Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/dysizPNVs8eN-51l5LCD12pruZk.roa
File: dysizPNVs8eN-51l5LCD12pruZk.roa (raw, json)
Hash identifier: KOVK2fgA1lQXwbuGvYMoYHe9FafK6A5xP11ZFygtSAs=
Subject key identifier: 77:2B:22:CC:F3:55:B3:C7:8D:FB:9D:65:E4:B0:83:D7:6A:6B:B9:99
Certificate issuer: /CN=4e7856d295580936916a553fb9bfb59f3a176804
Certificate serial: 01990F83B67C137D2EB0BF23D6DC849A5C19
Authority key identifier: 4E:78:56:D2:95:58:09:36:91:6A:55:3F:B9:BF:B5:9F:3A:17:68:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnhW0pVYCTaRalU_ub-1nzoXaAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/dysizPNVs8eN-51l5LCD12pruZk.roa
Signing time: Wed 03 Sep 2025 12:18:34 +0000
ROA not before: Wed 03 Sep 2025 12:18:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212320
IP address blocks: 89.39.128.0/21 maxlen: 21
89.39.128.0/22 maxlen: 22
89.39.128.0/23 maxlen: 23
2a14:9e80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnhW0pVYCTaRalU_ub-1nzoXaAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0f:83:b6:7c:13:7d:2e:b0:bf:23:d6:dc:84:9a:5c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7856d295580936916a553fb9bfb59f3a176804
Validity
Not Before: Sep 3 12:18:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=772b22ccf355b3c78dfb9d65e4b083d76a6bb999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:90:3a:93:79:b6:e4:c1:35:79:f4:a5:29:e5:
60:34:2c:a8:93:b6:ab:2f:1d:3e:9f:22:0d:23:c4:
44:b1:4a:5b:85:a5:bd:96:30:f2:36:a2:96:46:9b:
7b:2d:16:4f:74:0f:70:a4:d3:a3:37:4f:aa:c8:2a:
6b:95:4c:21:25:a5:19:65:e3:48:ad:e9:e8:5c:09:
86:fe:a4:e9:97:65:10:96:d9:c1:64:fa:7d:35:03:
90:00:aa:21:5a:d6:25:35:32:28:c7:48:ba:19:f9:
cc:5e:b5:f7:5b:06:7c:f2:73:59:d2:ab:c0:33:70:
ef:fa:09:56:19:7f:de:5e:7c:8f:78:0a:13:45:10:
c2:97:0e:34:02:38:34:ae:ed:65:f9:18:92:98:e7:
b6:f4:9d:8e:5e:72:92:33:24:f9:1a:9d:3e:94:74:
ec:6b:85:4d:d4:8c:e4:50:de:6c:00:3a:54:54:a9:
aa:bb:69:f3:d3:ef:e1:2f:d4:3b:08:34:52:37:10:
59:0f:8a:96:e9:75:fa:e4:0b:90:80:f3:ef:e2:13:
db:bd:05:8f:3e:6c:ba:2b:8d:b8:d2:c8:e5:fb:5a:
93:cb:fc:68:62:c6:2c:1c:1c:17:d2:53:30:69:f1:
e7:70:b1:40:bd:eb:b0:98:f6:7d:7e:86:47:8d:3d:
50:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2B:22:CC:F3:55:B3:C7:8D:FB:9D:65:E4:B0:83:D7:6A:6B:B9:99
X509v3 Authority Key Identifier:
keyid:4E:78:56:D2:95:58:09:36:91:6A:55:3F:B9:BF:B5:9F:3A:17:68:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnhW0pVYCTaRalU_ub-1nzoXaAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/dysizPNVs8eN-51l5LCD12pruZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7f9be1-b72b-4585-a2bd-e4da8ac2b3db/1/TnhW0pVYCTaRalU_ub-1nzoXaAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.128.0/21
IPv6:
2a14:9e80::/29
Signature Algorithm: sha256WithRSAEncryption
22:ad:b9:62:2f:e2:3b:cc:99:75:d6:5b:4b:26:48:1f:75:c8:
9b:32:bd:ad:3c:28:42:b1:f5:1d:bb:0e:fb:21:81:e5:40:2f:
0c:d1:d5:13:cc:57:f2:38:e2:fa:7f:cf:0f:e2:a3:5c:da:a0:
78:ee:6e:7a:13:27:e1:0a:34:cf:0d:66:b7:0e:e7:f1:f0:e0:
5a:d3:b9:a4:86:77:00:92:f0:e6:1f:56:91:c9:b6:34:a2:37:
44:b6:91:de:ae:03:b1:7a:d9:dc:0e:bf:45:b1:25:7b:56:76:
70:ec:3d:b8:47:30:4a:8e:36:fe:37:7b:66:f9:38:17:0f:fa:
51:ea:b7:77:c7:e4:05:6f:1f:23:2f:6f:1d:8c:2f:0b:4b:88:
10:73:a9:4b:97:71:1c:61:19:20:51:e4:aa:42:ae:3b:7c:bf:
b8:88:18:e2:a1:2d:61:f5:e2:1a:d0:00:c7:45:86:bb:2e:e0:
a7:0d:1e:ac:41:13:30:08:5b:f1:4e:9e:04:41:af:78:ff:e6:
60:1a:10:6a:5d:d0:06:5e:bf:0b:6a:93:c6:b3:ec:42:9f:1e:
3a:58:3f:e6:6f:f5:86:f8:fc:3b:94:8e:f0:79:cc:54:53:8b:
3a:d3:ef:06:f0:39:0c:9c:46:5a:b4:a5:28:34:c3:98:65:2a:
aa:5d:9d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:27 2025 by rpki-client