Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/abTxm48Nb4lgpqIVthI0qgIQLtU.roa
File: abTxm48Nb4lgpqIVthI0qgIQLtU.roa (raw, json)
Hash identifier: 722GV2RMx0AVFGOea9+JGaFroQjUU2p6y6zuf9EzxHA=
Subject key identifier: 69:B4:F1:9B:8F:0D:6F:89:60:A6:A2:15:B6:12:34:AA:02:10:2E:D5
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0199C93A322E419D82008B3EA1E46C7F16BA
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/abTxm48Nb4lgpqIVthI0qgIQLtU.roa
Signing time: Thu 09 Oct 2025 13:47:38 +0000
ROA not before: Thu 09 Oct 2025 13:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26042
IP address blocks: 77.90.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c9:3a:32:2e:41:9d:82:00:8b:3e:a1:e4:6c:7f:16:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 9 13:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69b4f19b8f0d6f8960a6a215b61234aa02102ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7b:cb:9e:b7:67:b9:b7:dd:6c:be:bd:fa:98:
4a:e2:7f:89:f9:dc:5e:01:a9:17:79:3a:b7:87:02:
b8:dc:f9:71:2c:ce:dd:ab:4a:3b:5a:74:91:56:38:
7a:42:32:c4:46:98:c8:8c:a0:8f:97:c7:71:5c:bf:
6f:9b:49:9f:12:fd:33:3f:99:ed:6c:68:e1:22:5c:
23:eb:70:cc:1e:94:6d:6e:c0:f4:09:34:0e:f5:4b:
f9:10:0f:c9:54:bc:d6:00:38:6d:b4:04:12:ff:b1:
01:4b:13:3a:8d:56:9e:8d:c0:67:9e:e3:06:69:85:
85:cf:e1:69:2f:d1:0c:45:72:16:38:88:8f:ab:4c:
58:3b:36:09:d3:ed:a2:68:6c:bb:f9:5c:8a:6e:c0:
82:6b:10:91:45:22:68:15:69:70:69:6b:df:c5:a4:
f7:e8:a5:c6:c4:83:8f:e6:3a:c1:9c:a4:e8:80:75:
5c:1a:d3:ba:ee:76:ec:0a:46:35:fe:81:f7:9e:e0:
07:3a:b2:ae:56:f0:86:a1:92:bd:73:57:f8:9b:30:
89:25:91:81:40:5f:54:a4:02:2d:1e:c1:a0:6f:17:
e6:08:77:10:95:12:87:44:8d:7a:3c:27:a3:6b:2c:
0a:84:ec:65:ec:bf:d2:54:a8:bb:34:b1:41:fd:a3:
c2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B4:F1:9B:8F:0D:6F:89:60:A6:A2:15:B6:12:34:AA:02:10:2E:D5
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/abTxm48Nb4lgpqIVthI0qgIQLtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.21.0/24
Signature Algorithm: sha256WithRSAEncryption
53:62:1d:cb:bb:cc:05:f1:22:e8:1a:d0:c0:5d:47:6a:e3:04:
89:98:55:6f:d9:cd:b2:2c:43:8a:7f:e4:6e:6e:2b:5f:c2:fc:
e7:74:8a:ee:47:1d:3b:f3:f1:60:ad:1a:1f:a6:82:1c:ac:03:
e8:78:85:74:af:a0:f3:14:e3:e4:41:7b:54:a4:50:34:11:9d:
e4:24:9e:12:f6:da:a4:05:a6:40:6f:42:01:a7:79:34:6b:5a:
80:e8:3a:f5:c0:29:8d:48:18:3c:5f:27:f6:92:fc:19:04:da:
23:86:1f:19:df:15:aa:ff:40:fc:86:2b:9a:69:64:2e:1d:4d:
3a:f4:b6:0d:d9:39:72:3d:83:6a:a0:a7:a9:6b:c1:ef:6b:43:
39:b9:02:83:0a:c1:9d:40:4c:6c:0e:44:68:38:6c:17:76:61:
42:c0:1f:53:be:f7:ab:c9:c8:49:d7:53:03:3c:34:ad:90:24:
b1:e4:50:60:f9:a4:fd:9a:4b:17:93:40:d4:c0:52:12:d0:9d:
99:33:1c:fa:4e:bc:f3:0b:cb:94:95:d6:4b:ee:d7:71:da:d9:
86:f7:80:2f:72:e0:68:e2:8b:5f:62:15:10:79:8f:0b:3d:f5:
b0:fc:b2:52:bc:e4:e1:a8:aa:7b:4e:13:63:59:ea:7f:78:0b:
c9:6d:17:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:27:05 2025 by rpki-client