Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/6dPthsF1SSLUrw-8wd5QNobYALo.roa
File: 6dPthsF1SSLUrw-8wd5QNobYALo.roa (raw, json)
Hash identifier: CmnlVEiEx4rD/KLQtwZBi42ENs4iCe+rnAiQ+mn7tNY=
Subject key identifier: E9:D3:ED:86:C1:75:49:22:D4:AF:0F:BC:C1:DE:50:36:86:D8:00:BA
Certificate issuer: /CN=c01399b467c906662de00ec766cc7e000eaec27b
Certificate serial: 0198551FD06CF6F23F2EFA39AF2A6F916258
Authority key identifier: C0:13:99:B4:67:C9:06:66:2D:E0:0E:C7:66:CC:7E:00:0E:AE:C2:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/6dPthsF1SSLUrw-8wd5QNobYALo.roa
Signing time: Tue 29 Jul 2025 07:40:04 +0000
ROA not before: Tue 29 Jul 2025 07:40:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30781
IP address blocks: 91.216.22.0/24 maxlen: 24
2001:67c:11c8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:1f:d0:6c:f6:f2:3f:2e:fa:39:af:2a:6f:91:62:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c01399b467c906662de00ec766cc7e000eaec27b
Validity
Not Before: Jul 29 07:40:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9d3ed86c1754922d4af0fbcc1de503686d800ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:48:51:84:0c:5e:f3:4f:4a:f2:8f:fa:52:a7:
62:b8:72:7b:7e:d4:cd:94:d0:d8:72:2b:76:0d:f3:
91:36:d1:d5:26:3b:86:63:71:ea:29:f0:ee:a7:a9:
de:a5:20:42:7f:ec:1c:fc:6c:bc:d6:4c:3b:74:51:
52:bc:00:f5:be:57:e3:48:74:3e:fb:10:68:0c:cc:
d9:05:8c:f3:50:84:58:dc:a1:51:5c:1b:ac:47:4c:
7e:f7:8b:ac:54:5e:65:c3:e2:2d:13:c2:f8:83:0f:
34:81:c5:bb:87:74:cb:14:c0:c1:1a:c3:44:04:0a:
00:a3:b9:54:77:17:88:0a:0c:41:74:e3:34:6a:96:
7b:b1:0a:14:34:27:2e:a6:aa:a3:04:b6:55:d3:11:
b1:97:ed:31:6c:f4:7f:47:da:b8:f6:61:03:3b:14:
3b:94:41:e9:c7:52:42:1b:97:c1:15:95:67:b5:89:
05:ea:b8:8c:f9:6f:fb:96:71:fd:98:cd:1d:38:00:
4b:c2:87:22:7d:9f:24:0c:b9:d3:23:e8:35:f3:79:
c1:f0:35:a5:d6:f5:08:ce:86:38:1f:77:1e:7b:16:
db:c8:52:d3:17:59:d8:1c:f4:12:95:b2:d0:e0:1d:
72:00:18:00:b9:f6:58:6f:f1:f4:c0:d1:73:8d:75:
03:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D3:ED:86:C1:75:49:22:D4:AF:0F:BC:C1:DE:50:36:86:D8:00:BA
X509v3 Authority Key Identifier:
keyid:C0:13:99:B4:67:C9:06:66:2D:E0:0E:C7:66:CC:7E:00:0E:AE:C2:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/6dPthsF1SSLUrw-8wd5QNobYALo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.22.0/24
IPv6:
2001:67c:11c8::/48
Signature Algorithm: sha256WithRSAEncryption
92:a2:ae:ca:cb:d5:e0:90:b8:17:79:6d:f9:6e:c5:b7:d4:2a:
d8:10:08:26:ad:78:59:c6:81:7e:f6:6c:4a:f4:67:36:3e:ae:
7e:af:eb:ba:18:d4:b2:b1:92:8e:fe:c3:67:10:6c:49:54:2e:
b7:70:1b:97:35:90:6c:39:b0:1e:d9:e9:c4:d7:a8:d4:0a:df:
33:a6:71:e1:fb:1c:0d:8c:49:68:60:6e:02:ca:c1:60:d1:f2:
41:60:ae:b0:26:51:d3:41:5c:85:91:4b:ee:0d:eb:b9:eb:fe:
74:54:a8:90:97:c0:bf:eb:c4:d4:37:c4:d1:fe:d7:7d:3d:f8:
6a:d4:96:c5:d9:5a:e5:64:2f:e2:b1:74:09:b2:0a:fb:81:9f:
46:24:9d:56:7a:b4:34:f9:47:ac:78:82:2e:78:f6:2d:98:03:
72:75:5d:e7:0c:81:b8:e0:fe:39:b2:15:e0:ae:8f:9f:c8:5d:
b1:93:ac:4f:c2:a1:2b:5b:37:4d:38:e9:d6:f8:e7:88:19:e8:
1c:c9:99:25:1a:d3:9f:a1:79:ca:f1:c4:5e:f5:7f:bf:df:43:
8b:34:f0:13:47:c8:28:25:8b:a5:54:b1:79:3c:bd:f7:d0:98:
b0:43:e1:8b:20:f4:d5:0e:f7:cb:48:4a:87:a6:c9:03:1f:e8:
b3:b7:7e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:45:36 2025 by rpki-client