Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/_vVj7Yf7SEDc0U-oT24hLr9AmWo.roa
File: _vVj7Yf7SEDc0U-oT24hLr9AmWo.roa (raw, json)
Hash identifier: j+iJlPVCSfJjs834awahPlI3pwAuXtW3vZid82gyL2c=
Subject key identifier: FE:F5:63:ED:87:FB:48:40:DC:D1:4F:A8:4F:6E:21:2E:BF:40:99:6A
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 01984BA7801749EE5A50A3B4E49D532DC959
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/_vVj7Yf7SEDc0U-oT24hLr9AmWo.roa
Signing time: Sun 27 Jul 2025 11:32:05 +0000
ROA not before: Sun 27 Jul 2025 11:32:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209372
IP address blocks: 91.108.192.0/24 maxlen: 24
91.108.193.0/24 maxlen: 24
91.108.194.0/24 maxlen: 24
91.108.195.0/24 maxlen: 24
91.108.196.0/22 maxlen: 22
91.108.200.0/22 maxlen: 22
91.108.200.0/24 maxlen: 24
91.108.204.0/22 maxlen: 22
91.108.204.0/24 maxlen: 24
91.108.208.0/22 maxlen: 22
91.108.208.0/24 maxlen: 24
91.108.212.0/22 maxlen: 22
91.108.216.0/22 maxlen: 22
91.108.216.0/24 maxlen: 24
91.108.220.0/22 maxlen: 22
91.108.220.0/24 maxlen: 24
91.108.224.0/24 maxlen: 24
91.108.228.0/22 maxlen: 22
91.108.232.0/22 maxlen: 22
91.108.236.0/24 maxlen: 24
91.108.238.0/24 maxlen: 24
91.108.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:a7:80:17:49:ee:5a:50:a3:b4:e4:9d:53:2d:c9:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Jul 27 11:32:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fef563ed87fb4840dcd14fa84f6e212ebf40996a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3a:dd:87:94:50:0e:96:f0:ef:86:bd:1a:3e:
06:c6:6e:53:2f:96:02:e0:86:9a:6f:f7:83:c4:dc:
5d:d0:e8:8e:6c:f5:15:5f:e8:cf:21:25:1f:8f:27:
30:6c:e4:4c:43:be:38:ab:15:b4:58:54:df:9f:64:
8c:95:bd:e7:e6:c5:79:91:8d:d9:4e:35:11:b3:5b:
b7:19:33:68:87:4b:3d:b2:6b:0a:d5:f4:62:6e:02:
79:71:73:a2:64:95:7b:c0:5c:24:03:85:9d:97:78:
36:99:18:7d:d8:c5:2c:c4:ec:34:07:c7:1c:ca:69:
91:a6:d0:dc:27:28:b7:83:5e:29:44:ce:76:f8:17:
96:56:33:3f:a3:42:02:20:c9:69:0d:9f:8f:be:30:
43:7c:bc:e1:88:15:c6:db:4e:4b:57:85:2a:2a:df:
16:fd:f7:83:ad:bf:6e:8f:ca:1b:20:05:d1:fa:c1:
af:3d:ed:d9:41:47:9f:90:42:d8:b6:9e:b2:c8:f2:
59:6d:8f:4d:90:39:07:01:84:d8:e2:38:c3:4d:5f:
be:42:20:2b:4e:da:64:6f:fc:f1:9e:8f:3d:e3:b4:
47:fb:9c:ac:c3:0b:ac:53:64:14:8e:1c:47:b3:40:
00:fc:b0:78:54:c4:a2:1a:66:1f:d6:1e:30:06:4d:
8c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F5:63:ED:87:FB:48:40:DC:D1:4F:A8:4F:6E:21:2E:BF:40:99:6A
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/_vVj7Yf7SEDc0U-oT24hLr9AmWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.192.0-91.108.224.255
91.108.228.0-91.108.236.255
91.108.238.0/24
91.108.255.0/24
Signature Algorithm: sha256WithRSAEncryption
50:5e:17:14:9a:ab:fb:51:88:db:d8:47:b8:f4:f7:36:77:b5:
fc:d5:6b:52:88:e3:f5:16:93:b2:0f:f6:b4:4d:8a:1b:7c:a9:
21:53:7b:f4:a5:16:9c:16:eb:d2:4e:52:f4:1e:fb:c6:e4:7d:
9c:fb:8f:3a:1c:5e:44:6c:28:02:e4:39:51:2e:0f:3f:8b:2f:
07:fc:af:9c:02:4a:03:f7:a0:e0:3d:b7:45:f9:01:54:3d:3b:
22:30:61:ca:ae:b5:0e:e7:5f:f6:8a:2e:c5:c4:42:0f:de:27:
32:b8:b9:51:10:e5:74:8f:2e:f8:71:e3:36:54:9d:7a:4f:62:
bc:f1:9c:4c:33:d8:a8:ac:3c:d0:fc:5b:8d:1f:8f:2f:db:76:
38:05:c7:5d:62:8c:c5:9a:fb:55:70:f1:c9:c4:2f:78:0d:0f:
a8:cd:e6:34:ed:f0:fd:b1:9c:60:25:3c:c8:6e:0a:6f:a7:79:
1f:b5:07:63:85:cd:76:b6:26:c9:7b:a4:e4:b7:31:22:2d:80:
b6:f2:b9:13:fd:cb:d6:36:24:ee:02:67:8f:ba:52:e9:8b:38:
95:31:6d:aa:1c:18:a4:97:41:d0:05:10:2c:cb:b1:75:43:43:
c0:d0:d1:06:ee:44:ba:fe:22:9a:f3:1d:73:75:1c:20:f8:c4:
40:44:f2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:35:58 2025 by rpki-client