Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/VwnfO_pXNK5IOKJ1Cqct5Hh67Ow.roa
File: VwnfO_pXNK5IOKJ1Cqct5Hh67Ow.roa (raw, json)
Hash identifier: v9LCpM4yPhd9qv+m2SoyLBk+06PNjbMK3AMm1jbTQa4=
Subject key identifier: 57:09:DF:3B:FA:57:34:AE:48:38:A2:75:0A:A7:2D:E4:78:7A:EC:EC
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0199816633D5A038EB499E86509227C214A7
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/VwnfO_pXNK5IOKJ1Cqct5Hh67Ow.roa
Signing time: Thu 25 Sep 2025 15:03:02 +0000
ROA not before: Thu 25 Sep 2025 15:03:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149448
IP address blocks: 89.40.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:81:66:33:d5:a0:38:eb:49:9e:86:50:92:27:c2:14:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Sep 25 15:03:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5709df3bfa5734ae4838a2750aa72de4787aecec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ae:10:5c:69:31:41:dc:55:9e:15:9a:7c:16:
5e:4a:d6:61:73:bc:94:2b:57:da:c6:fe:c4:c1:5d:
0e:1e:b2:d1:71:3c:7d:31:b0:e9:c1:45:ab:3a:9a:
9f:75:fc:95:6f:b8:9a:c2:e4:1f:04:89:63:47:9c:
58:8a:1a:e4:44:bd:e1:d5:4a:63:d7:c2:db:ef:15:
2d:64:ef:2b:0e:62:cf:37:89:d0:3b:59:2d:84:53:
e9:83:a4:4c:9b:e4:da:6b:01:5c:c8:e6:bd:2f:6a:
1a:b9:f2:b5:3e:2c:db:4c:e1:44:a4:2d:74:a1:1b:
23:16:df:03:c3:eb:e8:c0:1a:c1:cc:b9:ce:c2:32:
03:97:86:7e:af:ff:60:10:0a:e8:90:28:99:07:73:
40:67:58:04:ae:5e:17:7f:f3:a0:65:1a:20:1a:36:
08:ff:23:f8:d2:d3:42:76:7f:26:e8:b0:8e:8a:e9:
fb:c7:a4:8e:c7:48:ea:c8:b3:9f:16:5b:fb:4f:6c:
80:7d:fb:30:d6:65:b3:3a:17:23:d1:a0:50:48:3b:
99:69:04:8d:57:9e:78:4f:eb:99:08:aa:2c:6d:96:
fb:08:5e:5f:05:3c:11:c6:ce:03:6b:7c:b1:e1:b9:
d1:cb:c0:a6:a5:d2:d3:53:c7:30:ae:15:a1:a7:1b:
da:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:09:DF:3B:FA:57:34:AE:48:38:A2:75:0A:A7:2D:E4:78:7A:EC:EC
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/VwnfO_pXNK5IOKJ1Cqct5Hh67Ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.83.0/24
Signature Algorithm: sha256WithRSAEncryption
77:bf:47:b0:12:6f:b9:1d:9e:24:72:f7:db:ba:96:b0:66:52:
40:12:c6:39:72:5a:86:42:06:dd:82:cc:db:5c:1b:c7:be:71:
b6:28:38:ed:4d:03:0c:4c:18:5c:65:55:5f:7f:34:0c:6c:98:
e6:01:93:47:cc:18:f4:9f:a6:1e:97:7d:07:de:80:3b:15:d0:
58:9e:e0:c9:06:81:ab:f1:8a:97:d5:bd:3c:a2:aa:24:09:fe:
4c:dc:a8:b4:69:d8:7b:8f:a7:84:1e:b1:af:07:a8:2f:47:30:
1d:c8:b6:c0:67:d8:54:fe:64:e0:3d:b3:2a:e5:07:15:7a:06:
5c:77:b5:2f:e0:6d:fa:34:97:9a:82:9c:06:c5:79:76:62:ae:
d6:d2:a3:04:5f:b3:ed:12:7e:ae:52:8b:35:a1:a2:63:cf:31:
ff:ba:da:93:52:0c:43:bc:18:14:dd:ea:89:07:0b:f9:b2:b0:
ef:bf:0f:69:87:76:5c:a7:43:f6:f7:36:72:03:2b:ba:8b:61:
33:0d:3d:23:7c:38:d1:ac:f5:be:44:d7:e6:b8:6f:b0:8f:e2:
86:d2:b8:c0:17:b5:e3:cf:58:1c:d7:f1:8e:ff:d6:13:90:35:
09:dd:72:57:95:48:7a:38:3e:ca:6e:91:8c:07:af:16:58:9d:
d0:5c:38:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:04 2025 by rpki-client