Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9lS7tOKuumYbYqlqSEjyRFiJnU8.roa
File: 9lS7tOKuumYbYqlqSEjyRFiJnU8.roa (raw, json)
Hash identifier: z4h5c7Yuduv8L3on0/Tpq1OVflGPAYdkqvC5DXmREa8=
Subject key identifier: F6:54:BB:B4:E2:AE:BA:66:1B:62:A9:6A:48:48:F2:44:58:89:9D:4F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0198A6C1F548DB7B19EA2794DC7E9A0803A5
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9lS7tOKuumYbYqlqSEjyRFiJnU8.roa
Signing time: Thu 14 Aug 2025 04:06:25 +0000
ROA not before: Thu 14 Aug 2025 04:06:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214929
IP address blocks: 89.144.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a6:c1:f5:48:db:7b:19:ea:27:94:dc:7e:9a:08:03:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 14 04:06:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f654bbb4e2aeba661b62a96a4848f24458899d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:12:4c:9e:b7:46:97:6a:da:16:bd:2e:8b:58:
58:c1:fc:56:3b:6a:cd:49:dd:f1:4c:30:6d:9d:08:
ea:35:9c:54:61:c6:c8:75:2e:9a:f8:ad:27:23:80:
75:cc:95:da:0e:7b:f5:08:e6:59:dc:f7:33:da:22:
35:f6:00:01:d1:85:61:c1:7e:98:fe:67:59:93:e7:
ec:da:2e:70:58:b7:0b:51:f2:d1:25:f1:ca:0c:06:
6e:5b:bd:e7:17:6f:a1:1c:3e:07:ca:64:ed:29:8d:
ae:7d:41:78:fc:10:36:99:28:f0:fe:0f:bc:ae:61:
ab:0c:be:79:be:ce:e4:e9:a6:9f:65:83:0a:1c:8f:
b2:4a:8c:6d:0f:9b:5a:ab:ae:03:91:8a:22:86:1f:
6d:e0:76:c4:e9:6f:09:ae:fc:59:f4:b1:e8:03:b7:
14:6b:53:80:e4:04:c1:fd:1d:7f:2c:e2:34:9c:d6:
5a:1a:32:a7:a0:79:f8:fa:cb:b1:f4:2f:d9:f9:69:
78:d9:7a:14:02:18:04:db:37:4f:be:d2:fa:cc:0a:
c2:35:6f:72:7f:3f:e8:e1:ac:81:5f:8e:29:1c:9c:
92:cd:ca:a9:1e:90:a0:8c:11:d6:fb:2e:4f:73:8f:
69:2c:6c:09:f8:b6:8f:a6:c7:6a:a4:51:51:ee:e4:
d5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:54:BB:B4:E2:AE:BA:66:1B:62:A9:6A:48:48:F2:44:58:89:9D:4F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9lS7tOKuumYbYqlqSEjyRFiJnU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.15.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:07:99:d0:63:44:24:54:17:11:eb:91:a3:51:ab:01:51:45:
75:ef:8a:17:71:7f:53:61:7f:f9:40:64:d9:0b:99:a5:7f:ca:
05:ca:a5:ca:f3:5f:fa:65:06:9b:1a:4f:94:9c:05:be:0b:11:
16:d0:77:3f:d3:09:c2:84:94:00:a2:e5:c3:b6:ec:71:9e:bb:
71:58:9c:68:2d:7e:69:6a:e6:07:15:56:c7:53:ba:42:f3:85:
59:7c:f1:76:2e:28:3e:57:86:68:0a:29:2e:5e:e3:41:f3:08:
d1:39:cb:a3:fa:c4:9b:16:f1:bc:08:ea:81:65:9c:d3:06:b2:
f5:5a:45:4d:28:e0:27:be:f1:7c:1c:35:f9:00:d6:2a:12:35:
78:33:38:21:b2:93:c7:95:72:2c:cf:5c:8f:e4:3c:d2:c2:56:
62:9c:85:57:b2:f2:22:0b:42:f8:e6:53:e2:0a:b6:2c:bf:41:
88:5a:f7:44:4d:2c:6a:88:7e:c1:94:93:ac:17:30:aa:60:b7:
05:10:6a:a1:41:e7:f2:9a:14:21:7b:c3:54:d9:a0:49:a8:3f:
09:3e:6d:74:29:56:1e:2b:4c:ae:4b:ab:70:d8:2a:6c:2d:b8:
1b:0d:60:d7:7a:e2:a3:de:ff:9a:c0:f6:9f:e1:1c:e5:1f:57:
50:4a:d5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:18:51 2025 by rpki-client