Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8ZkV7SvlomaDYgJuvMVZqzSsnkw.roa
File: 8ZkV7SvlomaDYgJuvMVZqzSsnkw.roa (raw, json)
Hash identifier: 32GaJA4rP9c7nwJ1TvAAVelH5HOEYG0WEntHDi8f6CE=
Subject key identifier: F1:99:15:ED:2B:E5:A2:66:83:62:02:6E:BC:C5:59:AB:34:AC:9E:4C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0198506752E8BD8D764ED1BB178E0D5A7C4C
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8ZkV7SvlomaDYgJuvMVZqzSsnkw.roa
Signing time: Mon 28 Jul 2025 09:40:05 +0000
ROA not before: Mon 28 Jul 2025 09:40:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207530
IP address blocks: 89.144.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:50:67:52:e8:bd:8d:76:4e:d1:bb:17:8e:0d:5a:7c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 28 09:40:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f19915ed2be5a2668362026ebcc559ab34ac9e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5f:c9:8e:1a:0e:44:97:07:fc:47:b7:86:42:
4a:0b:d4:66:e7:33:0f:a8:e5:94:24:b4:3e:ce:0c:
91:18:f9:a6:50:97:9d:12:df:f0:58:e1:b7:21:19:
aa:00:1d:89:b0:7d:a8:b4:88:6b:40:37:c9:33:52:
42:9c:6d:4a:06:c7:32:65:c0:58:0c:b9:91:9c:e6:
77:92:be:32:bd:f0:84:a7:cd:45:21:af:f4:f4:ef:
d9:7d:f8:02:6d:64:4d:5f:70:76:cd:73:16:e2:6b:
0d:f4:6b:76:d7:ad:15:71:a7:a1:30:4f:98:b4:e2:
68:b0:27:b5:66:49:6a:5b:34:68:1c:92:88:fc:8c:
82:b7:6a:99:22:c8:56:24:6a:cd:c8:4b:86:4e:d6:
6d:44:67:1f:5a:39:ec:48:03:3a:e3:ea:9a:26:a1:
bb:8a:f5:a0:7b:4f:1f:ad:21:15:93:9d:95:ab:45:
24:86:85:87:a1:d0:e4:03:e9:b1:f4:6e:6a:4c:fb:
31:74:9a:80:05:ca:0d:8b:9e:30:e8:8a:53:d0:81:
a9:af:a0:38:22:7a:53:0e:1b:99:54:ae:ae:cc:1e:
66:55:f0:4a:d1:13:c8:41:14:12:6e:2c:df:0d:02:
98:69:2d:31:a6:9d:e9:78:1b:6d:52:91:2b:a4:c5:
99:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:99:15:ED:2B:E5:A2:66:83:62:02:6E:BC:C5:59:AB:34:AC:9E:4C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8ZkV7SvlomaDYgJuvMVZqzSsnkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.30.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:ea:80:ba:89:37:b3:9b:07:d1:f4:26:34:0d:dc:f3:dc:b9:
92:ac:15:8e:bb:39:58:fe:e0:2e:01:61:1e:7e:b6:97:8f:15:
64:75:de:9c:5a:3b:f6:13:58:1e:9d:45:5b:9a:b0:fa:1f:32:
b1:ee:4c:84:77:13:84:49:11:2a:b1:9e:24:4a:04:e2:7f:aa:
07:8d:ca:cc:c6:51:05:af:38:b4:10:6a:77:1e:f3:f1:9e:e1:
fa:70:0b:5e:74:64:a8:f6:b4:d6:cd:e3:4a:db:80:ee:36:50:
f3:53:23:b8:e3:ca:f0:81:dc:64:1f:ea:96:0e:ea:04:58:02:
17:8a:4d:c8:93:fb:24:5e:4a:4d:f2:85:47:3a:3f:ee:4c:0d:
28:7f:1d:10:f8:c5:49:3b:d2:ab:98:7e:ae:1e:18:fe:7a:f6:
aa:2c:e5:45:5b:a6:5d:00:f6:74:c5:8b:b5:c2:ae:49:b8:85:
fe:93:5e:1e:fb:10:a3:74:5e:12:b5:d8:25:b4:b9:23:58:52:
d6:f5:82:0c:0d:7a:e7:2a:fc:56:aa:53:e0:a5:e0:f9:a4:6a:
8c:84:62:a2:46:b1:e9:90:0f:38:e3:12:28:6f:40:4f:d7:89:
50:41:8f:17:6b:c6:ce:16:80:0c:4b:47:1a:48:19:e9:5f:c2:
ea:50:d7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:53:23 2025 by rpki-client