Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/32JXBERVZXwD0KLyAwba75TZirE.roa
File: 32JXBERVZXwD0KLyAwba75TZirE.roa (raw, json)
Hash identifier: l3z0jOSgucC9HcFAJsP9oBVVXG60MNcmVxXyvW6Lods=
Subject key identifier: DF:62:57:04:44:55:65:7C:03:D0:A2:F2:03:06:DA:EF:94:D9:8A:B1
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0199FC92BD271DA46EB727F9617A0BF0A3DF
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/32JXBERVZXwD0KLyAwba75TZirE.roa
Signing time: Sun 19 Oct 2025 13:04:59 +0000
ROA not before: Sun 19 Oct 2025 13:04:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401937
IP address blocks: 89.33.193.0/24 maxlen: 24
89.42.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:92:bd:27:1d:a4:6e:b7:27:f9:61:7a:0b:f0:a3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Oct 19 13:04:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df6257044455657c03d0a2f20306daef94d98ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b6:98:49:5b:1d:ad:ac:bb:99:a2:3a:9d:46:
f2:b5:fd:3c:e1:7c:c4:33:cd:fe:cd:e2:1e:d8:2b:
4f:3b:8d:41:1a:a3:aa:b9:6b:81:3c:89:d4:f1:70:
1c:fd:28:46:92:f4:2c:a2:2e:e1:1c:76:50:0d:46:
cd:77:13:16:5c:6a:aa:52:7b:3f:64:3b:02:2a:38:
f3:d4:e3:64:a0:f1:09:8b:d0:7d:3a:3e:2a:bc:be:
9f:85:9c:4c:32:2a:ca:fb:61:f3:9f:ba:16:5a:b7:
d4:1f:6d:33:f6:7f:79:c2:b1:c7:c8:4c:79:91:72:
39:06:10:b9:56:34:eb:22:4a:d3:3e:31:c1:b0:e3:
22:3f:34:07:1f:c2:b8:30:d1:b1:c3:2d:6b:d6:f3:
64:da:4f:4a:2d:6b:61:2e:fb:49:ad:c5:b7:21:9f:
64:16:c0:e1:42:da:2d:de:64:ba:08:25:fa:92:34:
99:a1:35:d6:f4:12:64:5d:d5:62:ad:16:ac:8b:e0:
88:04:49:0b:86:bb:ba:cb:8e:b5:70:60:40:c8:fe:
0b:65:4b:80:59:d6:4f:f0:b9:03:70:e0:8e:f6:06:
c5:97:e3:e0:4e:9c:ef:3c:b2:cc:64:8b:a6:8a:1d:
62:81:3d:5b:09:07:49:29:35:05:e4:63:05:ce:fd:
84:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:62:57:04:44:55:65:7C:03:D0:A2:F2:03:06:DA:EF:94:D9:8A:B1
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/32JXBERVZXwD0KLyAwba75TZirE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.193.0/24
89.42.80.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:c9:7f:5b:7f:e4:1b:df:82:75:b3:bf:5f:8b:ff:15:01:c2:
d4:65:bd:66:56:2b:01:b9:2f:49:0d:f2:10:59:f3:c1:02:2c:
c8:f8:e8:86:40:12:a8:7e:27:d0:04:1e:a3:77:df:c0:fe:69:
eb:78:c3:a2:b8:0a:0d:ec:35:02:c4:12:d6:19:98:61:85:43:
c0:7f:56:26:13:b2:65:ef:48:75:92:7a:72:78:fb:fb:4f:fd:
ab:96:01:a5:25:99:24:ac:59:8c:ae:0b:95:10:2a:42:79:92:
59:4f:53:50:d1:d7:b6:77:17:5d:24:f1:85:5b:63:33:88:a7:
f7:92:bb:27:73:4e:80:32:2e:78:a5:97:ed:31:01:48:0e:8e:
f5:59:56:aa:06:1a:2c:ff:b5:e3:b2:c7:82:71:14:19:48:7e:
b1:45:e8:a7:ab:79:b0:b0:a6:e2:1a:4f:81:41:64:8c:a9:f8:
39:25:bf:02:a7:05:f1:9f:f6:92:d3:65:0f:a6:d6:47:6d:78:
6f:e5:f5:09:29:f0:56:99:3a:97:b5:3b:e3:ee:5c:d5:1b:08:
15:cb:44:a0:07:c8:52:54:4d:6d:9b:0e:bd:18:f6:2e:2e:78:
d7:a2:86:ad:02:1b:b4:92:93:3f:ee:e5:65:25:3f:7d:62:04:
ed:98:91:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:56 2025 by rpki-client