Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/SUo0DyFvECncRbWyydY2boWfDw0.roa
File: SUo0DyFvECncRbWyydY2boWfDw0.roa (raw, json)
Hash identifier: KZ9eDlHCtBK84KWAdJ7YZAtQ8L4glAEpb/0BP5qJVMg=
Subject key identifier: 49:4A:34:0F:21:6F:10:29:DC:45:B5:B2:C9:D6:36:6E:85:9F:0F:0D
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 019A3992088B6F35384CD6CAB3DFE5AD3D11
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/SUo0DyFvECncRbWyydY2boWfDw0.roa
Signing time: Fri 31 Oct 2025 09:21:03 +0000
ROA not before: Fri 31 Oct 2025 09:21:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 89.117.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:39:92:08:8b:6f:35:38:4c:d6:ca:b3:df:e5:ad:3d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Oct 31 09:21:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=494a340f216f1029dc45b5b2c9d6366e859f0f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:15:20:ec:b8:9e:f3:ce:38:08:b8:a7:c3:8b:
37:6b:b7:40:8b:c6:e3:d4:d8:62:86:dd:5b:1a:1a:
21:3f:23:2f:1f:52:41:a5:e6:1e:af:50:3a:de:f0:
59:1f:62:c4:d9:25:cd:01:b4:bd:3e:0f:79:04:15:
41:ba:79:5f:05:b0:e6:10:ab:8d:fc:66:03:cf:21:
0e:5e:9f:d9:2d:55:51:c2:da:e0:bb:c2:53:01:fd:
17:d1:34:10:39:a5:f6:79:58:95:7d:7b:32:18:f9:
57:4d:12:36:db:05:c9:cd:35:42:f3:5b:67:15:1e:
0e:31:68:f7:71:d2:3f:4e:a1:8a:b7:59:e8:22:6a:
ac:99:83:ad:f6:03:35:08:5d:42:88:cf:e9:63:d1:
f1:e2:f6:f3:2d:b2:53:a4:d2:06:94:96:db:61:32:
72:ec:10:27:ab:5b:dc:06:91:07:47:cc:fc:13:c4:
68:ba:1b:94:35:42:26:d7:b4:8b:17:ee:0d:76:25:
1b:26:55:15:5a:0f:c9:7b:0f:d5:41:84:9c:c1:ad:
61:cd:ff:4b:80:a6:1a:3c:42:7c:73:f8:16:ad:0d:
64:59:f4:78:b8:84:a7:35:00:5f:e1:41:99:f8:57:
bf:a0:28:9e:3b:41:6f:f8:2b:32:52:cd:7c:af:0f:
cd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4A:34:0F:21:6F:10:29:DC:45:B5:B2:C9:D6:36:6E:85:9F:0F:0D
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/SUo0DyFvECncRbWyydY2boWfDw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.117.208.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:af:a7:1c:a0:03:fd:43:4e:ff:e1:d8:6e:0c:44:9f:cf:6e:
ee:64:9b:20:fd:07:f0:13:32:56:f7:1f:05:f1:c6:cb:ab:77:
dd:a7:b5:e0:5c:dc:c1:4c:ab:36:92:08:d9:89:be:59:2c:51:
f2:53:26:e7:cd:0a:70:1d:91:a7:9b:02:5b:79:81:40:80:85:
ce:68:9f:46:c4:40:d0:85:82:06:87:62:db:c0:b6:1f:a8:73:
59:d7:fa:36:11:06:61:55:0e:38:7b:e4:13:81:7e:22:c5:0f:
7b:1c:a5:7c:49:1d:80:30:63:3f:1a:e5:64:b4:fd:53:55:ec:
7c:b4:d0:3c:99:ad:1d:93:b9:a3:12:70:ed:86:2a:e4:71:c3:
1b:69:dd:83:33:27:d2:20:7d:95:cb:f3:8b:92:d0:42:a7:18:
c1:3c:85:15:78:cc:e1:71:a4:ce:80:d8:40:4f:77:36:ca:56:
ee:de:c4:e2:ac:f7:b3:96:09:ec:5d:53:ad:e7:21:66:85:8b:
23:7a:ee:39:ca:b0:32:c5:47:12:30:be:2b:e5:52:19:33:f7:
d1:2c:05:52:18:ed:71:ee:ac:f7:2b:4a:dc:6d:dd:b8:6a:80:
07:5b:28:fd:87:38:27:e1:32:95:3f:4f:b9:75:b7:96:a4:9d:
02:11:c6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:32:04 2025 by rpki-client