Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HXXIfwxQAjR047Vz7H26xSw3ZOY.roa
File: HXXIfwxQAjR047Vz7H26xSw3ZOY.roa (raw, json)
Hash identifier: TrlFHq7qaPlbminOLsDa74XQ+OiR4pTxipSboyYHd3c=
Subject key identifier: 1D:75:C8:7F:0C:50:02:34:74:E3:B5:73:EC:7D:BA:C5:2C:37:64:E6
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01989E465390A1B66D92A0F8C3FE8062002E
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HXXIfwxQAjR047Vz7H26xSw3ZOY.roa
Signing time: Tue 12 Aug 2025 12:34:25 +0000
ROA not before: Tue 12 Aug 2025 12:34:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137235
IP address blocks: 89.28.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:46:53:90:a1:b6:6d:92:a0:f8:c3:fe:80:62:00:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 12 12:34:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d75c87f0c50023474e3b573ec7dbac52c3764e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:e3:49:02:ec:c0:54:60:61:9c:1a:63:53:c1:
1d:80:76:83:50:e8:c9:97:40:59:f4:59:dd:e6:78:
e3:31:53:a4:bf:49:67:1a:68:60:fe:2b:69:8b:d8:
2b:4a:aa:e9:4b:4b:e6:dd:dc:68:86:31:29:5c:70:
b4:be:75:51:43:ec:bf:9b:36:6d:78:9d:20:31:35:
d9:ae:9a:91:f7:f2:bb:4d:df:ef:38:a7:25:8f:bd:
01:d8:40:95:6c:af:68:23:53:a0:b4:d7:09:5b:49:
ef:39:a7:aa:e8:30:bf:6b:c1:1e:82:25:50:6a:02:
11:39:89:d2:ae:d7:42:a6:dd:a9:ba:16:a5:5c:b1:
3e:6e:bb:c4:ef:46:2a:fc:fc:4d:dc:ab:a3:e5:dd:
eb:b6:4d:73:7c:82:a1:94:a9:e5:ca:50:a4:40:cc:
62:33:da:4d:e6:90:34:a2:2a:0a:51:1e:37:9a:18:
f3:16:8c:e6:e3:c6:de:3b:62:42:21:f5:f4:23:c9:
55:3e:a7:43:8d:3b:60:47:db:ac:23:b2:1f:f8:17:
54:9e:4e:a3:d4:50:de:c9:fa:5c:ba:15:ca:04:87:
e2:84:db:83:72:37:06:2a:59:9b:72:21:73:47:53:
9d:f6:08:2c:06:ea:19:97:c0:23:1a:e2:8b:02:8f:
48:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:75:C8:7F:0C:50:02:34:74:E3:B5:73:EC:7D:BA:C5:2C:37:64:E6
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HXXIfwxQAjR047Vz7H26xSw3ZOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.28.234.0/24
Signature Algorithm: sha256WithRSAEncryption
91:77:0d:6b:9c:cc:6c:a6:a4:bc:8c:3e:b4:1f:68:7c:5f:ac:
6b:0d:14:59:5b:e5:53:f5:ea:7b:15:ec:9f:b2:5c:35:a6:61:
3b:fe:c2:85:cc:90:39:d2:c3:96:dd:41:4d:ec:83:68:7e:3b:
08:10:0b:41:f7:03:06:50:3c:f7:b9:8a:3c:3e:41:6e:bd:e9:
91:82:6b:26:06:ec:9c:b0:ca:ac:84:42:2b:db:6a:89:12:22:
27:d6:05:da:ec:6d:7a:4d:4f:2a:ca:2d:2d:fe:9b:fb:12:b6:
ab:c8:7e:34:bc:69:83:5b:54:56:b7:c5:0b:18:22:e6:2d:f1:
a4:a9:d6:0a:9f:8e:e2:3d:a9:0f:b3:03:04:38:4e:be:c3:63:
2b:09:f9:10:96:e0:0f:30:5c:f7:4a:04:56:3d:c1:94:de:b3:
37:5a:d9:b5:fc:cf:5f:2a:d3:18:b6:7d:02:26:24:fe:f0:76:
d1:e2:81:dc:60:2e:43:cd:08:dc:e2:0d:c1:35:8f:f5:05:ad:
89:41:08:18:7a:12:a6:fa:23:02:16:e1:74:19:fb:d8:7a:8a:
b8:af:d0:83:3d:4e:01:fd:6b:cb:bb:4a:30:d9:e1:58:ce:1d:
92:c0:f9:9e:fa:2b:3d:4c:a9:24:1d:a6:a3:86:2f:c9:42:38:
b4:20:49:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZieRlOQobZtkqD4w/6AYgAuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwODEyMTIzNDI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDc1Yzg3ZjBjNTAwMjM0NzRlM2I1NzNlYzdkYmFjNTJjMzc2NGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA++NJAuzAVGBhnBpjU8EdgHaDUOjJ
l0BZ9Fnd5njjMVOkv0lnGmhg/itpi9grSqrpS0vm3dxohjEpXHC0vnVRQ+y/mzZt
eJ0gMTXZrpqR9/K7Td/vOKclj70B2ECVbK9oI1OgtNcJW0nvOaeq6DC/a8EegiVQ
agIROYnSrtdCpt2puhalXLE+brvE70Yq/PxN3Kuj5d3rtk1zfIKhlKnlylCkQMxi
M9pN5pA0oioKUR43mhjzFozm48beO2JCIfX0I8lVPqdDjTtgR9usI7If+BdUnk6j
1FDeyfpcuhXKBIfihNuDcjcGKlmbciFzR1Od9ggsBuoZl8AjGuKLAo9IhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB11yH8MUAI0dOO1c+x9usUsN2TmMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvSFhYSWZ3eFFBalIwNDdWejdIMjZ4U3czWk9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRzqMA0G
CSqGSIb3DQEBCwUAA4IBAQCRdw1rnMxspqS8jD60H2h8X6xrDRRZW+VT9ep7Feyf
slw1pmE7/sKFzJA50sOW3UFN7INofjsIEAtB9wMGUDz3uYo8PkFuvemRgmsmBuyc
sMqshEIr22qJEiIn1gXa7G16TU8qyi0t/pv7EraryH40vGmDW1RWt8ULGCLmLfGk
qdYKn47iPakPswMEOE6+w2MrCfkQluAPMFz3SgRWPcGU3rM3Wtm1/M9fKtMYtn0C
JiT+8HbR4oHcYC5DzQjc4g3BNY/1Ba2JQQgYehKm+iMCFuF0GfvYeoq4r9CDPU4B
/WvLu0ow2eFYzh2SwPme+is9TKkkHaajhi/JQji0IElz
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:16 2025 by rpki-client