Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/To63YyOS4m4xGKG36WLK52zQE8c.roa
File: To63YyOS4m4xGKG36WLK52zQE8c.roa (raw, json)
Hash identifier: tp9xM1hLtDqI8FvsSwdqSoCI37g77m4oJd7PdWAciIs=
Subject key identifier: 4E:8E:B7:63:23:92:E2:6E:31:18:A1:B7:E9:62:CA:E7:6C:D0:13:C7
Certificate issuer: /CN=de9461c211bf3551c5507c930b4204c6ec43b322
Certificate serial: 01970F03786D384D11671DB2FBD89BCF2E48
Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/To63YyOS4m4xGKG36WLK52zQE8c.roa
Signing time: Mon 26 May 2025 23:52:55 +0000
ROA not before: Mon 26 May 2025 23:52:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 91.192.106.0/23 maxlen: 23
91.193.58.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0f:03:78:6d:38:4d:11:67:1d:b2:fb:d8:9b:cf:2e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322
Validity
Not Before: May 26 23:52:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e8eb7632392e26e3118a1b7e962cae76cd013c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:93:c9:a9:67:84:f5:01:85:3d:ff:27:c4:a0:
7a:12:2f:32:81:3e:f2:b0:10:08:d9:c9:96:92:22:
3a:1f:0a:7d:f7:d4:cf:a7:e1:e4:04:21:07:77:7e:
21:1e:48:83:b3:e4:d3:e9:a1:53:26:09:f4:d6:4b:
cc:58:eb:27:9a:d7:d1:dc:e6:68:31:16:6c:ff:5d:
54:fa:35:76:f4:45:80:80:db:fd:5f:b9:f5:4c:f1:
01:ac:af:76:4c:87:f1:19:4f:21:df:67:e9:e0:ef:
1a:a7:bf:16:7e:6e:43:3f:88:f4:dc:5f:3a:73:4a:
56:87:b7:53:57:3c:5e:b9:ea:a7:21:cf:72:72:9f:
20:88:56:cb:00:17:14:46:73:2b:20:47:01:5f:5d:
21:ee:05:b5:ae:0b:f4:ab:f9:fd:5b:4f:fd:40:73:
1b:11:54:db:d9:1e:6a:02:08:d8:0d:ac:81:07:a1:
94:c2:51:0e:7e:5d:b0:7b:bd:c8:02:14:6a:09:01:
0b:f0:ac:f1:c8:6f:29:70:24:b7:93:2d:0d:ab:be:
8e:cf:b6:61:50:b0:0a:b3:5b:4a:83:6f:0e:cd:31:
1f:f0:41:70:0c:0a:b6:c6:e8:dd:f9:04:f0:7b:c8:
37:12:bb:23:48:91:79:db:05:2f:fd:ef:31:9e:f9:
bc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8E:B7:63:23:92:E2:6E:31:18:A1:B7:E9:62:CA:E7:6C:D0:13:C7
X509v3 Authority Key Identifier:
keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/To63YyOS4m4xGKG36WLK52zQE8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.106.0/23
91.193.58.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:2c:99:a1:6e:60:83:59:88:75:85:79:7a:92:59:20:67:d7:
ff:a2:67:e6:2d:55:45:b0:1c:0f:ea:14:e7:bf:e9:3d:b4:02:
3b:9a:01:9a:66:8d:60:18:af:84:34:e4:99:f2:6d:f5:2f:61:
24:ec:ef:c4:10:f3:a0:2d:c9:0a:e3:d1:97:53:14:0a:37:9c:
19:f0:4d:21:3a:6a:bc:5a:c5:a2:1a:5a:d6:d5:e9:17:26:ff:
75:f6:63:e8:36:7a:e7:a9:c6:11:a1:58:90:fa:ec:78:c6:4f:
ec:9e:48:ef:f5:5f:1f:47:f9:b1:e6:43:ac:e6:02:ba:48:7a:
82:c2:d5:fc:57:80:17:5d:3f:d0:6a:e9:dd:cd:1d:33:1f:9c:
2e:69:b7:dc:2d:52:3d:18:f5:7d:f0:04:ed:5d:6d:b3:cc:45:
5e:68:2b:82:a0:96:75:87:8b:68:5a:1b:77:40:04:78:92:78:
71:cc:01:4d:fb:88:31:fe:8c:dd:5d:6a:52:a3:f8:e6:2e:78:
77:bf:56:4d:34:44:12:ba:78:9e:a9:46:d0:87:d2:03:2d:57:
20:69:90:11:53:e6:64:da:67:ef:38:7f:c9:23:e1:d3:51:e2:
86:37:e5:49:3a:ec:eb:06:37:f7:42:9c:d2:55:52:21:27:2d:
95:a8:59:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:54:01 2025 by rpki-client