Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FeumAt_q6iyTIA0QGh8q6mBZlNs.roa
File: FeumAt_q6iyTIA0QGh8q6mBZlNs.roa (raw, json)
Hash identifier: r6qt2P7MOdpAtpvE7N0lnWhEeKRgayYiRO9y0rpsuEU=
Subject key identifier: 15:EB:A6:02:DF:EA:EA:2C:93:20:0D:10:1A:1F:2A:EA:60:59:94:DB
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01989B8731583AA1B33838D5A05D179E21CC
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FeumAt_q6iyTIA0QGh8q6mBZlNs.roa
Signing time: Mon 11 Aug 2025 23:46:25 +0000
ROA not before: Mon 11 Aug 2025 23:46:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212341
IP address blocks: 89.144.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9b:87:31:58:3a:a1:b3:38:38:d5:a0:5d:17:9e:21:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 11 23:46:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15eba602dfeaea2c93200d101a1f2aea605994db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e2:f9:c7:a2:8d:a0:f2:14:32:7b:ed:37:84:
7d:ed:e9:dd:49:0f:8f:73:ed:6f:c7:5b:32:7b:db:
ee:11:80:d9:5c:1b:ee:a0:94:99:ce:7e:ed:b3:2b:
0a:e5:72:37:6d:f9:ab:0e:d9:e8:94:68:a1:c9:c2:
e9:1f:f2:61:b6:a9:30:83:e7:d7:91:3a:9c:4b:ae:
7d:c7:f6:93:f8:b7:1f:37:a5:9d:5f:70:91:b5:b8:
b5:a4:19:9e:73:48:ed:50:2f:b0:95:13:d6:f6:23:
d6:8d:34:88:44:77:10:eb:dc:ad:19:b3:70:b3:45:
ae:54:d7:84:81:11:e4:20:f0:e5:73:02:80:f3:9f:
80:d8:a4:51:e1:8b:9d:de:84:32:c6:55:7a:b7:13:
f9:1e:26:a3:21:fd:17:19:e7:c7:73:47:e6:3b:c5:
d7:a2:64:8b:b9:08:05:30:c9:b0:6f:ca:c7:f9:89:
c5:b2:fb:fd:d2:b1:5e:8e:6a:85:d1:0c:ca:bc:fa:
8e:64:3b:ef:e7:d6:1f:42:8a:74:c2:6c:66:5d:c7:
6f:3d:3f:01:df:15:f4:2b:d1:28:6a:a1:ee:4c:bb:
69:ac:ce:5d:13:96:7f:98:92:dc:a1:6f:f1:52:e1:
d0:24:07:72:3d:ec:3d:6c:51:3f:7b:47:fc:9f:12:
ff:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EB:A6:02:DF:EA:EA:2C:93:20:0D:10:1A:1F:2A:EA:60:59:94:DB
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FeumAt_q6iyTIA0QGh8q6mBZlNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.2.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:7e:e7:80:13:5e:34:09:e2:f2:10:53:0f:9f:a2:ee:86:ce:
be:4d:f3:de:f0:55:f1:45:a2:85:8d:14:4d:e6:75:51:67:0a:
2a:b6:46:76:22:42:94:63:35:b1:ae:eb:94:d4:6e:7a:ab:59:
75:79:1a:d1:fc:18:35:63:f0:00:dc:96:3b:19:dc:73:72:84:
2c:3d:60:14:fb:e0:cc:d8:2b:b6:4f:4d:95:ab:99:91:60:f9:
f7:48:8c:e7:3e:18:bd:0f:4c:8c:b9:a0:9a:94:e0:7f:d5:38:
df:28:a6:fc:4d:26:bc:12:47:6e:dc:9c:42:b2:99:cd:d0:81:
11:2e:08:70:c8:05:6b:70:09:49:0d:e1:7e:39:89:53:fb:50:
a2:48:5f:c0:f4:97:3b:8c:86:58:12:9c:37:79:b0:7e:a4:09:
f4:87:ee:0b:3b:ca:b8:d2:95:0d:ac:23:27:b0:23:6c:7b:d3:
1c:ac:4d:63:c8:9d:ab:51:55:38:de:61:b4:d4:c3:37:cc:4d:
04:6a:cc:67:e1:74:19:aa:e3:c2:23:ea:a7:6a:e7:70:db:12:
74:21:d3:0a:8e:f2:75:78:9f:8d:18:03:e3:05:6e:dd:71:6f:
30:bc:60:3c:18:38:c7:29:6e:b3:cf:60:08:27:79:19:d0:24:
09:a7:5d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:16:06 2025 by rpki-client