Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/58CwPoWgs2Ik9CDFZtTjndmY3m8.roa
File: 58CwPoWgs2Ik9CDFZtTjndmY3m8.roa (raw, json)
Hash identifier: uPwPEd/pQcAWQpB9PqsDfqM1BIj5XNUFIk6quOE2Yxk=
Subject key identifier: E7:C0:B0:3E:85:A0:B3:62:24:F4:20:C5:66:D4:E3:9D:D9:98:DE:6F
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01989E473C66581702131CA6B157B7704F73
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/58CwPoWgs2Ik9CDFZtTjndmY3m8.roa
Signing time: Tue 12 Aug 2025 12:35:25 +0000
ROA not before: Tue 12 Aug 2025 12:35:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135402
IP address blocks: 82.153.90.0/24 maxlen: 24
89.213.197.0/24 maxlen: 24
194.105.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:47:3c:66:58:17:02:13:1c:a6:b1:57:b7:70:4f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 12 12:35:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7c0b03e85a0b36224f420c566d4e39dd998de6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:18:5c:89:89:fe:36:29:b9:d8:65:da:c6:60:
06:c8:87:b4:a4:cc:ae:db:74:8d:f6:58:dc:88:99:
56:e6:a0:dd:34:2e:25:50:97:48:80:fb:99:b5:5f:
ab:fd:0d:8b:34:8c:f4:40:11:a0:01:1c:df:42:de:
cf:b7:7c:25:04:78:cc:e9:c2:23:be:5e:84:f9:4a:
fc:25:5c:3b:c6:7a:23:dd:ad:46:c0:06:39:58:a0:
02:9c:c0:8a:ef:53:df:58:e3:12:d5:75:99:3a:51:
62:90:a0:90:c7:aa:d0:38:94:42:ec:11:9d:02:fb:
5a:b6:b7:37:7b:88:01:83:f3:0f:9b:4c:d4:78:5b:
26:38:85:0c:0d:e6:f3:f4:96:6c:a7:f2:d6:c9:da:
f4:df:bf:79:c5:44:dd:3e:3b:ed:23:45:14:66:9a:
27:eb:57:9c:22:6d:8b:63:1e:30:9d:e3:74:af:6f:
37:f9:4d:2d:8a:72:91:1d:10:7d:55:40:3d:e0:72:
db:76:6a:47:58:fb:88:85:d6:cd:25:30:c4:78:e3:
db:54:20:97:83:0d:a1:c3:ee:8d:f6:6e:78:96:09:
cf:3e:c9:d5:db:ad:2e:57:1e:76:9a:86:fc:c0:1e:
fd:e4:aa:04:21:ee:dd:34:15:9a:1a:f4:76:34:0c:
cb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C0:B0:3E:85:A0:B3:62:24:F4:20:C5:66:D4:E3:9D:D9:98:DE:6F
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/58CwPoWgs2Ik9CDFZtTjndmY3m8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.90.0/24
89.213.197.0/24
194.105.90.0/24
Signature Algorithm: sha256WithRSAEncryption
51:51:6c:97:24:fb:00:58:9f:3d:12:01:b7:86:a6:58:a1:86:
bd:c4:e3:28:94:57:f3:4c:cb:eb:0f:fe:4e:d8:d0:8d:f9:55:
a4:ad:f1:fd:65:73:7b:f4:aa:44:43:17:d4:60:5f:60:99:6e:
33:54:f4:74:8b:f0:75:a5:10:b6:b1:6f:9e:87:43:5d:6c:9e:
b5:e2:51:fb:8f:e6:e9:72:11:8f:ac:78:be:a6:06:14:e8:b2:
10:a9:61:f0:ce:0a:de:44:bf:23:c8:5a:c7:2d:02:70:3d:5c:
f0:2e:4f:ff:d9:ca:e4:a2:ca:59:a4:82:75:bf:cc:34:82:7d:
7e:15:a4:62:98:24:67:6d:e5:5d:12:8f:13:56:46:4a:77:db:
8f:e4:3d:b2:5e:31:86:25:29:e2:98:df:5e:20:56:e8:aa:85:
5c:f2:92:a5:aa:f5:ac:78:1e:9e:4a:50:79:c6:94:23:70:12:
5a:ab:9b:2a:44:1c:96:3e:51:41:13:e8:d7:c3:5c:17:a1:44:
8a:df:be:e3:14:a9:3d:c5:ac:0b:22:a2:e2:e3:f3:2f:ae:83:
e0:39:06:94:7f:e7:58:28:00:e4:95:a9:7e:f8:00:d7:f5:83:
e8:13:10:05:79:77:e8:dc:5e:53:2d:a1:39:6e:e6:64:93:d8:
a8:b9:1a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:35 2025 by rpki-client