Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/iJA77KedmFKv1z9UgvH4a70WUbM.roa
File: iJA77KedmFKv1z9UgvH4a70WUbM.roa (raw, json)
Hash identifier: PAA5vv/O+JhWpx4/1BOoqciSnDC74+obzhDKEmkci68=
Subject key identifier: 88:90:3B:EC:A7:9D:98:52:AF:D7:3F:54:82:F1:F8:6B:BD:16:51:B3
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0198922D17CBD6152A4E0BE26F3E8621BC03
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/iJA77KedmFKv1z9UgvH4a70WUbM.roa
Signing time: Sun 10 Aug 2025 04:11:25 +0000
ROA not before: Sun 10 Aug 2025 04:11:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214834
IP address blocks: 89.144.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:2d:17:cb:d6:15:2a:4e:0b:e2:6f:3e:86:21:bc:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 10 04:11:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88903beca79d9852afd73f5482f1f86bbd1651b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:06:23:42:4e:c3:e2:47:34:64:c8:50:b1:63:
dc:8e:ff:d0:a3:cd:70:c2:a7:6e:8d:1f:06:bf:9b:
57:a3:40:52:a1:d5:5e:bb:06:1e:4b:e3:52:09:90:
d6:78:34:33:e8:74:14:ec:b4:76:c1:b4:70:ef:a4:
ef:20:e6:d8:38:fd:81:17:ad:70:b7:13:3f:26:34:
d7:32:ac:b2:e2:0f:07:da:89:d7:72:cd:ea:f5:5e:
c3:33:6f:24:d5:97:80:88:9c:e1:6d:27:05:8e:41:
b7:9d:3c:78:c6:72:37:ad:2e:a3:da:ef:b7:c4:42:
83:fd:ba:25:28:c9:7d:f7:39:d7:1b:27:73:aa:dd:
68:ee:63:46:b7:de:a3:b5:8a:74:9b:9a:bd:cb:39:
ad:80:a0:c4:2b:de:cc:b0:62:d5:b4:8d:5b:b5:96:
f7:f3:38:39:b3:20:28:15:8e:fb:ae:da:49:b1:76:
bf:b3:8e:bf:86:2d:d5:64:a1:0b:25:dc:33:5a:df:
42:19:b8:22:4a:24:39:ed:11:3c:1f:0c:c0:85:85:
95:59:1c:0d:44:e2:88:a0:b4:14:05:d1:83:4a:57:
31:e0:87:63:87:fb:ab:41:be:5b:00:4c:d3:12:c0:
ec:2e:a7:26:13:2b:fc:1d:56:e3:a4:ba:4a:5a:72:
09:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:90:3B:EC:A7:9D:98:52:AF:D7:3F:54:82:F1:F8:6B:BD:16:51:B3
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/iJA77KedmFKv1z9UgvH4a70WUbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.15.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:14:a1:cd:c0:d0:d3:32:b3:d8:38:4d:0b:82:23:37:7d:55:
94:d4:39:be:38:f9:cf:b9:56:55:d3:e9:7c:d0:39:77:73:35:
60:f9:bf:91:c0:05:d9:1d:81:d5:36:74:30:83:57:25:8a:fb:
ca:03:c6:8b:dc:68:b5:ac:37:38:c5:b2:d0:f8:d5:1e:8f:33:
eb:22:46:22:06:83:df:3d:0e:7e:f9:48:33:07:cc:45:0c:a8:
32:af:d1:4f:ba:e8:e4:27:e5:ad:48:f0:80:e3:e2:97:0a:a9:
5b:35:d2:7e:2b:47:2f:fb:36:8d:ff:7c:38:46:00:f5:f2:a2:
2e:33:94:77:79:a2:6c:ac:8e:8e:73:1e:ea:fe:db:c1:1f:f0:
7e:77:8b:0e:22:96:2e:97:78:b2:8b:fc:8a:54:26:8e:c1:c4:
18:50:d9:56:a8:e8:11:02:e5:1f:80:69:04:cf:e9:f5:77:1f:
c8:56:22:6a:99:29:32:d4:f5:0d:d3:2a:84:fb:dd:02:f1:be:
f3:6a:e5:25:f5:3e:a9:fc:92:0a:d8:42:c3:82:5b:e9:74:d9:
91:be:41:ea:7e:90:0f:3c:da:d7:d7:2a:c4:d4:df:b6:ea:9d:
d7:12:b0:3c:3e:c2:02:2b:cb:34:17:6c:47:7c:ca:68:ec:df:
43:d1:8d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:10:44 2025 by rpki-client