Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/5VynZKt_MWJO-gimMolSdS26Xqs.roa
File: 5VynZKt_MWJO-gimMolSdS26Xqs.roa (raw, json)
Hash identifier: P9j0X+v1lr9GKnvSB8Jq0wX8kXY0O6Xm9u3SkvIWNKE=
Subject key identifier: E5:5C:A7:64:AB:7F:31:62:4E:FA:08:A6:32:89:52:75:2D:BA:5E:AB
Certificate issuer: /CN=767eb661936dc95da3ecc4ca3eaf581389c0d855
Certificate serial: 01985B0B60DE9730544CD9CCFDD0A31C70AE
Authority key identifier: 76:7E:B6:61:93:6D:C9:5D:A3:EC:C4:CA:3E:AF:58:13:89:C0:D8:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/5VynZKt_MWJO-gimMolSdS26Xqs.roa
Signing time: Wed 30 Jul 2025 11:15:29 +0000
ROA not before: Wed 30 Jul 2025 11:15:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39855
IP address blocks: 91.192.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5b:0b:60:de:97:30:54:4c:d9:cc:fd:d0:a3:1c:70:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767eb661936dc95da3ecc4ca3eaf581389c0d855
Validity
Not Before: Jul 30 11:15:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e55ca764ab7f31624efa08a6328952752dba5eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:53:97:b3:1d:1e:0d:e9:c1:57:11:fe:91:50:
2c:3b:ec:30:2d:31:b8:9b:5a:1d:d0:20:c6:26:5d:
b0:99:13:0b:9a:a8:9b:79:c9:bf:18:c5:cc:78:d6:
95:18:27:d8:02:de:77:ae:9f:5b:44:84:cd:0d:01:
6c:6b:eb:a5:64:f0:88:f0:21:fa:2f:81:6b:7d:c1:
bc:6e:41:5f:5a:86:fd:85:39:ec:6c:e6:97:b4:b1:
87:f3:4f:a9:2f:a1:05:cb:a1:18:da:af:43:d5:07:
b6:0d:9e:b9:eb:75:20:8d:c6:ad:7f:66:0d:0d:9b:
85:f1:72:42:08:65:2f:41:57:8b:66:b1:d6:c7:71:
69:aa:91:52:87:9f:1f:1d:ef:54:74:59:3c:f2:7b:
89:22:e5:7d:e2:aa:7f:0f:25:e0:38:e0:37:d7:fc:
42:c1:e7:48:d7:e7:86:40:3c:93:c4:7b:6f:5d:be:
1a:c7:72:38:26:1c:3e:92:25:48:d2:ea:e1:ca:49:
c9:37:53:06:a0:95:3c:2a:ec:11:6b:cc:28:ab:b4:
48:da:7f:c8:ff:4d:e4:26:99:71:ed:62:03:b1:74:
42:4c:19:00:39:07:0a:5d:b0:a5:f4:d0:ec:0e:1c:
56:27:d3:e4:56:4e:66:11:9b:56:48:1c:43:94:d4:
9b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5C:A7:64:AB:7F:31:62:4E:FA:08:A6:32:89:52:75:2D:BA:5E:AB
X509v3 Authority Key Identifier:
keyid:76:7E:B6:61:93:6D:C9:5D:A3:EC:C4:CA:3E:AF:58:13:89:C0:D8:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/5VynZKt_MWJO-gimMolSdS26Xqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.84.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:39:fc:b8:40:be:3d:e5:9c:cb:85:b3:b1:f7:e4:7e:b7:c7:
9b:c6:be:ca:5d:94:dc:76:ce:6c:c3:6f:15:e6:44:7a:cc:42:
9b:36:fc:1f:bb:9e:4b:c0:e0:9e:b2:85:3d:be:36:92:14:df:
81:17:c6:44:05:ba:cf:3c:91:17:49:6c:ac:13:3a:41:b3:61:
28:d1:59:30:63:60:a3:7f:11:39:64:53:a8:dc:8b:98:f4:ad:
63:03:dd:6a:5f:a6:ce:9e:ac:cf:aa:a5:31:43:0f:59:d9:13:
b9:e2:f1:ba:ef:3f:52:9e:e1:82:87:bc:5b:75:79:ae:db:df:
57:6e:3d:51:d4:0a:51:1f:c8:66:b1:dd:0e:0c:a6:04:03:46:
fb:f1:81:2a:ce:e6:08:72:47:23:85:d5:26:fa:b5:2f:29:ce:
04:72:36:aa:40:39:f6:4d:9c:b1:f7:e0:ee:f1:01:7a:c0:6a:
bb:e9:86:7d:bb:0b:c8:fe:a7:9a:d0:a6:29:61:81:8f:2c:56:
23:b1:bc:f5:9b:63:96:b6:2a:79:a9:60:d8:a0:f4:6c:bc:95:
1a:db:54:83:59:47:3d:d4:9e:4f:fc:31:6a:9b:d7:78:19:45:
b2:0a:cc:c3:ee:9a:8e:3c:a1:f3:96:90:c6:80:d1:aa:0d:37:
7d:a3:a6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 21:36:42 2025 by rpki-client