc:9f:c9:
b3:17:1c:4d:4d:5d:c3:19:84:ad:ec:a6:bd:07:55:
25:f2:1b:d3:00:8e:df:48:5c:d5:ef:bc:34:56:d9:
a6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3C:AA:44:B3:37:BE:48:4F:95:B5:23:3C:8F:5C:5A:F1:C7:8C:36
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/LDyqRLM3vkhPlbUjPI9cWvHHjDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.90.0/24
Signature Algorithm: sha256WithRSAEncryption
08:3e:6e:36:34:a2:7f:96:56:96:52:9a:f6:41:aa:1e:9a:36:
bd:70:2b:26:4d:3c:00:57:00:70:db:d6:d0:bb:d2:04:f3:b6:
8a:73:1c:c8:c8:83:49:d8:ae:87:eb:7c:d7:61:1d:66:79:bd:
e7:f9:33:74:14:48:42:75:64:9d:a1:c4:bc:ca:2a:e3:7f:b9:
49:ca:51:af:1a:90:c3:d4:bf:ce:f9:dc:59:ee:e1:40:1f:58:
9f:9d:75:ce:20:2f:45:cd:25:3c:e3:30:43:69:91:d2:28:ca:
12:15:5f:4a:67:5f:65:a6:33:b8:17:76:32:88:56:29:b5:26:
24:1a:99:3a:5d:3f:a2:f6:00:aa:0c:1c:83:aa:14:90:1b:a3:
b4:b4:29:8f:f4:c7:e2:1d:84:f5:ec:78:dd:91:1b:9a:5f:9b:
50:24:93:bd:db:eb:59:c5:ec:be:5b:ee:6b:15:b5:c3:65:74:
6a:82:c3:71:da:ce:7b:75:f3:f1:ec:9f:70:52:70:52:e2:5d:
ef:d2:53:92:cc:af:bf:35:b7:57:3d:7d:fc:07:0b:e3:e4:8b:
65:d5:e2:c5:35:09:d7:fb:19:fd:1b:e3:39:30:79:58:0b:ec:
60:6e:48:b1:f5:89:8f:20:5c:22:c6:20:c2:19:87:5c:e1:c3:
f3:5a:7a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:56:25 2025 by rpki-client