Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/G6lHjwo7uChQ8tNQApskBJUk6PE.roa
File: G6lHjwo7uChQ8tNQApskBJUk6PE.roa (raw, json)
Hash identifier: zsopM8g3xa2HEKgKLTLSVAE4uMJ9Fqd+RZH//vq2SHk=
Subject key identifier: 1B:A9:47:8F:0A:3B:B8:28:50:F2:D3:50:02:9B:24:04:95:24:E8:F1
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0198C89CEE52BFE0CDDD32E018155F5318D8
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/G6lHjwo7uChQ8tNQApskBJUk6PE.roa
Signing time: Wed 20 Aug 2025 17:53:04 +0000
ROA not before: Wed 20 Aug 2025 17:53:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211409
IP address blocks: 89.42.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c8:9c:ee:52:bf:e0:cd:dd:32:e0:18:15:5f:53:18:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 20 17:53:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ba9478f0a3bb82850f2d350029b24049524e8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:72:1c:4e:04:6b:e0:bd:f0:cc:55:6a:f5:0a:
63:2e:d0:dd:83:45:74:a7:ee:c5:3b:62:e4:09:5b:
6a:ef:4d:41:75:d5:9e:c7:0e:6d:9e:27:54:a9:8f:
6b:df:9d:ab:8a:7e:dd:b4:ef:67:8c:57:fe:7f:29:
a7:42:4c:fb:2e:13:80:b4:e0:ba:cf:5f:f6:b9:3f:
f0:bb:05:22:e3:f6:6d:29:af:02:bf:60:6c:a0:3d:
92:89:33:53:a9:47:7d:73:c1:94:26:b9:a3:ec:3f:
0e:60:69:e5:f4:78:72:27:b3:2b:ec:ef:6c:2d:d6:
d2:10:f8:14:61:c1:4a:a2:9d:3f:92:bc:65:69:93:
cf:33:b4:41:ee:3f:a8:44:a7:9e:ca:68:e3:b7:13:
b4:c3:9f:95:01:c8:b6:ba:12:0f:92:b8:a1:43:64:
d9:bc:af:2a:c2:e2:bb:d3:00:36:69:80:ba:ea:bf:
a0:ec:a1:23:ba:25:f9:ef:d6:60:a9:90:53:7d:25:
c8:ab:9a:27:e4:75:a4:66:7d:1c:44:9b:f5:c5:95:
a0:04:76:29:61:28:7a:ab:d4:1d:fa:65:fe:29:88:
03:de:2e:54:2c:be:8b:ce:f2:44:0c:f9:af:ea:9e:
74:f6:c6:10:c9:7b:e3:20:95:9c:5f:e5:85:d2:dc:
6d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A9:47:8F:0A:3B:B8:28:50:F2:D3:50:02:9B:24:04:95:24:E8:F1
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/G6lHjwo7uChQ8tNQApskBJUk6PE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.88.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:9c:b3:8d:60:3a:42:eb:9d:a7:b8:a5:82:3f:74:4a:20:59:
c9:22:2e:f4:d0:7f:91:e7:44:87:c0:9d:b1:f6:17:4a:bd:be:
0b:1a:00:75:3b:a7:31:db:7c:ad:4f:6d:d5:94:a8:c8:9a:14:
69:d1:f7:77:2d:f1:fa:82:9d:3a:f5:0f:02:63:5d:23:fe:3e:
1b:51:7a:92:e4:9a:8f:02:f9:5f:82:9a:2f:9d:e4:aa:4c:f0:
b0:df:13:49:28:61:c3:79:d5:34:20:88:59:f1:d0:4c:79:60:
ec:2c:6b:b6:c5:55:bf:9b:f2:25:8a:cf:cc:84:6a:ba:59:8c:
89:13:61:f6:c9:45:92:62:d8:5c:5b:7a:bf:c1:f4:46:0b:1f:
0e:69:ec:e6:9d:77:a7:64:f1:75:a3:40:0e:78:c7:72:2b:db:
44:82:56:01:b0:62:3e:ad:45:de:3d:66:bb:52:ae:df:cf:6c:
ee:71:a4:58:e1:53:e2:9d:37:15:6c:15:14:f0:c3:19:2d:ec:
5e:95:be:e4:6f:83:36:41:ef:70:0d:59:58:37:62:c7:7b:cb:
1f:1b:c9:5e:2c:3c:a2:0b:0c:fd:f5:22:77:41:a6:0b:7c:8b:
8d:75:2c:ed:72:34:59:b7:30:0c:ed:b9:40:44:c2:bb:8e:12:
fa:d1:79:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:51:48 2025 by rpki-client