Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/t1plQwURFzszQcEw28zUzw3uhRM.roa
File: t1plQwURFzszQcEw28zUzw3uhRM.roa (raw, json)
Hash identifier: t+3U07jmD+MBZ4XfVaX8Xy8T6t5OvltdH2DTao0/Zsw=
Subject key identifier: B7:5A:65:43:05:11:17:3B:33:41:C1:30:DB:CC:D4:CF:0D:EE:85:13
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019A33E16F5555B8B0A2DE40D54B07C00AEA
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/t1plQwURFzszQcEw28zUzw3uhRM.roa
Signing time: Thu 30 Oct 2025 06:50:03 +0000
ROA not before: Thu 30 Oct 2025 06:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59432
IP address blocks: 89.40.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:33:e1:6f:55:55:b8:b0:a2:de:40:d5:4b:07:c0:0a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Oct 30 06:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b75a65430511173b3341c130dbccd4cf0dee8513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fc:a1:9f:01:be:1d:57:33:89:e0:13:65:88:
20:5d:a0:0b:ec:b0:04:af:f2:2a:6d:31:e6:7b:c4:
99:75:c8:5d:d6:42:00:2c:35:48:3b:c8:f1:f9:3e:
f6:78:f3:15:1e:f5:01:3a:a9:3a:65:c0:ed:85:83:
3b:a7:93:c7:d4:fe:f5:30:c4:5d:df:5a:ee:05:8e:
1d:45:95:ef:9a:8b:93:68:97:17:cb:ca:64:07:23:
4e:c5:40:f3:b8:9b:6a:55:88:cf:30:1a:e4:74:5f:
0e:88:31:93:bd:10:91:58:18:f9:e0:30:37:7f:5d:
05:d8:8f:c5:59:4c:66:25:a9:46:52:af:29:a5:37:
e5:c8:84:88:84:7e:42:c4:12:40:a2:ef:85:2b:11:
3e:e8:5a:fd:78:4e:b4:c2:a3:6b:2a:1e:3f:f9:a5:
9e:a8:f4:37:77:ca:02:b4:1c:6a:b7:62:4a:f7:b2:
6f:c6:43:f2:87:33:10:44:7d:5d:49:84:b2:e0:78:
fb:4e:13:c7:c5:a4:70:b5:9d:b8:4c:58:13:7b:04:
05:9f:6e:db:da:23:c1:c1:74:3f:2e:7e:35:69:6e:
b2:e0:90:d2:33:df:6b:00:db:ea:48:aa:05:7c:6e:
bc:31:c1:e3:88:40:5a:e9:fd:a3:2a:5b:a7:a7:6f:
5d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5A:65:43:05:11:17:3B:33:41:C1:30:DB:CC:D4:CF:0D:EE:85:13
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/t1plQwURFzszQcEw28zUzw3uhRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.83.0/24
Signature Algorithm: sha256WithRSAEncryption
25:7e:51:0b:b8:ef:7b:81:d2:01:cd:19:9c:a6:98:16:f6:63:
14:3d:63:9e:5d:b5:a1:6f:62:f1:18:ae:76:d4:37:00:6a:cb:
88:6a:ef:0e:6d:db:44:8d:5b:27:6d:bc:39:a8:3f:d9:92:63:
d5:5f:b3:09:b8:8f:f0:10:9d:a4:f8:29:66:92:8b:54:dd:a8:
8f:a3:dc:21:4c:11:26:11:59:f0:40:d9:85:dd:b3:94:cb:2e:
26:4e:34:dc:c3:e0:2b:f3:ff:e9:86:be:5e:1e:61:a0:51:86:
90:17:f0:ac:80:87:d8:e9:f7:e3:0e:da:8b:cb:10:fe:c2:f0:
95:df:d1:89:d9:6b:c7:42:d7:d4:de:fd:2b:f4:76:eb:4d:3b:
e8:6c:12:38:60:69:9e:22:8b:1e:bd:32:85:70:22:2a:bc:07:
b0:d2:72:d2:4d:35:f1:b6:ac:82:c1:08:13:e3:f2:0b:e3:9c:
80:bf:ef:56:a4:f8:85:96:a8:be:e7:9b:2f:e5:a8:7c:b7:d5:
ae:e5:28:e4:f4:c0:fd:3d:6b:55:5c:4b:9c:32:cf:0e:8b:a9:
0e:ca:3f:53:f2:f2:54:b8:6c:5b:fb:10:e8:3b:f8:57:5a:94:
7d:96:bf:81:1b:0a:3b:a8:71:38:76:69:5d:01:42:9e:c5:11:
76:2b:fe:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:04:28 2025 by rpki-client