Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/A069f3VmnLRvZPof6UTUKklRx2g.roa
File: A069f3VmnLRvZPof6UTUKklRx2g.roa (raw, json)
Hash identifier: KYG31HqwJE+WwK87nqjJ/UhZnSfu6ifW8xsEDqClNxU=
Subject key identifier: 03:4E:BD:7F:75:66:9C:B4:6F:64:FA:1F:E9:44:D4:2A:49:51:C7:68
Certificate issuer: /CN=df158dcb290ec5ae7f66c1fa0f8d963211deea54
Certificate serial: 01975EFF95BBC3714E58DDDFA8B122A7569F
Authority key identifier: DF:15:8D:CB:29:0E:C5:AE:7F:66:C1:FA:0F:8D:96:32:11:DE:EA:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/A069f3VmnLRvZPof6UTUKklRx2g.roa
Signing time: Wed 11 Jun 2025 12:38:17 +0000
ROA not before: Wed 11 Jun 2025 12:38:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216210
IP address blocks: 91.216.112.0/24 maxlen: 24
185.171.88.0/24 maxlen: 24
2a14:f580::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 00:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:ff:95:bb:c3:71:4e:58:dd:df:a8:b1:22:a7:56:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df158dcb290ec5ae7f66c1fa0f8d963211deea54
Validity
Not Before: Jun 11 12:38:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=034ebd7f75669cb46f64fa1fe944d42a4951c768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:39:e1:c7:91:b1:c0:25:47:38:8d:f1:32:20:
cb:5a:0c:23:05:4c:69:ac:d0:d5:b9:51:8b:cf:82:
28:68:aa:a4:38:ff:73:c3:d7:f6:b1:1e:83:4f:73:
26:17:80:db:2f:c1:9b:4f:f8:2a:c6:de:f6:1e:c8:
7b:6f:b9:ad:6b:78:ac:67:32:e7:64:00:09:ed:0d:
be:21:c8:da:01:63:cf:9d:bd:6f:35:45:7c:cb:03:
79:fe:6a:84:e8:96:22:e0:ce:94:65:24:5d:03:59:
57:65:87:e7:b5:4e:eb:06:14:4e:cf:63:14:aa:ce:
66:e8:bf:6a:03:d9:21:c5:ec:b5:e5:a9:4c:84:6b:
ae:ea:df:da:f2:d3:d4:67:55:6b:d1:3f:eb:33:3e:
01:cf:0d:e4:a1:90:f8:b2:50:61:87:56:bc:13:fc:
ef:5b:26:29:36:01:3f:39:b8:a2:19:23:88:40:97:
59:5d:05:92:36:39:71:69:52:d3:e9:c9:33:92:10:
3a:6c:51:e7:dd:a6:86:23:86:50:85:b5:9d:32:20:
b8:c7:41:df:31:f5:87:3d:e5:6e:48:69:5f:63:92:
be:ab:a9:03:eb:95:cf:17:98:f6:fe:79:7c:5f:41:
c4:b6:9e:78:88:74:13:ef:0f:f7:78:d2:9c:4e:6a:
8d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4E:BD:7F:75:66:9C:B4:6F:64:FA:1F:E9:44:D4:2A:49:51:C7:68
X509v3 Authority Key Identifier:
keyid:DF:15:8D:CB:29:0E:C5:AE:7F:66:C1:FA:0F:8D:96:32:11:DE:EA:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/A069f3VmnLRvZPof6UTUKklRx2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.112.0/24
185.171.88.0/24
IPv6:
2a14:f580::/29
Signature Algorithm: sha256WithRSAEncryption
8b:9b:09:91:14:5e:92:cc:4f:34:82:8c:99:d6:7b:da:ad:28:
c4:14:6a:99:3c:c7:e5:c1:27:fe:26:3c:47:a7:ff:20:45:4e:
4a:a8:87:fd:75:2e:42:4b:19:98:bd:91:17:fc:27:6d:7c:d9:
96:9c:f2:e5:0f:be:bb:89:e6:a9:ce:62:af:f5:90:6a:57:ec:
76:a1:1e:cd:78:25:15:2d:25:f8:2d:99:63:7b:95:17:1e:4b:
23:52:ac:c7:23:9c:9a:ae:5a:82:05:50:6b:14:ce:d6:65:29:
d9:ab:84:72:6e:69:f9:06:4b:84:f8:dd:b6:96:6b:aa:91:9c:
43:f2:fc:2a:a3:8e:2d:cb:e5:b7:b0:f0:1b:79:cf:41:ab:01:
60:c3:f9:b9:03:5e:ff:00:cd:94:51:9c:c9:6f:08:87:df:6b:
f9:4d:4b:19:25:97:58:b6:0f:c0:a4:9d:b3:77:bd:90:ac:5f:
c1:b6:df:d9:07:e8:e9:88:49:a2:19:07:da:c8:45:ed:2f:46:
d1:6e:72:36:80:46:e1:ec:00:78:0a:95:42:34:40:7e:53:af:
01:1f:98:14:41:9e:6f:8f:6a:f9:22:f5:7f:55:71:48:27:d3:
0f:d0:e1:98:0a:e4:ea:04:9c:ef:c6:89:c4:ba:ef:2f:55:5d:
e0:6e:89:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:43:49 2025 by rpki-client