Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/14e029-7f09-4baf-9fee-b4aa4abf8898/1/rn-y4SYUL_w8sGicA7quountCN8.roa
File: rn-y4SYUL_w8sGicA7quountCN8.roa (raw, json)
Hash identifier: g/t0pFCKiVn8PPZmfB3i7fY2ZD3J7UjYzjWRpzHev+A=
Subject key identifier: AE:7F:B2:E1:26:14:2F:FC:3C:B0:68:9C:03:BA:AE:A2:E9:ED:08:DF
Certificate issuer: /CN=ae7d9421c060fd967b699833706b12244017deda
Certificate serial: 0199DEE9C9ABA91CDD47269E5A09B980AD4A
Authority key identifier: AE:7D:94:21:C0:60:FD:96:7B:69:98:33:70:6B:12:24:40:17:DE:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rn2UIcBg_ZZ7aZgzcGsSJEAX3to.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/14e029-7f09-4baf-9fee-b4aa4abf8898/1/rn-y4SYUL_w8sGicA7quountCN8.roa
Signing time: Mon 13 Oct 2025 18:51:27 +0000
ROA not before: Mon 13 Oct 2025 18:51:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210419
IP address blocks: 89.23.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/14e029-7f09-4baf-9fee-b4aa4abf8898/1/rn2UIcBg_ZZ7aZgzcGsSJEAX3to.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/14e029-7f09-4baf-9fee-b4aa4abf8898/1/rn2UIcBg_ZZ7aZgzcGsSJEAX3to.mft
rsync://rpki.ripe.net/repository/DEFAULT/rn2UIcBg_ZZ7aZgzcGsSJEAX3to.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:de:e9:c9:ab:a9:1c:dd:47:26:9e:5a:09:b9:80:ad:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7d9421c060fd967b699833706b12244017deda
Validity
Not Before: Oct 13 18:51:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae7fb2e126142ffc3cb0689c03baaea2e9ed08df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:41:ee:12:22:1a:e3:26:27:45:9c:63:23:6e:
6d:e8:b1:3e:c0:9b:23:96:fb:fa:15:8c:1b:d3:a0:
af:39:6d:20:53:86:24:ed:3f:4a:30:02:ab:2c:01:
25:e4:f0:a3:09:d6:28:c0:f0:c4:8a:c3:68:ba:1e:
17:e8:be:59:d4:58:70:b8:68:52:a6:00:f8:9a:84:
38:98:68:53:e8:de:53:fa:96:1e:1e:5f:c5:50:42:
25:02:4b:38:8d:3d:f0:ff:68:3e:29:b6:e6:a2:11:
6b:5d:91:54:3e:2e:e2:20:21:27:61:3d:48:d7:c3:
57:4d:5c:1d:e5:cd:7a:04:e1:28:6f:fb:a0:5e:c6:
66:fc:4a:4e:b8:9c:63:dd:e0:bb:59:d4:e9:dd:29:
ba:a0:69:80:35:ce:b9:f8:a1:34:c9:ee:0e:ed:b5:
1a:be:68:97:a4:9b:d1:e4:47:06:ed:67:32:e7:e2:
76:92:7e:d7:3c:9c:ff:43:b8:3d:f1:33:af:e5:8c:
b2:81:37:e0:e2:a6:dc:bf:c7:44:94:d0:52:8e:86:
22:4c:27:9a:36:50:16:2e:52:e6:d7:4d:d8:de:dd:
70:47:66:23:1c:e2:e8:25:64:a7:4b:0c:73:2f:e0:
d7:d1:f1:58:1b:e4:79:d2:7c:f5:d7:fc:76:b4:89:
a1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7F:B2:E1:26:14:2F:FC:3C:B0:68:9C:03:BA:AE:A2:E9:ED:08:DF
X509v3 Authority Key Identifier:
keyid:AE:7D:94:21:C0:60:FD:96:7B:69:98:33:70:6B:12:24:40:17:DE:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn2UIcBg_ZZ7aZgzcGsSJEAX3to.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/14e029-7f09-4baf-9fee-b4aa4abf8898/1/rn-y4SYUL_w8sGicA7quountCN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/14e029-7f09-4baf-9fee-b4aa4abf8898/1/rn2UIcBg_ZZ7aZgzcGsSJEAX3to.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.124.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:fa:fe:71:58:77:77:4f:5e:18:e7:9d:20:b3:ab:f2:0f:74:
b4:64:c3:02:9b:6e:49:bc:ee:35:68:cb:01:65:f2:5f:91:56:
44:f2:3f:7b:34:48:f0:57:87:fd:cd:f9:c6:04:c3:34:71:d3:
d7:c9:8b:f4:a9:31:9d:4f:f1:f7:8a:6a:5f:0c:91:c4:4e:27:
73:4f:8f:dc:fe:d7:3b:4f:d6:b8:9f:03:d6:e8:5d:7c:0a:f2:
81:39:83:4b:11:48:db:08:fd:f5:30:65:ec:48:12:f8:7a:95:
7b:9f:50:5b:4b:dc:ea:45:01:a0:46:fd:43:71:67:7a:52:94:
ce:04:8d:a2:3f:67:60:0e:48:e4:c2:58:71:06:4d:41:68:be:
8c:fa:11:ff:56:62:5e:f6:c6:23:1e:88:94:f2:3b:7b:b6:71:
a0:cc:ce:0c:3c:c0:ed:b4:2c:9f:e2:7d:6e:08:2c:b8:ae:45:
37:04:0e:8c:66:77:4a:12:bc:36:d0:b0:e8:e9:12:ed:4c:c3:
2c:a5:84:b1:02:80:b9:3b:50:1f:a0:dc:7c:80:b7:68:25:71:
54:65:d9:61:c2:5f:f8:c7:36:7e:dd:6f:11:aa:a0:dd:cc:38:
fa:f6:d6:35:ac:78:13:f0:b3:d0:f5:fd:8a:87:57:b4:82:f6:
55:4d:73:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:32:06 2025 by rpki-client