Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/1-IgxnHsFK8oFte8N10P7PK5e7cM.roa
File: 1-IgxnHsFK8oFte8N10P7PK5e7cM.roa (raw, json)
Hash identifier: ePOdDmBwQlth5xBvng3CM+ctUv7VLk8att4hDe8d3XM=
Subject key identifier: F8:88:31:9C:7B:05:2B:CA:05:B5:EF:0D:D7:43:FB:3C:AE:5E:ED:C3
Certificate issuer: /CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Certificate serial: 0198EB0C8A7EF0A223BB666B16AAF0639113
Authority key identifier: D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/1-IgxnHsFK8oFte8N10P7PK5e7cM.roa
Signing time: Wed 27 Aug 2025 10:22:04 +0000
ROA not before: Wed 27 Aug 2025 10:22:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61102
IP address blocks: 89.38.31.0/24 maxlen: 24
103.95.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 14:10:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:eb:0c:8a:7e:f0:a2:23:bb:66:6b:16:aa:f0:63:91:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Validity
Not Before: Aug 27 10:22:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f888319c7b052bca05b5ef0dd743fb3cae5eedc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b4:97:d8:6c:2c:ab:de:76:71:f3:58:af:79:
0d:53:c4:3f:8a:eb:08:24:c9:9f:82:da:7f:59:4a:
98:87:2e:0b:0a:0a:61:fe:a0:ad:2f:fa:58:6d:f8:
64:16:ad:12:c5:02:53:68:f3:a4:a9:d3:d8:77:3e:
ed:d2:af:dc:e9:aa:7c:cb:e1:13:7f:a7:9b:6e:7a:
26:25:95:e1:a7:6b:76:56:6f:47:a0:f6:cd:96:ef:
46:58:65:ce:5f:a6:86:06:3d:b6:79:8d:b4:83:55:
f8:81:16:39:97:8b:38:23:4b:7e:47:72:33:3d:40:
7e:2d:e2:12:47:09:2e:b4:6b:b6:50:83:34:5b:f7:
ce:62:b9:93:1a:f9:62:36:34:df:03:c8:24:0c:07:
06:24:ea:80:5d:cd:45:64:a1:9f:1a:e0:85:5c:1f:
84:d1:f0:21:dc:d6:ff:65:78:f1:98:8a:0c:3b:9a:
d6:8c:e4:2e:f0:8c:c7:6b:53:b3:b1:70:8a:55:d4:
35:62:80:b8:6e:c5:6b:63:3d:43:6d:5c:96:20:d2:
b6:84:6a:90:08:c1:a5:f0:a4:37:ca:15:1b:2e:5a:
3a:e7:02:8c:4e:a3:fe:0a:83:95:3d:d8:fc:90:38:
8c:25:73:03:43:4b:dd:63:13:b0:53:fd:ff:72:f2:
07:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:88:31:9C:7B:05:2B:CA:05:B5:EF:0D:D7:43:FB:3C:AE:5E:ED:C3
X509v3 Authority Key Identifier:
keyid:D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/1-IgxnHsFK8oFte8N10P7PK5e7cM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.31.0/24
103.95.118.0/24
Signature Algorithm: sha256WithRSAEncryption
05:34:bf:4b:9d:37:09:b2:e4:3e:25:0b:75:64:12:49:a9:fb:
0d:10:f9:85:61:1b:d5:dd:4d:ea:b2:51:65:ee:ba:e9:b3:59:
1a:55:89:d7:76:15:4c:f0:da:c3:28:a1:84:fc:a0:4c:65:00:
34:54:36:fa:9c:57:40:9d:81:3c:f1:fb:e8:a4:46:7a:64:33:
e4:5f:f6:2a:41:1c:a7:c7:b1:46:43:ba:df:a4:15:44:42:07:
14:2d:f8:cd:57:e0:1f:50:7a:89:d1:85:60:b7:e8:e1:0c:40:
75:6e:e5:c9:96:d4:3d:b1:f3:0e:29:e1:67:87:a8:1e:05:54:
e4:13:0f:db:95:0c:00:1e:1a:a9:a0:ea:60:f0:4b:9d:aa:1d:
ae:e5:1f:8b:4c:a1:f4:69:3a:b1:56:3a:28:fb:1b:21:f6:d0:
7a:f5:e3:bb:a8:71:c2:34:3f:ad:8d:f8:a3:bc:6b:d6:ab:e5:
e9:ca:5c:bd:64:d4:72:49:1b:7d:38:4f:10:23:9f:0f:ab:7c:
6d:36:ae:29:ec:b1:da:7f:8e:14:39:31:72:1b:0b:8d:5a:13:
ae:8c:da:77:65:0c:d2:f2:f3:3a:59:3b:7b:0a:54:b0:2d:3a:
8c:ba:60:0e:74:e5:24:1d:95:57:56:0d:9e:16:3f:3c:55:f4:
e6:7d:88:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 20:28:13 2025 by rpki-client