Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/qLhyc6MW2r9mcmTEvOiGtvd2aUc.roa
File: qLhyc6MW2r9mcmTEvOiGtvd2aUc.roa (raw, json)
Hash identifier: p41rnytxWXHHTN60Yh5AKBIQBvZ5+HCiPPoZWRXZ5x0=
Subject key identifier: A8:B8:72:73:A3:16:DA:BF:66:72:64:C4:BC:E8:86:B6:F7:76:69:47
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 0199EDA468C2D97C0CEC338185AB2D5D834F
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/qLhyc6MW2r9mcmTEvOiGtvd2aUc.roa
Signing time: Thu 16 Oct 2025 15:29:58 +0000
ROA not before: Thu 16 Oct 2025 15:29:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400909
IP address blocks: 89.187.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ed:a4:68:c2:d9:7c:0c:ec:33:81:85:ab:2d:5d:83:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Oct 16 15:29:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8b87273a316dabf667264c4bce886b6f7766947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:43:6d:c1:0e:32:e0:c2:07:49:c1:b5:70:61:
54:37:4f:92:65:ed:fa:ea:ae:fb:66:5f:b6:54:41:
c0:44:70:0c:b3:36:89:a5:f1:d3:fe:a0:35:71:26:
96:66:db:1b:e0:b1:63:4b:9d:20:51:23:e8:14:72:
c2:97:be:60:37:39:a5:c7:ba:82:7e:b1:b8:dc:31:
21:09:92:ee:42:44:75:1e:c4:1c:d1:46:95:15:c4:
d9:b7:a2:fc:8c:16:ec:90:b0:45:8c:c4:e9:0f:a3:
fe:ce:a1:4b:13:ec:07:4f:d8:48:c8:9e:fb:46:99:
81:64:d1:de:a4:28:56:18:d9:a8:9d:87:4b:65:7d:
7a:80:4f:4d:a7:be:e2:e2:f1:ac:21:16:41:d7:72:
81:72:74:67:11:63:ac:3c:44:d4:45:c7:21:1a:ba:
0e:1a:33:82:47:43:08:04:94:dd:41:86:8e:c9:5d:
77:03:d9:4a:54:69:98:c7:70:ae:34:71:e2:56:6b:
01:f4:66:52:1c:8f:c4:39:b9:c9:6a:5e:38:86:01:
20:c8:6c:57:03:b2:d1:b3:71:f3:c8:84:98:3b:69:
1c:85:c0:b8:c7:2b:39:4a:cf:64:56:cd:16:63:48:
ca:3d:8f:0e:08:3b:a9:09:e2:c1:ab:b5:69:d0:b1:
25:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B8:72:73:A3:16:DA:BF:66:72:64:C4:BC:E8:86:B6:F7:76:69:47
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/qLhyc6MW2r9mcmTEvOiGtvd2aUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.16.0/24
Signature Algorithm: sha256WithRSAEncryption
78:e9:0c:df:3f:e6:9d:04:d8:3b:94:88:b3:d8:40:de:ff:f0:
9b:57:0d:1e:10:81:9b:be:84:b6:f5:47:a0:96:e2:74:a2:85:
8c:eb:60:a9:6d:fb:6b:90:b6:ab:c9:ec:e0:26:19:4d:8f:33:
59:d4:7f:16:6d:5c:67:ac:6a:0c:9f:1d:fc:95:82:44:b3:03:
74:0a:61:ca:62:37:eb:34:03:c5:b9:91:a4:de:d2:5f:2f:ff:
55:d1:60:ef:fa:15:fa:50:c2:7b:87:1e:8d:3d:d7:dd:cf:59:
e7:fb:42:e8:9d:ce:38:dc:0e:e9:3f:41:0d:93:4f:48:ea:09:
79:df:dd:be:5b:dc:40:1b:3d:a6:c4:50:f1:0d:0e:0f:5c:58:
d2:24:a6:4e:a0:c7:54:b9:10:7e:59:fb:3f:49:d2:da:4d:c8:
67:7c:09:f8:6f:90:d8:64:19:c7:ef:f9:9b:29:5b:df:7e:69:
48:97:e8:b7:13:23:26:3f:75:f1:07:de:81:02:0f:76:cb:7c:
7c:0d:4e:88:e1:f6:35:46:a4:a2:aa:9e:ec:3d:0d:01:61:c3:
b6:e5:38:1d:77:68:64:2a:0a:6f:07:3c:f2:aa:55:00:86:7e:
b7:37:49:3f:14:99:38:56:80:88:bb:6d:a1:cf:d2:2e:84:76:
73:cf:53:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:13:12 2025 by rpki-client