Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/1-EYj7rCEm13C4ia18Eyfo_8k-RU.roa
File: 1-EYj7rCEm13C4ia18Eyfo_8k-RU.roa (raw, json)
Hash identifier: +ir98X5g2btNq9n+Pt6yr5mLVRkCwQv4UOQGouQJy1M=
Subject key identifier: F8:46:23:EE:B0:84:9B:5D:C2:E2:26:B5:F0:4C:9F:A3:FF:24:F9:15
Certificate issuer: /CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Certificate serial: 0198600E07CDF23A0B6127AE3D66A85D946A
Authority key identifier: 2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/1-EYj7rCEm13C4ia18Eyfo_8k-RU.roa
Signing time: Thu 31 Jul 2025 10:36:28 +0000
ROA not before: Thu 31 Jul 2025 10:36:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212910
IP address blocks: 91.137.240.0/22 maxlen: 22
91.137.248.0/22 maxlen: 22
91.137.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:60:0e:07:cd:f2:3a:0b:61:27:ae:3d:66:a8:5d:94:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Validity
Not Before: Jul 31 10:36:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f84623eeb0849b5dc2e226b5f04c9fa3ff24f915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fa:73:15:b9:2a:4e:a9:3d:c9:d5:99:28:f0:
47:8a:66:c4:d7:74:4e:13:20:a5:cb:9b:a9:9f:11:
f9:86:68:2b:22:9d:f5:c9:25:ac:dd:72:1b:dd:bf:
b5:41:f7:6e:cb:94:7a:f4:15:b7:3b:26:b0:e1:f9:
9b:b9:e4:29:d8:2d:e2:72:37:dc:7d:ec:78:54:b9:
00:63:42:1b:b3:bb:0a:80:9e:f8:36:38:b8:5a:aa:
7f:6a:2e:10:68:8c:4c:d4:46:22:03:99:a4:19:e2:
b1:19:ca:30:ac:7e:df:6b:4f:b1:e2:df:b3:77:23:
f2:bc:3d:66:c8:ed:da:5e:8a:d8:50:37:c5:b9:48:
d1:ca:bd:01:60:d3:c8:42:df:56:2d:ba:8c:ce:1e:
8e:44:a2:09:e4:cd:eb:f3:a7:e6:da:0a:4a:4e:c3:
34:52:3a:89:09:0b:28:d9:0b:ee:7b:e5:6a:be:82:
44:c5:82:33:2e:35:5b:b2:e6:63:20:f0:d5:7e:0a:
ca:2c:b7:eb:07:90:fe:4e:5d:73:2f:b2:ad:03:4c:
d5:01:c7:20:4a:2c:10:54:0f:2c:43:ef:37:83:c5:
41:07:b0:69:4c:18:d1:50:a9:6e:85:e8:e0:7b:2e:
6c:cb:2f:16:23:9d:e6:45:48:fe:9a:57:97:3c:d8:
71:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:46:23:EE:B0:84:9B:5D:C2:E2:26:B5:F0:4C:9F:A3:FF:24:F9:15
X509v3 Authority Key Identifier:
keyid:2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/1-EYj7rCEm13C4ia18Eyfo_8k-RU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.137.240.0/22
91.137.248.0-91.137.252.255
Signature Algorithm: sha256WithRSAEncryption
07:e9:72:cd:db:b6:39:93:95:da:04:92:61:8a:8c:85:f3:58:
35:96:9f:60:ae:93:9a:92:97:e5:e4:9e:15:2f:4b:25:c7:9b:
96:65:a2:8d:82:47:18:65:52:44:3a:ee:de:22:ac:c6:92:53:
5a:57:ab:af:6c:6e:b3:49:96:38:f8:ac:aa:24:38:b9:0d:aa:
8b:bd:31:3e:2d:46:a5:c6:44:f5:41:69:88:5a:c2:67:a0:c9:
ef:53:ef:51:43:58:90:74:92:97:3e:44:6e:17:28:3f:69:6c:
62:f9:f0:cf:92:98:97:24:3a:5f:8f:4f:58:60:45:6e:f8:c1:
cd:ca:a8:04:ed:15:72:4f:b7:a0:7d:de:f1:c7:1e:7e:fe:ff:
f1:1d:eb:f6:e9:1e:57:20:2b:3f:4a:24:8c:72:48:f6:0c:99:
92:48:04:bb:73:f0:3a:23:7f:b8:06:a4:1f:2e:32:ab:47:5f:
db:11:ad:c1:1d:eb:a3:b8:be:39:06:42:48:e3:24:f3:01:2b:
49:89:27:e7:ec:eb:22:8e:dc:2b:3f:66:a0:97:2c:21:ec:84:
7c:9b:a9:6b:b9:56:18:2b:4b:37:af:8b:60:5f:2d:9c:46:d5:
5a:6f:9a:d2:2f:1f:9f:9a:cd:02:9c:93:37:70:e0:48:ba:f1:
a6:05:32:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:59:32 2025 by rpki-client