Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/uI0SYL6Ucr6O-6UJ0QsOWF9Vpk8.roa
File: uI0SYL6Ucr6O-6UJ0QsOWF9Vpk8.roa (raw, json)
Hash identifier: 4VECbpzbGoNQ19RBOhlYc8jf/z8mkk9KuBT1AAY+TX8=
Subject key identifier: B8:8D:12:60:BE:94:72:BE:8E:FB:A5:09:D1:0B:0E:58:5F:55:A6:4F
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01975B58D57DED31BA7A0C123767C53FE90C
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/uI0SYL6Ucr6O-6UJ0QsOWF9Vpk8.roa
Signing time: Tue 10 Jun 2025 19:37:17 +0000
ROA not before: Tue 10 Jun 2025 19:37:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 89.21.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:58:d5:7d:ed:31:ba:7a:0c:12:37:67:c5:3f:e9:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jun 10 19:37:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b88d1260be9472be8efba509d10b0e585f55a64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4e:63:0a:46:b6:f3:bd:30:5c:71:3c:a3:42:
10:14:76:3b:78:90:ea:40:75:43:2d:b6:e5:20:58:
bf:13:77:4e:1f:35:2c:aa:28:51:6e:d3:84:ad:07:
71:c4:37:b3:7f:eb:af:71:0f:a1:b2:fd:03:c2:1e:
c2:14:b1:b3:57:f5:5e:29:56:73:6a:c6:8e:85:2b:
be:13:da:a9:35:7c:3a:24:84:c7:51:34:72:12:8c:
0c:fa:d3:26:9d:b3:fb:5a:28:ff:cc:a7:7f:01:24:
09:5b:e5:97:0d:6e:4a:7c:52:9b:ee:ef:8e:84:f8:
b3:1a:41:32:3e:5d:92:50:9c:cf:53:d3:1d:06:66:
50:16:a5:8d:cc:19:f9:5f:29:59:0a:81:98:93:c8:
ec:36:9b:8a:4c:e2:b7:c0:3c:ff:dc:b8:d1:e3:02:
4c:df:97:ab:7f:28:38:36:70:74:e2:32:b1:f4:8f:
e4:97:ee:0a:2a:b5:13:a2:64:7b:9a:0e:e5:b2:27:
e8:81:e2:db:03:a7:bb:65:37:3d:08:06:36:0b:cc:
38:0f:c5:29:cb:9b:24:91:c9:1c:5c:bb:b5:6a:bb:
4d:aa:f3:72:ee:40:2f:3b:a6:bd:58:3c:e3:4b:01:
c2:a0:86:a1:30:6b:66:63:64:90:56:20:75:d3:0e:
d9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8D:12:60:BE:94:72:BE:8E:FB:A5:09:D1:0B:0E:58:5F:55:A6:4F
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/uI0SYL6Ucr6O-6UJ0QsOWF9Vpk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.21.84.0/24
Signature Algorithm: sha256WithRSAEncryption
03:5f:f0:04:8d:51:2d:ab:9a:a8:f2:e9:26:08:62:f5:47:78:
d8:5b:e0:6e:e5:52:5b:4f:93:e9:2b:98:7f:97:cb:e2:75:6c:
29:6e:69:64:49:7b:f6:49:c7:f3:f5:76:70:d4:32:82:ce:e3:
1f:fa:84:f9:26:d7:0f:5d:dc:6f:8c:99:66:f0:70:55:e9:ae:
11:17:46:7a:8d:fc:f4:e1:79:26:e0:94:e0:db:91:9a:40:f3:
90:ff:70:6c:30:aa:6b:82:d7:d9:52:11:a4:85:e9:c1:ad:66:
cf:3f:58:8c:f9:4c:8c:1c:21:5d:ef:74:b7:65:29:76:b4:9c:
8a:fc:a7:fd:af:50:45:cd:72:26:03:c5:97:dc:7d:82:9b:83:
37:6d:52:2c:1f:69:d1:ef:19:54:21:b8:26:2e:16:61:75:14:
cc:76:09:01:ca:12:78:db:ee:73:9b:0c:2b:08:61:24:3a:27:
67:f9:e8:16:0e:e2:a3:6e:d3:73:2d:47:cc:df:16:3a:a9:2d:
e7:81:0e:fb:b8:2d:bf:97:10:0e:cb:96:d2:be:f4:c1:ce:bc:
97:17:35:5f:f6:04:76:bb:25:be:7c:58:8f:60:bc:f0:55:56:
12:ad:9f:56:5e:37:4f:59:02:1a:96:e9:b7:67:4d:7b:d8:a8:
1e:d7:0f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:46:54 2025 by rpki-client