Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/hBHZn3bZmy7xgUz1TcRXMU9vnCc.roa
File: hBHZn3bZmy7xgUz1TcRXMU9vnCc.roa (raw, json)
Hash identifier: 21j0Ov1nmiSt1/ghXq3S4m3u/cNfMg7VlU5FmcyYRFg=
Subject key identifier: 84:11:D9:9F:76:D9:9B:2E:F1:81:4C:F5:4D:C4:57:31:4F:6F:9C:27
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019915A5B016CD2E7E012A75F2B3F280E9DE
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/hBHZn3bZmy7xgUz1TcRXMU9vnCc.roa
Signing time: Thu 04 Sep 2025 16:53:24 +0000
ROA not before: Thu 04 Sep 2025 16:53:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.42.82.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:15:a5:b0:16:cd:2e:7e:01:2a:75:f2:b3:f2:80:e9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Sep 4 16:53:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8411d99f76d99b2ef1814cf54dc457314f6f9c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:87:9c:b8:de:ec:7d:f2:8e:c4:28:e0:4a:56:
e9:23:13:0f:86:b6:f3:10:1d:28:d4:6c:1a:64:7f:
a0:fd:cf:49:34:76:43:15:30:c4:ea:f9:63:24:88:
37:18:11:6d:a5:00:7c:dd:5b:97:c4:b2:9e:c3:fc:
1e:aa:1e:0b:5f:bd:38:6a:1a:14:c7:72:2e:04:13:
37:d8:a3:47:7d:80:22:c2:64:f9:a4:d5:c4:02:ad:
57:ff:eb:8f:4b:9b:2b:b7:66:cc:78:c3:c9:47:5a:
73:b3:f0:a9:8c:51:ef:54:3f:14:28:10:14:15:fa:
92:5d:91:6b:5e:f6:ae:ec:32:94:3c:e4:5c:1e:33:
f7:36:2d:d1:9c:f0:e6:ed:22:a7:46:b2:6c:d6:69:
d4:ec:cd:24:a2:56:6f:1f:d9:03:7d:24:98:0e:4d:
65:1d:69:98:a5:95:00:74:41:3e:36:ff:f2:7a:de:
36:a3:ff:d8:08:36:9e:a7:cc:a7:50:ff:e7:c6:44:
43:76:99:5b:62:f9:7d:28:a6:17:81:20:68:98:d8:
86:d5:78:8b:fa:cc:90:b9:b2:6f:7b:16:6e:25:84:
f5:12:23:f8:14:8d:3e:78:73:45:c3:b3:45:37:e3:
6d:53:43:ad:e4:15:84:f9:68:1a:cd:40:15:74:fb:
e3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:11:D9:9F:76:D9:9B:2E:F1:81:4C:F5:4D:C4:57:31:4F:6F:9C:27
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/hBHZn3bZmy7xgUz1TcRXMU9vnCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.82.0/23
Signature Algorithm: sha256WithRSAEncryption
14:59:28:a8:ea:6c:e8:c7:bd:40:90:e8:d6:04:ea:93:f2:89:
84:99:f0:d0:7f:4c:b4:71:c5:d0:92:fc:41:97:c0:d7:a6:57:
ae:a0:6e:7b:b0:ad:6f:ba:9a:1e:f0:30:0f:31:4f:04:6b:bb:
25:d8:c9:c1:42:8c:1f:e0:3e:30:10:38:1d:cf:c1:f4:56:e4:
83:12:fb:0a:34:fa:0e:b0:87:74:57:cf:ba:d7:d5:52:f9:79:
9f:de:11:bb:d4:34:f4:af:d8:ba:3e:58:24:6d:20:c4:88:56:
b0:e6:85:b7:be:96:f9:79:88:2a:92:99:f6:1f:93:f1:a0:f5:
75:80:d7:7b:b0:61:93:54:8b:be:f4:c5:a9:01:65:70:6d:a8:
58:74:11:34:56:40:4e:55:d2:76:2c:bb:a9:37:a5:8f:d8:b1:
ec:5e:39:41:00:84:9a:3b:ea:e6:58:e5:e1:ad:58:b2:d7:0c:
48:2f:bf:46:ff:60:97:6f:78:0d:21:7a:e4:ac:e0:02:c9:dd:
06:32:3b:e9:30:c8:51:4f:67:40:20:a5:61:a5:01:3a:c9:ee:
a3:80:d2:09:69:c6:68:4b:b0:ec:ee:3d:d0:b5:5f:f2:c3:92:
44:92:65:ad:5f:a8:6f:ad:90:ca:ab:d9:9a:fd:1c:d9:cd:a6:
e5:d8:03:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 19:31:32 2025 by rpki-client