Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/jeca3wT56pq8J-XGa6Bx_q67rGA.roa
File: jeca3wT56pq8J-XGa6Bx_q67rGA.roa (raw, json)
Hash identifier: dwohF3FruPVJYAkFrBuPfVKsWgMX/6sZ7FfYQ5Janr8=
Subject key identifier: 8D:E7:1A:DF:04:F9:EA:9A:BC:27:E5:C6:6B:A0:71:FE:AE:BB:AC:60
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01983598D8AE0E167D8276566B9547CC2052
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/jeca3wT56pq8J-XGa6Bx_q67rGA.roa
Signing time: Wed 23 Jul 2025 04:44:25 +0000
ROA not before: Wed 23 Jul 2025 04:44:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212336
IP address blocks: 89.34.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:98:d8:ae:0e:16:7d:82:76:56:6b:95:47:cc:20:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 23 04:44:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8de71adf04f9ea9abc27e5c66ba071feaebbac60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4e:c0:16:07:03:0b:72:e4:b4:75:2a:33:d2:
e4:86:b7:d6:06:2e:6b:4d:98:cc:a4:76:be:f0:64:
a4:c3:1f:4d:54:c4:87:e4:d9:88:13:86:81:30:73:
ea:79:87:54:eb:13:1b:a4:39:f4:37:44:41:f5:64:
8b:4f:01:64:48:06:2c:db:53:34:1f:56:d9:aa:80:
70:94:fe:68:09:8e:50:e7:49:04:46:08:bb:d7:ae:
b5:9a:1a:2e:28:d7:e1:97:4b:f1:f9:69:a5:90:7d:
33:9e:32:4b:f1:8b:bd:0d:42:c0:7e:6a:da:7e:b5:
49:d2:68:5c:3b:a8:9f:da:f0:11:b7:c3:6b:62:05:
20:ea:ef:3e:4b:bd:94:06:6d:7c:8f:7d:99:e0:69:
31:b0:79:79:12:cb:0f:d1:00:64:7a:5d:54:83:e0:
d7:c7:0a:37:7b:9f:0b:56:a4:af:14:28:d9:fd:44:
e9:d0:3f:cb:67:7f:9c:d5:26:0f:50:87:96:aa:5c:
2e:83:92:a3:b6:77:eb:55:26:a0:99:70:7d:d1:a7:
62:4e:4c:ee:94:43:d2:97:17:63:da:12:aa:bb:e3:
73:3e:e1:80:8c:67:55:31:5d:4f:93:c6:59:69:9e:
26:39:8b:bb:d4:96:eb:49:4f:c1:a1:51:c7:5d:2f:
42:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E7:1A:DF:04:F9:EA:9A:BC:27:E5:C6:6B:A0:71:FE:AE:BB:AC:60
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/jeca3wT56pq8J-XGa6Bx_q67rGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.227.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:f2:2d:45:a6:02:64:14:d2:e3:ff:33:8d:4f:79:b1:bd:da:
9d:80:91:a3:2f:7e:a2:96:f0:5a:e2:26:88:41:56:36:87:3f:
b5:e0:3f:dc:07:e8:08:14:a2:71:d8:29:9a:2c:f9:64:7b:1e:
d5:bf:40:ef:f1:bc:54:79:65:a5:c9:ec:91:d5:2c:db:d9:6c:
54:42:b9:15:ab:79:47:ce:69:00:a4:4a:16:2d:81:94:f5:3a:
fc:5b:14:49:fb:d3:5d:1a:2c:5f:08:83:c1:64:0b:26:fd:36:
08:ac:61:d6:b9:da:fd:86:18:34:fe:d2:97:5f:b0:0a:e2:1a:
bf:b9:73:87:84:eb:a1:44:b0:c0:e2:cc:67:da:57:00:83:2d:
5a:f9:ff:8c:33:b9:dd:05:d6:ed:22:68:ea:b9:a7:6f:21:e1:
9c:27:9f:ff:45:dc:aa:4c:1b:e7:6e:85:90:be:4f:30:05:ea:
53:cb:4c:2b:b3:27:ee:b4:8a:d8:9d:3e:13:09:7d:80:0b:ce:
c5:9b:b4:83:fc:5e:78:26:d2:19:bd:e8:b8:ae:0d:5b:bc:97:
d3:ef:37:79:8f:57:be:6a:c1:0f:d5:10:66:21:ac:e0:4e:68:
a5:b9:23:49:29:d5:4a:85:cb:3f:7e:41:b9:ca:92:fd:c8:02:
64:73:36:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:49:07 2025 by rpki-client