Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/1KnXeZeK2jaZLc215sUulykWcXQ.roa
File: 1KnXeZeK2jaZLc215sUulykWcXQ.roa (raw, json)
Hash identifier: MfFGqElV/jvH/sstkJrBdiD+qKnk4Q33yEmCF2id+a0=
Subject key identifier: D4:A9:D7:79:97:8A:DA:36:99:2D:CD:B5:E6:C5:2E:97:29:16:71:74
Certificate issuer: /CN=2ca37da970c466457583bbe02b2a0e72fbdc6328
Certificate serial: 01990F8CDF86038D4C50D9DAE8E1E8FDEAE8
Authority key identifier: 2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/1KnXeZeK2jaZLc215sUulykWcXQ.roa
Signing time: Wed 03 Sep 2025 12:28:34 +0000
ROA not before: Wed 03 Sep 2025 12:28:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213541
IP address blocks: 80.89.0.0/24 maxlen: 24
80.89.1.0/24 maxlen: 24
80.89.2.0/24 maxlen: 24
80.89.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 00:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0f:8c:df:86:03:8d:4c:50:d9:da:e8:e1:e8:fd:ea:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca37da970c466457583bbe02b2a0e72fbdc6328
Validity
Not Before: Sep 3 12:28:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4a9d779978ada36992dcdb5e6c52e9729167174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:33:d3:36:95:e3:69:67:7a:ac:64:fe:01:13:
80:f2:b1:46:8a:8d:d2:2f:30:c2:f9:48:c1:26:84:
29:a8:75:7b:5c:5a:51:5d:aa:3e:42:91:5a:f4:5e:
26:28:b8:e8:db:9f:d9:7e:86:e4:f9:06:6d:2e:fe:
ba:0b:6b:f7:c2:c1:51:63:f7:b4:e0:95:48:92:fc:
9c:1c:65:dc:a7:f7:e4:67:9d:87:df:0c:e3:da:ee:
5e:ed:be:78:41:81:df:96:74:77:36:ff:20:f5:83:
d6:3e:9c:0a:34:98:e1:aa:ba:e8:f8:9d:74:5d:5b:
63:be:5f:99:95:bb:d8:ef:7a:52:fb:3e:12:c0:82:
75:85:82:e6:37:21:1f:51:c2:19:11:14:63:bd:99:
b2:e6:a9:fc:30:97:92:17:8d:c4:1f:d8:db:6c:3e:
46:6d:6f:34:b1:bc:8e:96:9b:2a:46:24:13:e6:c9:
a3:74:e4:53:21:a7:2c:b3:53:58:b9:f2:2e:49:ff:
44:05:4c:15:ac:3b:da:3e:89:86:19:0c:a5:b8:ae:
3c:0a:31:f3:7a:c3:90:57:2d:06:a1:90:f1:d7:6a:
55:2e:3c:a3:e1:7e:f4:94:c4:83:8b:99:45:73:b8:
e6:db:cb:ad:c1:87:b3:3f:c0:7d:4d:79:08:37:72:
f4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A9:D7:79:97:8A:DA:36:99:2D:CD:B5:E6:C5:2E:97:29:16:71:74
X509v3 Authority Key Identifier:
keyid:2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/1KnXeZeK2jaZLc215sUulykWcXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.89.0.0/22
Signature Algorithm: sha256WithRSAEncryption
81:90:12:9f:02:ac:e5:d2:f1:c0:76:ab:03:4d:54:2d:a2:69:
eb:bb:3c:26:74:64:17:84:da:e5:7d:36:f6:c1:97:08:3b:02:
17:c2:3a:85:98:36:04:53:18:8f:dd:a4:48:2c:60:a1:b2:a7:
0a:da:a8:b9:a6:75:d2:f9:7e:48:21:e6:b3:4a:67:f1:b2:54:
1f:e6:7c:23:40:be:8f:2d:b6:1f:52:25:97:34:8a:b7:ff:ac:
20:14:fe:bb:92:7f:40:0d:68:c0:92:ad:4b:64:8d:19:82:86:
14:20:10:fc:15:4d:a9:16:dd:c2:0c:02:98:da:b9:69:47:cc:
05:c0:1f:ca:61:36:c6:d9:25:bc:2c:01:06:2e:6f:8d:b7:a9:
f7:91:98:54:ed:10:8f:fb:cc:17:e8:6c:29:26:96:3c:57:d2:
e2:f5:f0:ab:22:5c:31:ae:5e:3f:5a:41:36:89:6a:75:ba:25:
c3:e6:69:c5:86:08:61:5f:05:87:27:88:b6:e4:74:83:e9:49:
4a:ea:e6:62:54:3f:19:aa:f9:52:a2:7e:7d:b7:80:c2:cf:b5:
ff:04:d3:df:7e:fc:fa:8a:da:4a:fe:1f:91:fc:e3:86:69:32:
2c:ae:f9:bb:f0:de:bb:ab:3c:cc:11:8e:1d:58:8f:cc:c9:b5:
d3:13:d1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 04:29:43 2025 by rpki-client