Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/OolGpvZF4L76TQgyBmsi2VA1FNs.roa
File: OolGpvZF4L76TQgyBmsi2VA1FNs.roa (raw, json)
Hash identifier: Qzw/EFJU9GFRb4oept5JMjd+OIn7zij+PHWajbEAGro=
Subject key identifier: 3A:89:46:A6:F6:45:E0:BE:FA:4D:08:32:06:6B:22:D9:50:35:14:DB
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019915A5B0B7367D0F159B36E8EB271B2C05
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/OolGpvZF4L76TQgyBmsi2VA1FNs.roa
Signing time: Thu 04 Sep 2025 16:53:24 +0000
ROA not before: Thu 04 Sep 2025 16:53:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8881
IP address blocks: 89.42.85.0/24 maxlen: 24
93.113.177.0/24 maxlen: 24
93.113.178.0/24 maxlen: 24
93.114.90.0/24 maxlen: 24
93.114.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:15:a5:b0:b7:36:7d:0f:15:9b:36:e8:eb:27:1b:2c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Sep 4 16:53:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a8946a6f645e0befa4d0832066b22d9503514db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:94:fc:ac:2d:d5:10:f8:8c:19:10:dd:71:b9:
02:08:1f:89:98:ee:e0:c3:9c:e7:ba:9b:7e:fb:59:
5f:99:b6:d1:2e:c7:27:d2:c1:45:11:13:20:a4:6e:
9c:a5:9e:28:a3:e8:db:5d:00:ea:74:01:cb:f5:f8:
bc:52:08:a3:09:3b:28:41:2c:62:e6:24:de:fc:bb:
e7:1c:a7:96:e8:e1:95:78:cd:7c:c4:9e:31:ca:c1:
72:b2:58:81:55:16:e8:58:49:71:78:7a:6e:4c:f9:
33:73:b0:47:3b:1b:ee:e4:cc:11:0c:c5:93:e6:81:
70:70:d8:9a:50:02:4f:a2:78:48:46:b5:05:c4:e9:
a8:2c:54:8d:2a:c6:d9:45:e4:7b:72:2c:e2:21:40:
26:c2:28:55:cf:47:63:a2:b0:d0:44:87:08:00:f2:
cf:60:9e:c2:ee:16:25:6f:ee:77:8d:b7:a7:d5:00:
98:32:1b:72:f4:b0:3e:79:23:5d:77:0c:ea:79:c3:
9d:a4:ed:1c:e7:e5:df:e9:3e:96:d8:01:4f:42:9d:
95:e5:57:8b:0c:6c:f6:2e:82:3d:98:c6:5d:d0:8f:
83:a8:23:4f:a0:7e:3c:11:13:b5:e0:b1:eb:29:e1:
40:62:ad:5e:fc:ae:3d:57:e1:a6:3d:ee:07:eb:ea:
6c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:89:46:A6:F6:45:E0:BE:FA:4D:08:32:06:6B:22:D9:50:35:14:DB
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/OolGpvZF4L76TQgyBmsi2VA1FNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.85.0/24
93.113.177.0-93.113.178.255
93.114.90.0/23
Signature Algorithm: sha256WithRSAEncryption
36:04:83:78:37:51:b1:be:84:8a:f0:57:a9:ed:01:04:30:25:
35:60:9c:fe:b8:7c:7e:b8:c6:09:38:3b:71:7e:37:98:88:d9:
1f:a4:53:b9:c7:96:2d:8f:d1:00:dd:81:46:06:88:3a:5c:f4:
f5:5a:d0:42:ef:0f:e4:c0:e1:19:a9:26:72:aa:02:6a:e9:51:
92:da:ee:19:60:21:48:4d:5d:4d:c6:85:04:81:be:a6:08:b0:
e1:98:28:e3:ab:de:6a:8a:aa:e1:1f:50:47:b3:09:e1:7b:ec:
ba:6c:19:7a:94:3a:78:c8:91:b7:17:5e:d9:58:7e:2d:ca:95:
59:8e:fa:f1:d8:d0:b5:5a:de:6a:2c:27:e7:c4:01:50:09:f6:
73:42:9c:40:cb:51:1b:00:3b:35:84:5c:5e:04:80:53:52:9a:
81:de:da:8b:e1:56:19:fa:34:a4:6a:d2:53:59:99:92:38:ef:
c4:11:9c:b2:b2:81:0a:23:59:bd:89:65:56:d6:9f:e8:03:8a:
eb:36:1c:08:0d:11:4b:fc:a6:0f:6c:86:53:9a:c8:36:57:48:
83:4a:f1:7c:92:34:85:55:1d:2f:e1:8b:db:b3:19:e7:c0:59:
f3:db:32:93:43:9e:fa:7b:09:64:fb:1d:1e:5c:03:1b:8e:d7:
73:c4:8d:23
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZkVpbC3Nn0PFZs26OsnGywFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjUwOTA0MTY1MzI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTg5NDZhNmY2NDVlMGJlZmE0ZDA4MzIwNjZiMjJkOTUwMzUxNGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5T8rC3VEPiMGRDdcbkCCB+JmO7g
w5znupt++1lfmbbRLscn0sFFERMgpG6cpZ4oo+jbXQDqdAHL9fi8UgijCTsoQSxi
5iTe/LvnHKeW6OGVeM18xJ4xysFysliBVRboWElxeHpuTPkzc7BHOxvu5MwRDMWT
5oFwcNiaUAJPonhIRrUFxOmoLFSNKsbZReR7ciziIUAmwihVz0djorDQRIcIAPLP
YJ7C7hYlb+53jben1QCYMhty9LA+eSNddwzqecOdpO0c5+Xf6T6W2AFPQp2V5VeL
DGz2LoI9mMZd0I+DqCNPoH48ERO14LHrKeFAYq1e/K49V+GmPe4H6+psYQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFDqJRqb2ReC++k0IMgZrItlQNRTbMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvT29sR3B2WkY0TDc2VFFneUJtc2kyVkExRk5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAWSpVMAwD
BABdcbEDBABdcbIDBAFdclowDQYJKoZIhvcNAQELBQADggEBADYEg3g3UbG+hIrw
V6ntAQQwJTVgnP64fH64xgk4O3F+N5iI2R+kU7nHli2P0QDdgUYGiDpc9PVa0ELv
D+TA4RmpJnKqAmrpUZLa7hlgIUhNXU3GhQSBvqYIsOGYKOOr3mqKquEfUEezCeF7
7LpsGXqUOnjIkbcXXtlYfi3KlVmO+vHY0LVa3mosJ+fEAVAJ9nNCnEDLURsAOzWE
XF4EgFNSmoHe2ovhVhn6NKRq0lNZmZI478QRnLKygQojWb2JZVbWn+gDius2HAgN
EUv8pg9shlOayDZXSINK8XySNIVVHS/hi9uzGefAWfPbMpNDnvp7CWT7HR5cAxuO
13PEjSM=
-----END CERTIFICATE-----
Generated at Fri Sep 5 19:29:52 2025 by rpki-client