Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/pD7pEymknzkUjbwQgBvMF1uo8oY.roa
File: pD7pEymknzkUjbwQgBvMF1uo8oY.roa (raw, json)
Hash identifier: 5l5ShUzOFfyQQajUSuac6KbfafY4wLPXiMTzwJGTLV0=
Subject key identifier: A4:3E:E9:13:29:A4:9F:39:14:8D:BC:10:80:1B:CC:17:5B:A8:F2:86
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 0198508DFFD67AC14CA370C369C2453BCB83
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/pD7pEymknzkUjbwQgBvMF1uo8oY.roa
Signing time: Mon 28 Jul 2025 10:22:19 +0000
ROA not before: Mon 28 Jul 2025 10:22:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51076
IP address blocks: 91.192.94.0/24 maxlen: 24
170.168.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:50:8d:ff:d6:7a:c1:4c:a3:70:c3:69:c2:45:3b:cb:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Jul 28 10:22:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a43ee91329a49f39148dbc10801bcc175ba8f286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3e:71:f2:c1:1a:45:e8:d1:f6:09:c1:00:9f:
06:02:b1:bd:b2:1c:9b:37:71:14:a3:54:41:7d:33:
26:78:e4:85:72:33:d0:ea:9e:7a:f2:68:e0:9f:1e:
ec:45:ac:e7:48:91:62:f1:99:e9:57:96:d5:f1:64:
ea:fe:9a:0f:db:00:70:9b:7c:5d:14:a5:82:1e:f1:
a2:d2:be:08:54:02:2c:40:21:b7:30:e0:27:fd:89:
c8:fc:78:92:0f:94:08:4d:3e:db:fd:a8:2f:01:3f:
df:28:07:e1:6f:a8:95:7b:d6:f3:db:0f:c2:3c:90:
c2:2f:e3:4d:44:b4:05:27:49:f5:cd:f9:44:07:a0:
a4:c4:da:da:d7:75:29:79:09:4e:5c:5a:4b:eb:82:
f1:4f:5d:3a:32:c0:89:40:77:6c:74:ec:d7:f5:98:
67:c9:e7:7f:af:e1:39:97:58:df:81:64:47:2f:4f:
f4:7f:90:b0:ec:c3:3d:54:3c:5b:ca:ae:55:a7:49:
d4:a8:94:30:13:3c:4a:b3:10:8c:41:88:ed:a1:3d:
bf:f2:c0:00:4c:b1:50:76:d8:1a:0b:53:13:41:f0:
a0:2d:91:6f:c1:6f:be:ea:d7:ae:0d:19:aa:61:ee:
f4:5b:61:51:19:18:b1:fb:ab:30:7d:3f:59:73:c2:
9c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3E:E9:13:29:A4:9F:39:14:8D:BC:10:80:1B:CC:17:5B:A8:F2:86
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/pD7pEymknzkUjbwQgBvMF1uo8oY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.94.0/24
170.168.16.0/24
Signature Algorithm: sha256WithRSAEncryption
99:42:2f:f1:2a:fd:26:a7:fd:0f:91:54:ee:d5:c9:be:0f:1a:
2a:ad:5d:d0:b9:f0:95:3d:4d:75:cb:48:a4:01:6f:1e:ac:11:
9c:54:b8:e6:e1:67:d8:6f:64:81:3f:69:e9:5f:cc:13:62:2d:
5d:35:33:c4:bd:76:5f:56:23:d6:da:c3:e6:bb:8e:41:ac:51:
9b:16:99:0c:bd:63:55:31:55:f5:8f:e2:3d:01:26:40:ba:d3:
e7:97:15:48:29:8d:70:59:66:73:7b:94:64:08:02:88:3a:16:
61:e1:92:9f:a7:87:dc:ca:da:5c:90:1a:eb:f4:e0:05:66:2a:
3d:75:58:a8:59:4a:d2:87:9c:ae:fb:2d:15:92:34:3b:bc:df:
90:c2:6d:d9:a1:56:ce:27:64:2b:56:81:c9:81:1b:81:4f:56:
18:b5:14:72:6b:05:7f:1c:db:97:a8:0b:89:d4:4b:e9:72:0c:
df:50:67:c2:88:f9:49:79:a2:f1:96:5d:76:6b:7f:0d:de:64:
5a:33:ec:55:34:20:62:b6:7a:95:0c:4d:7a:fb:46:9b:8b:83:
74:08:74:4f:51:e5:98:a3:21:59:43:d9:d7:da:e3:62:03:9f:
fc:b4:a5:83:f6:8b:8b:9b:43:93:c0:78:d0:c0:9e:b1:f5:e0:
af:cb:d1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:59:52 2025 by rpki-client