Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/dOe2C3PomUnQ6xc35HptdqNgMBQ.roa
File: dOe2C3PomUnQ6xc35HptdqNgMBQ.roa (raw, json)
Hash identifier: Xuv+aCcr1f8IKITCeJK5u15I1LDGKs+9hvrLxQLOxWs=
Subject key identifier: 74:E7:B6:0B:73:E8:99:49:D0:EB:17:37:E4:7A:6D:76:A3:60:30:14
Certificate issuer: /CN=5e8cb6da358a8d2d270c305f8b61f3c990d5766e
Certificate serial: 0199E6DA943768352544750E002C386E2A81
Authority key identifier: 5E:8C:B6:DA:35:8A:8D:2D:27:0C:30:5F:8B:61:F3:C9:90:D5:76:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xoy22jWKjS0nDDBfi2HzyZDVdm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/dOe2C3PomUnQ6xc35HptdqNgMBQ.roa
Signing time: Wed 15 Oct 2025 07:51:48 +0000
ROA not before: Wed 15 Oct 2025 07:51:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28876
IP address blocks: 81.89.160.0/20 maxlen: 21
217.24.48.0/20 maxlen: 20
217.24.48.0/21 maxlen: 21
217.24.56.0/21 maxlen: 21
2a00:9d80::/32 maxlen: 33
2a00:9d81::/32 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xoy22jWKjS0nDDBfi2HzyZDVdm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e6:da:94:37:68:35:25:44:75:0e:00:2c:38:6e:2a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8cb6da358a8d2d270c305f8b61f3c990d5766e
Validity
Not Before: Oct 15 07:51:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74e7b60b73e89949d0eb1737e47a6d76a3603014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d5:84:04:30:11:ff:b9:d6:77:23:f2:44:43:
10:7b:89:25:6f:6d:ba:0c:28:60:69:d7:1c:84:1b:
8b:87:18:25:16:8e:81:15:11:46:06:1d:9a:74:05:
90:b6:fc:04:28:34:dc:24:b7:9a:ab:05:80:0e:26:
00:01:77:58:3d:0a:a7:2c:2c:9c:fb:11:85:af:0e:
78:39:a2:d5:54:65:b8:ec:56:cf:bd:db:17:a7:11:
90:6d:fa:07:01:56:a8:ff:cc:5d:56:7e:13:04:2f:
a4:63:78:7f:a6:e7:02:99:37:ee:2f:31:f4:52:3f:
89:50:d0:5f:8d:93:66:ec:09:28:e7:53:42:bf:76:
1c:9e:21:6d:bb:a3:f2:b5:bc:de:11:2f:31:2b:31:
25:d2:9c:da:a4:b3:ca:58:be:74:83:b4:f1:e2:36:
cd:5d:15:15:67:25:ff:d2:72:f0:ee:20:7d:1b:88:
31:c7:a5:c8:75:bf:0b:7a:a6:7e:8d:9b:a3:19:94:
18:4a:4c:9f:ec:44:cb:e5:b7:e2:5b:0b:dd:70:0d:
3f:51:f7:f8:ca:16:54:27:7f:77:eb:33:95:0e:93:
6f:db:87:21:fb:7c:f1:7b:b5:aa:30:2a:ee:64:a3:
08:2c:bb:f8:af:41:ae:6a:bc:1a:df:61:14:ab:53:
a2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E7:B6:0B:73:E8:99:49:D0:EB:17:37:E4:7A:6D:76:A3:60:30:14
X509v3 Authority Key Identifier:
keyid:5E:8C:B6:DA:35:8A:8D:2D:27:0C:30:5F:8B:61:F3:C9:90:D5:76:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xoy22jWKjS0nDDBfi2HzyZDVdm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/dOe2C3PomUnQ6xc35HptdqNgMBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.89.160.0/20
217.24.48.0/20
IPv6:
2a00:9d80::/31
Signature Algorithm: sha256WithRSAEncryption
67:b6:24:76:a0:f1:15:89:a0:d9:2b:a5:70:7b:a8:62:71:bb:
11:66:55:9c:05:a1:11:70:9e:96:53:c1:d8:8b:d3:4d:74:40:
a2:3b:26:b7:ab:ec:bd:3d:48:48:43:82:0a:06:18:97:b2:36:
46:30:5f:75:40:45:8b:d9:53:99:8c:0b:db:86:22:08:01:02:
fc:ce:db:75:af:53:92:97:1e:4f:73:b9:d7:e5:2d:41:8c:40:
6e:cc:3b:69:16:73:37:da:8a:57:10:33:f2:be:30:76:ca:fe:
ca:c7:25:f1:19:1f:d1:60:70:ab:29:d3:e0:4b:5c:e7:0e:7f:
17:bd:54:29:ee:34:26:bb:e4:f2:63:a3:f2:0f:7d:0f:1f:92:
32:84:9b:a0:74:41:74:f5:89:04:0a:8d:4c:6b:76:43:69:bf:
30:45:75:26:24:5e:18:48:09:6f:c2:c8:cd:25:42:98:53:65:
b7:2d:55:39:e4:0f:1b:63:ea:e0:14:67:ce:bd:ed:11:fd:c5:
6f:da:c3:2a:ef:6e:8b:32:8a:d7:46:90:34:e1:c0:eb:74:ea:
18:21:f2:f4:55:e7:9b:60:fe:4e:e7:82:3c:28:42:4f:01:a9:
97:aa:a6:5b:c0:08:0f:aa:10:11:51:5c:3e:8f:b7:ac:99:a3:
88:3e:28:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:26:48 2025 by rpki-client