Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/92JGCVG0KGUHt67vpM0BZVn3UQE.roa
File: 92JGCVG0KGUHt67vpM0BZVn3UQE.roa (raw, json)
Hash identifier: I5mDPM3UZXiNkN/cQREcr6aSi6ZUeTXzLV/2lof7iyQ=
Subject key identifier: F7:62:46:09:51:B4:28:65:07:B7:AE:EF:A4:CD:01:65:59:F7:51:01
Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial: 01971CEA1FA0AD7894AD875A351046AC5203
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/92JGCVG0KGUHt67vpM0BZVn3UQE.roa
Signing time: Thu 29 May 2025 16:39:54 +0000
ROA not before: Thu 29 May 2025 16:39:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 89.222.88.0/22 maxlen: 24
89.222.92.0/22 maxlen: 24
178.210.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1c:ea:1f:a0:ad:78:94:ad:87:5a:35:10:46:ac:52:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Validity
Not Before: May 29 16:39:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f762460951b4286507b7aeefa4cd016559f75101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:af:17:6f:8d:40:24:82:47:32:c7:94:0f:45:
72:2e:38:8c:19:b7:20:94:a5:40:21:d5:74:5b:a6:
01:90:c9:68:da:18:5b:32:95:86:47:59:e0:b9:11:
7f:07:f6:99:ab:67:fe:cb:64:9c:80:75:f1:42:ea:
f6:4f:c2:ec:54:5f:f3:57:76:b9:4e:2b:f4:70:e7:
c9:50:b5:e8:7b:46:5d:a2:c6:59:5a:a3:c5:35:e4:
b6:16:fc:da:67:55:63:32:25:44:81:28:4e:4f:be:
b4:34:84:04:af:4e:20:28:55:37:33:88:22:f6:26:
7a:0d:07:0c:9b:82:13:3d:13:5e:3d:05:5b:f3:d4:
31:60:ae:59:dd:75:20:b6:32:5b:2a:38:56:f1:b0:
4e:fb:fa:30:b7:1d:a3:74:61:d5:6e:17:63:66:32:
85:1e:d9:db:5e:3b:79:05:df:04:7c:2c:a4:47:26:
a7:d0:2a:ec:b4:31:0c:1f:2a:b4:19:55:92:ba:ab:
4c:3c:d7:b9:14:df:89:bc:e4:a7:38:91:4c:fb:c2:
e2:58:c5:8d:9d:a6:b8:d3:8e:49:09:32:19:fb:03:
95:fc:a3:1c:1b:b7:81:c2:2e:4b:f4:6e:b8:bb:2d:
43:dc:4e:92:32:2e:c1:60:c2:7e:d3:bc:71:34:31:
67:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:62:46:09:51:B4:28:65:07:B7:AE:EF:A4:CD:01:65:59:F7:51:01
X509v3 Authority Key Identifier:
keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/92JGCVG0KGUHt67vpM0BZVn3UQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.222.88.0/21
178.210.250.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:95:08:4f:23:da:fc:bb:db:ee:2d:da:ce:e5:b2:2b:bc:be:
32:b1:a9:55:cb:b8:f8:7a:a7:61:8b:12:f6:9e:3d:99:cd:9c:
b2:08:21:ea:16:11:62:91:33:67:e0:3c:62:23:4e:e5:12:7f:
47:ff:be:b9:3f:4c:e9:a0:ae:ee:c5:ba:7b:1e:b9:62:10:6b:
04:54:d3:6b:1c:df:70:61:7c:15:e5:e7:56:7e:bf:69:e5:a3:
7b:56:4b:7b:48:d3:fb:46:4e:cf:0a:7d:7e:47:7d:a4:80:2b:
0b:e9:ad:99:af:85:d3:ec:f3:d6:5d:b1:11:16:df:1c:81:19:
84:65:71:06:74:82:af:8e:f4:ea:75:8b:94:f5:6e:cf:c8:45:
c6:ef:a8:b9:5b:57:72:e6:d8:92:be:e2:b3:98:b8:0c:4f:b4:
ec:b9:39:9a:63:5b:0b:38:85:0c:8f:d4:89:8a:cc:2e:64:28:
2b:c8:0e:93:0e:2a:d4:57:aa:05:75:20:88:34:21:18:ab:30:
c5:ca:b7:5d:30:93:82:04:ab:e8:03:69:89:94:12:8b:42:ec:
7b:c4:b1:05:12:aa:61:6a:e9:1f:f8:26:47:71:4e:50:67:c7:
a5:de:f4:c4:d2:48:ca:58:3a:15:2d:08:c8:0f:58:b6:e5:c3:
bf:84:71:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 08:49:06 2025 by rpki-client