Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/iW4jUtG7M3vR2-jFtBNHAot1NRM.roa
File: iW4jUtG7M3vR2-jFtBNHAot1NRM.roa (raw, json)
Hash identifier: Jswk6MQzcR9/sq8RsWIzzKqrfUgP4qUKY0b1aM6D8zs=
Subject key identifier: 89:6E:23:52:D1:BB:33:7B:D1:DB:E8:C5:B4:13:47:02:8B:75:35:13
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 019857EA4A315A13CC8F4D1737AFBC912E95
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/iW4jUtG7M3vR2-jFtBNHAot1NRM.roa
Signing time: Tue 29 Jul 2025 20:40:28 +0000
ROA not before: Tue 29 Jul 2025 20:40:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210405
IP address blocks: 92.114.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft
rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:ea:4a:31:5a:13:cc:8f:4d:17:37:af:bc:91:2e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Jul 29 20:40:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=896e2352d1bb337bd1dbe8c5b41347028b753513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:87:67:1f:ca:58:fd:67:13:3e:ef:96:77:09:
f1:b7:27:b5:1a:9d:6b:cd:61:4d:2f:f5:68:c4:77:
93:e1:b4:10:48:1b:3d:38:e8:94:8d:64:f6:ff:27:
12:71:60:8f:86:b4:5b:e3:73:63:90:81:9d:d3:90:
7a:a0:7b:e8:57:69:c1:3c:ba:74:34:32:42:f7:fd:
cf:26:20:4f:e4:5b:3c:df:f2:8c:47:01:47:9f:99:
1b:c6:83:db:14:dc:18:69:53:da:aa:ca:b3:ba:fb:
03:69:19:c9:6a:25:b2:dc:5a:50:2a:97:cf:1a:c0:
25:a8:e1:cb:bb:73:16:5e:04:4a:62:a0:0d:58:64:
8e:8f:99:76:e4:ad:4c:f1:e8:c0:0a:e3:78:0b:df:
ae:e9:67:c6:51:01:95:56:00:b8:94:9f:39:d0:7b:
d7:59:41:23:95:38:5d:9d:95:32:2f:54:d6:86:ce:
7a:1e:3d:47:7b:f8:78:48:b5:c4:c7:12:ed:e6:14:
64:f0:d1:eb:94:3f:f5:7d:29:ba:6c:61:08:d1:e0:
d5:36:18:f5:f0:c7:b7:91:c8:cc:16:6f:c5:87:83:
14:23:83:a7:ed:49:53:2d:a1:b7:65:24:2c:6a:a4:
1c:0c:db:9f:a5:83:c3:82:67:0d:1f:8c:43:88:8b:
89:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6E:23:52:D1:BB:33:7B:D1:DB:E8:C5:B4:13:47:02:8B:75:35:13
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/iW4jUtG7M3vR2-jFtBNHAot1NRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.24.0/24
Signature Algorithm: sha256WithRSAEncryption
56:6e:3a:37:c8:0a:df:3a:55:a6:17:d6:69:ce:72:97:7e:57:
a6:15:69:ad:a6:6a:c1:15:23:c9:13:56:99:ce:1a:0a:98:a0:
6f:7a:ee:e3:74:5e:6f:b7:e5:0c:05:ac:5f:a8:18:57:98:6d:
3a:66:9a:97:cb:5c:02:b6:83:48:e4:c0:58:ea:f3:dd:25:89:
0f:e4:10:11:0f:8d:68:ab:ed:5a:40:5b:88:7b:ca:ae:b1:e9:
85:fc:b8:db:89:40:d0:b4:b6:11:62:6f:54:c5:b0:ca:03:f8:
39:ba:d1:50:ac:1d:c3:11:44:43:bb:cf:96:6a:81:e7:fd:4d:
73:bd:4f:74:a5:43:e6:bf:ee:f2:01:48:2a:db:67:97:e9:33:
94:b6:1c:0e:65:cd:7c:a6:dc:04:e8:7a:cb:78:89:03:46:e2:
99:3f:0a:99:de:cc:f7:c1:9a:90:c4:d3:73:09:ef:41:c6:e7:
a1:7e:e4:3b:c6:1d:7a:a1:a7:43:3f:28:6a:39:7c:e9:74:d9:
0f:6a:7e:ef:33:42:c9:d8:a4:11:35:a3:89:57:ab:27:a5:65:
15:12:24:cd:8b:95:f1:73:dd:a4:d5:04:05:9f:98:cc:bf:ff:
b5:f6:d6:20:52:ae:d2:4d:ab:cb:b9:7f:c4:98:ac:e9:dc:42:
fc:44:c3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 13:10:08 2025 by rpki-client