Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/1TzUGOISzDA60EIuoaOCEldIKdA.roa
File: 1TzUGOISzDA60EIuoaOCEldIKdA.roa (raw, json)
Hash identifier: BLBlbTPtdydLXzYGnqSxQMivDmgQhsVxzd+uAEw/tSs=
Subject key identifier: D5:3C:D4:18:E2:12:CC:30:3A:D0:42:2E:A1:A3:82:12:57:48:29:D0
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 01984BA77F8492D178F52121B9B8409009FD
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/1TzUGOISzDA60EIuoaOCEldIKdA.roa
Signing time: Sun 27 Jul 2025 11:32:05 +0000
ROA not before: Sun 27 Jul 2025 11:32:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 91.108.200.0/22 maxlen: 22
91.108.200.0/24 maxlen: 24
91.108.204.0/22 maxlen: 22
91.108.204.0/24 maxlen: 24
91.108.216.0/22 maxlen: 22
91.108.216.0/24 maxlen: 24
91.108.220.0/22 maxlen: 22
91.108.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:a7:7f:84:92:d1:78:f5:21:21:b9:b8:40:90:09:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Jul 27 11:32:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d53cd418e212cc303ad0422ea1a38212574829d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:18:fd:0c:4e:a8:e7:cf:01:16:e0:97:dd:d2:
3a:86:98:8f:0c:f6:a1:51:ec:53:54:4a:8f:1c:b0:
8c:fd:7d:a6:fd:74:65:73:d6:7b:7c:6c:be:19:a6:
71:af:8c:23:dc:1d:09:1e:76:47:e3:44:c1:fd:67:
d9:89:61:f4:cb:58:5b:ac:0b:b3:5c:57:59:57:3a:
10:68:8a:e9:6f:0e:3f:b8:00:1d:ef:63:db:2a:fc:
fb:18:15:2d:fd:9e:6c:24:eb:ca:fe:ea:f5:1e:e3:
9b:66:80:dc:b1:37:82:84:e8:fb:16:d9:4d:e7:ed:
39:70:e8:0d:47:ea:12:f2:ef:4c:92:9c:42:53:34:
bd:70:95:18:6e:7f:22:7a:d0:c8:4d:42:f0:db:f9:
ea:09:70:7a:d8:62:6b:fa:87:bd:90:44:20:9a:43:
dd:b5:bc:85:92:e4:ff:8e:4c:13:f3:b4:75:de:cc:
11:1d:5e:ab:b7:31:c8:14:35:17:c2:f6:bc:98:d3:
ca:14:1b:67:e1:e8:ce:0c:a7:e4:6b:65:39:0b:f4:
30:6c:8f:b1:5c:c9:a3:6c:17:86:9a:6c:3f:80:11:
b3:dc:55:d5:c3:f9:65:31:6a:e1:1e:94:27:5f:54:
da:ca:39:8b:3a:2a:79:3f:66:d2:31:c6:e7:c7:1c:
78:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3C:D4:18:E2:12:CC:30:3A:D0:42:2E:A1:A3:82:12:57:48:29:D0
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/1TzUGOISzDA60EIuoaOCEldIKdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.200.0/21
91.108.216.0/21
Signature Algorithm: sha256WithRSAEncryption
68:9a:c4:59:c4:d9:14:8b:eb:50:77:56:5a:dc:e7:6f:e2:bb:
bb:13:ce:3d:e8:5e:f0:73:ac:2d:5e:28:9e:9b:12:74:ce:d4:
e2:c1:2e:84:cb:b9:1c:6c:dc:a4:08:61:b4:4e:b1:c2:01:df:
40:25:93:a0:12:5d:77:0d:c8:a7:bf:b6:ef:c5:c2:6a:ff:06:
ab:7a:f1:cc:f2:e5:90:83:62:24:12:34:6c:e2:da:25:94:1f:
52:88:39:15:be:f0:3b:2f:7d:2a:fb:60:15:57:51:c4:3d:5e:
31:d8:eb:5a:f3:c1:b3:f5:19:0d:d9:f4:32:0a:fc:b9:69:77:
d8:c9:26:2b:2d:be:e8:d1:f9:fb:8a:95:97:08:ff:c1:df:fe:
6b:36:49:7e:16:b5:8c:c0:c5:c4:20:10:0b:24:7c:36:a6:41:
f4:28:e8:b9:88:a5:ad:25:b1:0a:84:1d:c9:59:0c:00:dd:a5:
98:7e:2f:3f:7e:83:40:f6:60:9b:29:75:55:86:72:b1:89:4c:
31:c7:d5:0c:50:85:3f:d8:ff:42:71:d6:18:e5:5f:cb:5b:e4:
15:c9:5b:2e:e4:7d:0a:e8:0f:87:19:8d:6f:c5:ce:26:37:19:
24:92:78:85:12:30:b8:3f:8e:5f:8c:bd:f8:a4:1c:5b:c3:2d:
e4:43:9d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:11:29 2025 by rpki-client