Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/bg5bOuuw1jO6ynyy8gmi6MGK7vU.roa
File: bg5bOuuw1jO6ynyy8gmi6MGK7vU.roa (raw, json)
Hash identifier: ibYhxEKhbJdN0UQ/s48RBfEhiV9dbycm32Xti2GP31Y=
Subject key identifier: 6E:0E:5B:3A:EB:B0:D6:33:BA:CA:7C:B2:F2:09:A2:E8:C1:8A:EE:F5
Certificate issuer: /CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Certificate serial: 0198559261012AEDFABBC225657A6A7257C3
Authority key identifier: 36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/bg5bOuuw1jO6ynyy8gmi6MGK7vU.roa
Signing time: Tue 29 Jul 2025 09:45:13 +0000
ROA not before: Tue 29 Jul 2025 09:45:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 91.220.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:92:61:01:2a:ed:fa:bb:c2:25:65:7a:6a:72:57:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Validity
Not Before: Jul 29 09:45:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e0e5b3aebb0d633baca7cb2f209a2e8c18aeef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:56:95:9a:77:6b:88:66:dc:d6:09:5e:8e:9b:
90:ca:ae:cc:0f:29:4a:03:7c:87:96:03:ab:09:ee:
b4:e9:1a:d7:aa:5a:ea:60:29:28:fe:71:31:87:4c:
8c:1c:09:88:89:80:4e:65:63:da:47:2b:47:7c:e5:
15:b1:23:9b:b6:9b:dc:6c:a8:ad:44:33:c5:04:20:
70:e5:be:a7:08:83:58:61:2f:9f:06:fc:be:c1:fa:
10:3d:0a:60:fd:95:72:ec:1d:30:8b:44:e1:bc:58:
78:ee:3b:8e:5d:03:a0:c2:fd:7d:cb:f7:3c:7e:e4:
fc:4b:a7:91:db:80:f9:22:72:ef:38:68:3e:b4:e9:
ea:ac:40:91:3e:0e:1b:04:7b:0a:b9:64:ef:c5:3d:
e5:2d:41:f0:63:da:e5:f3:ef:93:d8:f8:dd:6b:e6:
96:a1:4e:73:dc:e2:62:7e:c7:c2:13:f4:60:7b:d5:
2b:83:14:72:43:3b:43:c1:62:84:dc:d8:b6:5f:87:
13:21:68:ac:75:40:26:03:c5:6c:22:a8:c9:5d:8a:
c1:4c:9f:c6:e3:bd:f0:ec:e2:9b:a1:80:6d:28:4b:
e6:e7:c1:4f:2e:44:6f:06:02:f2:fa:24:45:48:f4:
d8:23:85:72:78:f5:c2:ac:5d:04:c8:de:43:86:2f:
7c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0E:5B:3A:EB:B0:D6:33:BA:CA:7C:B2:F2:09:A2:E8:C1:8A:EE:F5
X509v3 Authority Key Identifier:
keyid:36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/bg5bOuuw1jO6ynyy8gmi6MGK7vU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.41.0/24
Signature Algorithm: sha256WithRSAEncryption
09:d7:ed:b0:0e:84:04:89:f3:18:d2:ab:11:79:01:10:cd:ed:
5e:96:34:e7:c3:46:e2:a0:13:4e:28:e1:e8:00:07:15:94:b7:
68:ac:f6:b8:da:02:47:b1:f9:34:96:da:ec:56:f0:45:1a:8b:
1a:89:9e:85:c8:31:ea:db:f2:f9:12:c3:36:6a:2c:ac:2f:37:
7d:3f:e1:0f:15:ed:f9:9c:91:b7:45:fc:8e:77:1f:08:36:a5:
f7:1f:df:11:a3:15:d9:c3:de:70:4d:53:41:2f:b7:ba:7a:8b:
9e:a3:50:53:74:34:15:dc:5a:0b:2b:35:b3:1c:45:a0:c1:9a:
e7:c4:ff:8a:61:19:40:89:c4:d1:96:21:b3:c6:0d:75:53:16:
de:fb:90:31:83:4f:43:60:bf:50:50:34:91:ad:5c:2a:99:31:
4d:57:c8:92:aa:8d:b5:fa:f0:b7:ec:a2:09:98:1a:c3:ec:26:
65:30:fd:dd:ae:7d:16:db:5c:74:0d:90:01:d9:61:52:e6:bd:
68:34:ef:f6:6c:61:7b:3f:e0:24:7c:bb:05:3e:88:c6:53:6e:
f5:29:f9:8d:30:a2:36:b5:6e:72:9d:8e:7a:68:fb:b5:88:6a:
ba:22:fb:a7:62:2d:5a:8b:21:cb:db:79:d6:76:c5:1a:6b:cc:
34:46:00:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:56:44 2025 by rpki-client