Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/iReNUad_z8MIbDXyAmruHYsr7Tg.roa
File: iReNUad_z8MIbDXyAmruHYsr7Tg.roa (raw, json)
Hash identifier: IQii4bF71uMtioCE1UShqHzf2ujT5ikVUAvaKniKsLg=
Subject key identifier: 89:17:8D:51:A7:7F:CF:C3:08:6C:35:F2:02:6A:EE:1D:8B:2B:ED:38
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 0198CD5C19487EA6F4778AD9180E7B3DA06E
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/iReNUad_z8MIbDXyAmruHYsr7Tg.roa
Signing time: Thu 21 Aug 2025 16:00:21 +0000
ROA not before: Thu 21 Aug 2025 16:00:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211421
IP address blocks: 2a03:9381:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cd:5c:19:48:7e:a6:f4:77:8a:d9:18:0e:7b:3d:a0:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Aug 21 16:00:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89178d51a77fcfc3086c35f2026aee1d8b2bed38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:43:1a:d6:6b:65:27:f1:ca:70:d7:9e:5f:1d:
c3:09:05:a0:c4:3e:f4:09:60:d3:27:24:b0:27:2b:
92:d0:ae:0d:21:02:07:83:d8:75:4e:0e:c5:3d:ed:
fc:6a:ce:f8:fb:9e:4a:cc:5e:9d:cf:eb:75:39:9e:
0f:50:d9:6f:13:28:4c:ee:df:eb:17:88:af:72:fb:
c4:43:89:b5:2f:e2:5b:d2:06:de:b6:e7:5f:ba:bc:
07:0b:21:8f:07:b2:d2:eb:8b:1a:ba:85:9b:24:ab:
86:9b:19:70:d2:0a:21:39:8b:26:2a:b1:bc:7b:c8:
59:35:ef:b2:9a:18:42:2b:83:3d:f5:1e:86:e5:d5:
6a:5e:71:4a:63:81:bb:3e:27:df:02:05:ca:d6:b4:
ea:0b:de:79:d2:d8:30:e5:ec:22:5d:ae:90:ed:50:
9a:8b:ac:75:83:94:a9:3e:80:db:8e:de:87:6d:96:
55:ef:f8:18:48:2c:99:27:be:bd:e1:a5:b4:95:9e:
16:fc:d6:12:c4:42:f2:2d:c1:61:d3:f3:8a:6a:fd:
89:09:9d:ea:ed:f7:fa:48:8e:c6:24:01:d4:17:2d:
45:bd:fe:ca:01:65:02:7f:3a:ab:ee:13:7b:5f:6e:
70:ed:43:81:1a:5a:cc:f1:a2:0e:81:28:b2:2a:c9:
97:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:17:8D:51:A7:7F:CF:C3:08:6C:35:F2:02:6A:EE:1D:8B:2B:ED:38
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/iReNUad_z8MIbDXyAmruHYsr7Tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:9381:9::/48
Signature Algorithm: sha256WithRSAEncryption
77:4c:03:b3:12:9e:2c:1b:57:65:28:91:95:80:11:9f:bf:57:
3e:a5:79:ef:d3:d8:64:b0:f7:81:f1:04:d5:66:5f:ad:00:71:
8c:b4:8e:6c:0d:08:81:32:2a:2f:6c:2e:79:7c:14:8d:d6:8b:
46:45:96:7c:ca:87:d9:c3:ac:77:17:93:0b:8d:68:22:2f:6d:
06:df:b0:43:cd:af:a7:b2:21:3c:84:d6:e5:93:be:1b:43:4c:
e3:30:69:c8:a9:5f:03:18:42:aa:ec:8e:c8:14:71:e8:18:5a:
7a:87:5a:02:cd:fd:bb:a0:a6:67:7b:6b:1c:9c:da:45:43:6d:
d0:15:c4:f1:d9:3d:a8:1b:75:18:5c:fb:30:b3:1e:e0:a9:de:
94:03:15:79:c0:c5:1e:5a:0b:95:d2:ed:55:eb:db:76:9c:0b:
51:79:99:dd:6a:2e:10:3b:f9:52:56:d1:3f:84:d7:c7:5a:e8:
8c:27:63:02:5a:f5:26:48:f2:02:e8:bf:c1:46:1c:4a:38:13:
50:08:c0:76:a4:89:ab:43:5e:0f:2f:6b:5a:ce:a2:2b:1c:5e:
0c:33:91:d3:e4:2d:72:f7:dc:0e:59:1e:03:97:a6:69:1c:7c:
09:a5:cc:8a:37:81:bf:21:3a:81:bd:41:01:2a:79:4f:7a:0c:
a2:cf:f8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:31:47 2025 by rpki-client