Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/oE_-uHQTvdrwoUv29P-oV14eZ6o.roa
File: oE_-uHQTvdrwoUv29P-oV14eZ6o.roa (raw, json)
Hash identifier: R4j6aqfzsM01Kdni5Ht/gJY4Kzsr8K2GSVO7WfnNVIM=
Subject key identifier: A0:4F:FE:B8:74:13:BD:DA:F0:A1:4B:F6:F4:FF:A8:57:5E:1E:67:AA
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 019809B4525DEF1AF9F122711E051C64AA5E
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/oE_-uHQTvdrwoUv29P-oV14eZ6o.roa
Signing time: Mon 14 Jul 2025 16:11:09 +0000
ROA not before: Mon 14 Jul 2025 16:11:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201231
IP address blocks: 91.103.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:b4:52:5d:ef:1a:f9:f1:22:71:1e:05:1c:64:aa:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Jul 14 16:11:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a04ffeb87413bddaf0a14bf6f4ffa8575e1e67aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9c:31:78:0d:52:4a:d7:8b:38:b0:3e:0f:7f:
a4:d5:31:94:80:5a:bd:73:12:e7:e3:68:80:b5:ae:
e4:5f:75:39:fc:28:d4:a4:12:66:4a:ac:ea:07:85:
7e:29:36:25:68:8a:c6:0c:a3:89:56:f7:99:7d:65:
35:01:53:5c:cb:1b:b1:f6:a2:25:b6:e3:12:5d:99:
a7:1c:ff:63:55:1a:6a:7a:cd:d7:54:e9:4c:15:93:
cf:2d:12:e0:4a:de:ba:99:6f:37:c4:45:06:88:ed:
20:8b:06:96:e3:b8:65:6e:8e:b4:fa:bb:57:df:ff:
e8:8f:75:d4:41:ca:0b:85:14:f5:e2:fb:38:6e:3f:
5f:57:26:0c:30:62:3f:5c:50:44:8c:d9:ac:bf:9d:
11:5e:05:e6:18:ea:ab:da:a5:ff:25:f1:0c:21:7a:
6b:3a:39:b4:19:c9:37:df:63:d4:84:f4:7f:fd:eb:
a0:53:02:68:fb:6f:f8:22:8f:cd:d0:22:15:83:22:
24:a1:92:fb:3b:02:81:78:a0:79:45:a0:95:17:99:
fa:7d:8f:1d:14:2f:94:53:29:c0:81:02:d9:b8:38:
b8:81:b3:37:14:df:d3:28:64:67:03:48:fc:ed:f5:
6f:8b:15:72:40:f4:48:cd:7e:13:77:9a:c6:df:dd:
f7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4F:FE:B8:74:13:BD:DA:F0:A1:4B:F6:F4:FF:A8:57:5E:1E:67:AA
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/oE_-uHQTvdrwoUv29P-oV14eZ6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.254.0/24
Signature Algorithm: sha256WithRSAEncryption
22:5b:f4:ba:9d:b5:5a:93:fd:50:d5:cc:fc:dd:fe:6c:fd:a0:
b8:43:56:cd:e5:47:d4:88:44:e1:fa:de:3a:69:e6:db:c6:be:
28:7f:e6:fc:37:3d:a1:a2:fc:ea:91:f1:0d:a1:d3:c9:e4:b6:
b2:2c:62:3d:17:ac:88:01:ce:10:44:db:6c:02:46:db:1a:f5:
e6:31:b2:87:85:aa:7e:17:f0:a1:ea:da:d9:d2:9c:f6:c5:6c:
94:df:3c:0d:08:16:c4:df:70:a8:19:b1:cd:d2:a4:f8:de:85:
49:d6:c9:4b:c8:50:0b:fe:39:50:ec:eb:90:e1:d4:41:cd:1c:
aa:dd:bb:0b:32:33:5d:e6:71:23:16:0c:f5:42:66:06:d2:f0:
ac:5c:eb:3f:b3:a2:ec:e8:9e:11:9d:57:6b:cb:c1:2b:93:48:
5f:a1:12:85:12:e7:4f:6f:c5:81:43:52:23:42:f1:7a:c9:69:
7d:ab:4e:19:6f:93:98:fb:55:9c:d6:19:ac:97:9c:1f:82:be:
94:1a:85:e9:c7:9e:95:d9:bf:0a:34:cf:ff:1a:2d:d1:9c:b1:
4e:ed:37:b9:25:fe:59:bb:1a:90:b0:99:a1:17:75:18:9c:7f:
08:5e:a2:84:69:a8:66:e2:bd:b6:f0:4a:d8:4e:c7:dd:63:89:
b9:80:4c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:43:34 2025 by rpki-client