Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/H94mgXcbmEPiObELGoT_irqbFZA.roa
File: H94mgXcbmEPiObELGoT_irqbFZA.roa (raw, json)
Hash identifier: zafi3kAgrBwpb+xZqeS8u0za5f6rLKTWup2Rk4ukWyE=
Subject key identifier: 1F:DE:26:81:77:1B:98:43:E2:39:B1:0B:1A:84:FF:8A:BA:9B:15:90
Certificate issuer: /CN=b53005619688efbaffd06e108a43bdf20643e0d6
Certificate serial: 01987AA6CEE922981E369891A0B345CC7265
Authority key identifier: B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/H94mgXcbmEPiObELGoT_irqbFZA.roa
Signing time: Tue 05 Aug 2025 14:33:28 +0000
ROA not before: Tue 05 Aug 2025 14:33:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 89.186.51.0/24 maxlen: 24
89.186.52.0/24 maxlen: 24
89.186.53.0/24 maxlen: 24
89.186.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:a6:ce:e9:22:98:1e:36:98:91:a0:b3:45:cc:72:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53005619688efbaffd06e108a43bdf20643e0d6
Validity
Not Before: Aug 5 14:33:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fde2681771b9843e239b10b1a84ff8aba9b1590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f9:8b:cc:d7:1a:74:7b:52:73:47:5a:3f:01:
e2:ed:87:cc:0a:12:95:96:0a:f1:fa:f7:b3:92:dc:
39:ac:fe:6b:9f:69:87:fa:7d:6c:c6:76:34:61:38:
31:65:57:c6:3a:ed:bc:2e:f6:db:74:5f:bc:4b:02:
a1:51:6a:f3:21:1d:e4:12:e6:74:8e:e2:60:c2:e6:
b2:45:31:59:94:40:6d:82:fe:60:7d:39:87:70:6d:
7e:e1:4d:da:b9:02:cb:b6:ea:73:6d:16:8a:df:9f:
e6:98:ef:3e:bc:3d:fb:9a:0c:d1:30:69:05:7c:20:
2c:64:10:04:53:04:6a:89:7f:a5:c0:ae:e0:59:e1:
03:6b:e1:42:80:0e:ea:2b:37:e1:69:80:6d:ae:2b:
a1:27:f7:d3:68:bf:63:58:ce:bb:65:48:96:c0:c4:
98:f7:52:f1:95:4d:12:c2:98:b9:97:56:e2:69:cc:
f9:b4:60:2c:21:db:4a:87:14:bf:3b:cd:3d:51:15:
0b:08:74:9a:b2:7d:ce:1b:a1:c8:82:5c:e2:dc:44:
59:03:5b:62:08:e5:22:2b:57:29:bb:e0:40:5b:f9:
87:17:5d:70:f9:cd:5a:62:18:48:e4:4d:b6:8c:53:
cb:34:96:bd:fc:a5:c4:bd:d4:f0:c2:cf:07:95:5e:
c7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DE:26:81:77:1B:98:43:E2:39:B1:0B:1A:84:FF:8A:BA:9B:15:90
X509v3 Authority Key Identifier:
keyid:B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/H94mgXcbmEPiObELGoT_irqbFZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.186.51.0-89.186.54.255
Signature Algorithm: sha256WithRSAEncryption
0b:e8:48:9c:dd:70:ea:86:7f:33:a1:1a:b9:23:23:db:f4:3f:
2f:4e:76:a2:17:20:49:0a:b2:cd:94:e7:36:7d:ae:81:49:7a:
f3:03:4c:fe:88:0c:eb:79:73:ac:3b:d1:a7:45:9a:ec:72:5f:
6b:fd:e3:98:ce:a2:d5:ef:96:7b:84:38:40:21:1a:ea:64:10:
57:17:92:17:bd:10:10:d5:79:7b:17:f7:22:07:3b:84:9f:78:
1d:60:bf:48:92:d6:b6:01:4c:6c:9e:54:cb:2d:c3:70:a8:42:
5c:0c:71:ab:2f:ff:cb:2e:be:e6:e4:c1:8f:89:12:76:65:59:
e3:6f:fc:43:7a:f5:26:fe:05:8c:68:ce:1d:ba:85:9d:7f:ab:
49:63:e6:57:7d:31:18:5b:58:a0:89:68:fa:74:cc:2c:68:6e:
59:b7:f9:dd:83:ce:ce:b4:58:71:4b:b3:70:c5:51:aa:02:37:
e0:8e:af:58:d0:e0:d3:c7:15:70:c3:5c:22:73:66:23:5b:e1:
ab:af:fd:c7:bf:34:b5:3b:e0:4b:8d:6b:87:df:ff:74:08:a3:
37:ca:a3:7a:a5:ba:a7:31:87:ff:34:b2:32:10:32:97:6a:4e:
c6:30:ac:59:1f:72:1e:e2:79:a9:31:dc:d6:1b:d1:c5:dd:6d:
a8:82:89:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:33:00 2025 by rpki-client