Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/j4tHnGrI37J-Uw5Zk8yEN1rxtKo.roa
File: j4tHnGrI37J-Uw5Zk8yEN1rxtKo.roa (raw, json)
Hash identifier: esedRiMXohejdNKWmiW5x1YVWXeCqRdEj9LKCp9ppe4=
Subject key identifier: 8F:8B:47:9C:6A:C8:DF:B2:7E:53:0E:59:93:CC:84:37:5A:F1:B4:AA
Certificate issuer: /CN=ea846006cf8b9e388f31451358092502cecc1136
Certificate serial: 019755AF8DBFE9C9417A0B485B279EB2DD64
Authority key identifier: EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/j4tHnGrI37J-Uw5Zk8yEN1rxtKo.roa
Signing time: Mon 09 Jun 2025 17:14:17 +0000
ROA not before: Mon 09 Jun 2025 17:14:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207252
IP address blocks: 91.197.55.0/24 maxlen: 24
2a06:8ac0::/46 maxlen: 46
2a06:8ac0:4::/46 maxlen: 46
2a06:8ac0:8::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:af:8d:bf:e9:c9:41:7a:0b:48:5b:27:9e:b2:dd:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea846006cf8b9e388f31451358092502cecc1136
Validity
Not Before: Jun 9 17:14:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f8b479c6ac8dfb27e530e5993cc84375af1b4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:44:3f:af:60:eb:0d:ae:1b:88:ce:0d:f4:05:
aa:c8:01:69:67:1f:84:c9:f6:b8:83:eb:d5:64:fc:
48:97:92:6b:14:0f:25:52:fd:e4:1e:d0:70:38:53:
48:0f:2d:3e:38:21:23:ae:fe:d0:e7:98:1a:a0:4f:
15:4d:dc:98:83:8c:26:4d:e6:37:97:a3:25:82:50:
1a:d6:93:0b:d7:57:57:4d:4a:5c:b9:0f:01:3e:b9:
5f:0f:8c:f9:b8:bd:68:71:16:96:07:29:c8:72:22:
9b:a0:70:1b:44:3a:ef:98:d9:68:7a:24:f9:e4:02:
c0:bc:ad:67:8a:c7:1e:6f:59:0d:88:d6:6e:39:1b:
b6:9e:96:8b:2e:98:2f:a6:f4:2c:7f:55:50:32:74:
80:d0:07:2b:16:da:bc:76:8b:33:79:0a:62:ab:88:
f4:42:4f:b3:ce:6e:26:c2:3c:44:87:e4:5a:42:63:
2b:7f:6b:1d:a2:75:a0:80:58:b1:40:a9:ea:fe:f6:
4e:15:ef:fc:06:20:8b:66:0e:1f:3a:d2:93:a1:e1:
8c:d4:34:b1:8e:74:6c:28:4f:50:48:a5:99:30:ec:
46:a7:86:7a:11:dc:11:7b:fe:1c:a2:17:c5:59:47:
3b:36:a6:55:57:61:be:e1:6d:33:a7:98:9e:6d:f7:
f5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8B:47:9C:6A:C8:DF:B2:7E:53:0E:59:93:CC:84:37:5A:F1:B4:AA
X509v3 Authority Key Identifier:
keyid:EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/j4tHnGrI37J-Uw5Zk8yEN1rxtKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.55.0/24
IPv6:
2a06:8ac0::/44
Signature Algorithm: sha256WithRSAEncryption
ab:8c:08:3d:5e:66:0a:3d:7f:20:a4:81:23:27:14:97:27:4e:
ec:21:c5:23:72:61:6e:5d:ba:13:34:4c:28:66:75:bb:e2:0d:
53:94:43:57:81:8d:7a:66:87:8f:71:f9:4b:a9:42:24:3e:69:
98:8e:5a:a0:b2:85:49:62:07:e3:ef:31:93:11:75:8d:d1:c0:
7e:e6:2f:9c:b3:02:7f:ca:22:21:ab:9e:df:a6:29:2f:de:5a:
b5:a7:72:97:c3:22:77:dc:20:52:97:69:98:51:2d:32:8f:b9:
16:15:09:de:86:0f:bd:c6:21:a0:df:c3:9e:e3:7a:88:5a:18:
00:b2:b1:49:a4:c4:18:47:22:c6:d0:96:23:6a:0a:be:39:54:
67:dd:5a:c6:ba:fa:9d:c5:ac:1d:0f:9a:f9:49:b2:cb:5d:12:
10:fa:11:ce:96:4e:98:fc:fc:c3:c9:1f:99:0e:2f:d8:75:e5:
f7:57:91:dc:46:8c:d6:ef:8e:59:4a:f2:22:c4:58:e9:91:50:
68:5c:4c:17:d2:a1:a8:f5:af:1e:f4:c1:1b:2c:63:39:12:c9:
44:8b:86:1b:b7:37:0b:88:9a:53:ce:ce:8d:ad:30:90:ce:d2:
14:fd:65:c5:92:9f:86:63:1d:ec:30:a0:c1:ee:6d:ee:31:86:
58:fb:cc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:07:38 2025 by rpki-client