Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/g_mCUd1Opj2Ky-uK-4R7L8tleXU.roa
File: g_mCUd1Opj2Ky-uK-4R7L8tleXU.roa (raw, json)
Hash identifier: 08wgU/xSAS2r+M4odBkTZDU/CAT4A1QPMCPmwOdSrYk=
Subject key identifier: 83:F9:82:51:DD:4E:A6:3D:8A:CB:EB:8A:FB:84:7B:2F:CB:65:79:75
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0196B6590A005F2C9B0C9CD33EED47AD5B65
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/g_mCUd1Opj2Ky-uK-4R7L8tleXU.roa
Signing time: Fri 09 May 2025 18:40:10 +0000
ROA not before: Fri 09 May 2025 18:40:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.42.81.0/24 maxlen: 24
89.42.82.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 09:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:59:0a:00:5f:2c:9b:0c:9c:d3:3e:ed:47:ad:5b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: May 9 18:40:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83f98251dd4ea63d8acbeb8afb847b2fcb657975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7c:7d:9f:6e:2f:4e:1f:c3:43:93:25:72:c9:
dd:51:ea:d1:ec:a8:f7:58:b8:22:5f:e0:bf:59:ee:
fd:bd:8c:58:32:10:e7:18:8f:12:60:08:0a:19:50:
a3:2b:dd:f5:39:d0:f9:ff:a8:63:98:98:c2:a8:cf:
ad:2c:8e:8b:98:60:c1:0b:d3:66:d6:58:4a:74:64:
3e:be:62:b7:ae:76:09:aa:8d:c7:fd:b1:39:20:83:
86:93:0e:5b:f2:07:0b:fd:ec:e4:31:50:f8:4c:bb:
e6:b0:f9:3e:f1:20:e9:53:4f:c1:d4:9f:0e:0a:11:
f8:72:54:51:19:dc:97:75:cf:3b:aa:0a:3c:ab:dc:
10:2f:45:c3:8d:c6:7f:91:83:f8:b9:17:56:ce:a2:
89:a1:81:a4:52:e0:d0:1c:a1:dc:32:77:34:18:e3:
cd:f3:ca:e1:8a:41:66:f7:ea:2e:e5:59:7c:76:ca:
50:bd:91:94:aa:4e:33:8a:3c:11:22:11:83:31:5f:
52:77:4f:85:23:2e:7d:a3:ca:6d:85:8c:c7:d3:d7:
2b:99:c7:66:40:ef:da:d3:8b:73:88:71:38:a0:47:
90:55:eb:0e:da:74:8b:9e:3e:af:1b:dc:59:34:5c:
99:45:3f:de:69:f7:e4:e5:db:dd:0a:15:23:27:9a:
35:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F9:82:51:DD:4E:A6:3D:8A:CB:EB:8A:FB:84:7B:2F:CB:65:79:75
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/g_mCUd1Opj2Ky-uK-4R7L8tleXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.81.0-89.42.83.255
Signature Algorithm: sha256WithRSAEncryption
37:59:fe:6a:93:47:5b:c5:f3:34:85:39:14:07:29:9c:f2:f1:
c8:ed:3b:ce:c0:c5:11:e4:23:cc:cc:dc:c0:06:8b:6c:d7:45:
c3:3c:df:67:ab:4c:cf:0c:4f:40:32:e6:fa:e5:0a:40:7e:de:
96:bd:5a:9a:77:a1:07:1f:13:dc:c2:74:64:3e:62:7d:ce:ff:
23:3a:68:42:52:aa:ef:f0:ff:66:9b:44:15:e4:60:83:a1:c6:
a0:05:fa:5b:f0:f9:6b:0b:68:ce:cf:64:12:74:a9:9a:da:b6:
22:5f:7d:d3:e1:0c:3f:b2:7e:da:ea:f2:0e:88:81:2d:ad:93:
c2:5a:cb:4a:50:8b:91:37:25:01:29:e4:49:89:8d:a9:a4:98:
e7:b1:54:05:7e:68:e8:1b:99:6b:18:95:4e:c1:f7:58:06:1a:
37:33:be:8a:00:27:eb:27:e8:37:07:5e:c3:5d:05:21:c3:97:
02:87:a7:3a:b1:7c:57:d4:a2:ce:91:73:ea:4f:24:e0:b9:28:
2d:13:bc:e6:f5:44:e0:5e:91:ec:54:98:f0:5e:bc:82:38:f0:
04:51:70:d1:4a:6c:63:e7:26:ae:fc:95:47:3c:db:c4:8a:ac:
07:dd:d7:8c:60:2f:1d:47:76:bf:27:22:a8:8b:61:ba:99:3f:
ee:41:82:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:12:20 2025 by rpki-client