
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/KiDsVhw56QU2iy0IMAi4EJdqHlM.roa
File: KiDsVhw56QU2iy0IMAi4EJdqHlM.roa (raw, json)
Hash identifier: LibO9sa7HWqbRvwGzvXHvKUHFf3hfVmQIFAA8/Tf1iE=
Subject key identifier: 2A:20:EC:56:1C:39:E9:05:36:8B:2D:08:30:08:B8:10:97:6A:1E:53
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 01994D45AC411C72A4DF5BA27598B7E5BBF0
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/KiDsVhw56QU2iy0IMAi4EJdqHlM.roa
Signing time: Mon 15 Sep 2025 12:07:15 +0000
ROA not before: Mon 15 Sep 2025 12:07:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135402
IP address blocks: 89.23.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4d:45:ac:41:1c:72:a4:df:5b:a2:75:98:b7:e5:bb:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Sep 15 12:07:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a20ec561c39e905368b2d083008b810976a1e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fc:00:1a:93:bd:98:ea:b6:54:14:ca:f7:db:
e2:9b:76:96:18:c1:6e:66:1c:ae:3e:c7:4f:08:91:
8b:78:13:f8:2a:66:60:4f:ee:87:e4:15:04:67:5b:
28:fb:89:e2:82:44:68:f7:03:d9:45:ed:a9:70:f4:
c4:f5:c2:b3:14:d6:c5:32:39:39:ec:32:4f:0c:70:
73:5b:fb:f0:2c:f5:20:67:d4:f1:34:c4:f7:8b:92:
32:3f:ee:19:5c:96:3a:82:b7:91:77:a8:95:d7:6b:
24:17:ba:91:f9:8c:93:ea:5f:d0:fe:bb:1c:37:4f:
29:9f:4e:c5:78:8a:26:5f:5f:94:d4:3d:9e:5c:70:
a7:53:fd:fb:40:6b:21:57:e0:59:67:8c:64:cb:25:
62:69:f8:6b:d1:88:a8:b7:77:16:a2:de:ce:84:e3:
12:60:8a:52:af:c2:be:4e:96:3f:8b:fe:aa:51:25:
52:2a:7d:e2:f3:4c:9c:17:88:d3:44:62:16:24:fb:
71:b1:3b:bd:e8:72:c5:2d:9b:1a:f8:9b:8f:c1:37:
d4:9e:27:84:8e:49:d9:fc:0f:9e:e2:19:fa:94:e0:
e5:1d:cc:b2:5a:ed:a0:c6:c7:7c:34:29:dd:90:13:
63:05:07:fe:45:dd:3e:22:86:53:4a:42:93:de:08:
91:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:20:EC:56:1C:39:E9:05:36:8B:2D:08:30:08:B8:10:97:6A:1E:53
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/KiDsVhw56QU2iy0IMAi4EJdqHlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.91.0/24
Signature Algorithm: sha256WithRSAEncryption
60:1e:31:0d:e4:90:52:a1:a4:8f:49:28:4a:48:25:ca:50:be:
0a:b8:d2:4f:c1:ee:58:6c:92:0b:45:69:25:bd:89:76:44:85:
36:43:0b:34:1d:7d:d5:20:33:29:04:57:5f:db:1c:78:8d:af:
14:f7:75:d3:3b:fa:cf:a5:77:34:f5:dc:20:a8:15:1a:5b:d4:
a0:8e:e0:a4:91:87:d8:a1:21:04:15:16:34:12:63:45:e0:62:
5b:5a:e2:fd:07:f1:b0:e4:2b:b6:9b:b3:d4:07:c0:49:80:a7:
e0:50:16:71:bd:e7:c0:8d:16:2f:ec:bb:c1:61:fa:0a:25:8b:
28:b9:2d:68:62:9e:dd:f5:f2:19:20:5e:6c:b7:e0:ec:0b:6d:
13:5d:72:84:d6:9a:cb:d7:52:e0:91:43:ba:60:09:d6:e4:05:
1b:87:7e:49:5c:3d:09:84:e1:60:2b:36:a0:08:6e:8c:9e:08:
e5:da:6a:6b:99:3b:36:df:32:93:22:6c:de:3e:b6:b0:47:54:
ac:b0:23:a9:c2:71:a4:5c:87:19:12:86:d7:62:20:e2:35:3a:
bb:f5:f3:71:34:77:b2:47:4d:5a:9e:e0:55:45:41:63:8b:c4:
ee:2b:36:42:11:f9:77:4f:07:37:21:c4:d9:9f:b0:07:9e:68:
de:4d:e8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:20:30 2025 by rpki-client