Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/I6enFqHoAP6wWodYInyg50vAq04.roa
File: I6enFqHoAP6wWodYInyg50vAq04.roa (raw, json)
Hash identifier: tqk15pZd+66ZB6MEsurAw7EZm5gwiQkjZ7VlFAfDxUk=
Subject key identifier: 23:A7:A7:16:A1:E8:00:FE:B0:5A:87:58:22:7C:A0:E7:4B:C0:AB:4E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0198B1AFA2D1157A91EBA3552482EE057807
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/I6enFqHoAP6wWodYInyg50vAq04.roa
Signing time: Sat 16 Aug 2025 07:02:14 +0000
ROA not before: Sat 16 Aug 2025 07:02:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214299
IP address blocks: 89.144.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b1:af:a2:d1:15:7a:91:eb:a3:55:24:82:ee:05:78:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 16 07:02:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23a7a716a1e800feb05a8758227ca0e74bc0ab4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:50:bc:50:29:40:e5:96:c1:ee:32:ff:83:af:
4f:74:76:c9:f9:6f:f1:61:18:65:7c:bd:c2:16:ed:
48:1c:14:db:07:74:76:63:5b:e5:d5:f5:72:0f:a4:
7e:28:81:40:33:fe:d3:2c:4d:10:a3:5c:10:b3:6a:
25:cb:78:b4:cc:e1:48:ca:5f:43:80:1b:d2:7b:a7:
3b:07:90:2e:49:f5:aa:35:81:3e:46:5e:6a:18:86:
bf:e7:90:e4:b5:21:97:5e:e8:3d:d6:02:a1:21:e3:
2b:06:e1:9d:df:be:0b:bb:a0:b6:94:77:35:d1:53:
49:4f:01:a4:c4:2c:4a:ea:e0:b2:74:3d:03:f1:1d:
43:cd:32:ed:77:12:00:64:93:e9:51:ff:08:d5:08:
35:aa:e4:c8:78:e0:1e:e8:ad:3f:e4:08:74:32:91:
a4:0d:d2:99:fe:84:68:1a:72:9b:50:e2:f4:90:f8:
35:b8:9a:53:97:f5:18:24:55:39:1a:b4:f4:e0:62:
79:4a:e0:2d:9f:fc:22:21:d8:94:81:fe:bf:ae:4a:
3d:38:4f:54:4d:81:a6:55:cc:86:b7:ca:c7:9e:19:
36:b1:58:50:2b:d6:d1:c0:cd:84:b5:23:2f:09:17:
0c:3c:34:81:e7:cf:d8:1c:d1:21:84:71:a7:a5:bc:
fb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A7:A7:16:A1:E8:00:FE:B0:5A:87:58:22:7C:A0:E7:4B:C0:AB:4E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/I6enFqHoAP6wWodYInyg50vAq04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.50.0/24
Signature Algorithm: sha256WithRSAEncryption
57:88:56:0c:51:76:89:e1:a7:92:56:c8:37:30:87:25:be:e1:
ea:fd:8a:7f:71:3f:24:68:b1:2b:d1:6d:1d:f8:f9:57:9e:91:
76:64:24:b3:74:33:75:79:db:98:98:f7:b8:66:1b:8f:9f:26:
20:ba:22:38:b5:0b:00:78:ac:af:c5:b8:0a:24:dd:cc:ce:ab:
c8:9b:c6:a8:39:04:f7:75:b8:2c:44:9c:8c:c1:fd:c2:0f:f3:
7e:d0:1e:11:60:65:6b:13:85:6b:f8:a4:78:89:d4:ea:b5:84:
f9:45:3d:70:9a:55:73:f3:17:37:3a:d3:a1:26:14:5f:6b:f1:
8b:5f:e1:c1:4d:fa:ed:e8:3c:06:28:a7:dc:5e:45:0b:03:ac:
a8:4c:68:c9:41:69:bf:9b:c1:41:1c:e8:f4:f6:bf:e6:30:c2:
7d:36:43:e5:cd:3e:74:fa:03:f0:e5:0f:e9:27:e7:c1:3f:53:
e7:a6:a3:b1:68:f2:a8:b3:e2:32:6a:29:a7:c0:08:b1:cd:ff:
ef:20:37:79:44:ab:6d:7b:89:46:88:57:bf:3c:9c:8c:2a:f9:
d9:4c:8d:7f:f7:8a:e1:8e:77:e5:05:bc:3f:34:6f:83:2a:fa:
65:8f:99:8d:18:ef:3d:ce:f7:00:33:22:0e:09:5f:77:90:e3:
da:85:02:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:04:16 2025 by rpki-client