Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/u_PvNoZGGKwKo1fIPAvA4pNGOWE.roa
File: u_PvNoZGGKwKo1fIPAvA4pNGOWE.roa (raw, json)
Hash identifier: 7nleymXLPmClcPELIrjirAmjx3u5krkfwTmE5v3abBQ=
Subject key identifier: BB:F3:EF:36:86:46:18:AC:0A:A3:57:C8:3C:0B:C0:E2:93:46:39:61
Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Certificate serial: 0197E42D4A97D770419D6509FABFF42BB48F
Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/u_PvNoZGGKwKo1fIPAvA4pNGOWE.roa
Signing time: Mon 07 Jul 2025 09:17:42 +0000
ROA not before: Mon 07 Jul 2025 09:17:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50599
IP address blocks: 91.196.14.0/23 maxlen: 23
185.216.174.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e4:2d:4a:97:d7:70:41:9d:65:09:fa:bf:f4:2b:b4:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Validity
Not Before: Jul 7 09:17:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbf3ef36864618ac0aa357c83c0bc0e293463961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:06:f8:35:08:a2:d3:5f:ef:d4:b2:64:68:d2:
8f:24:9f:80:66:80:fc:c7:3a:de:24:72:2a:22:62:
dc:a2:dc:2c:ac:a0:c4:55:24:ac:e9:21:f1:48:73:
82:ea:8c:bf:95:fa:b4:de:1f:4c:94:0a:fb:49:1f:
b1:8f:a1:2b:48:7f:f1:33:ab:f3:23:d1:38:fb:f4:
8e:ef:c3:1e:57:11:bb:98:71:17:04:1b:33:77:e8:
68:ac:e1:de:db:68:c4:f6:83:13:1f:91:7b:95:b5:
04:da:96:9c:f6:2e:23:8c:36:d2:3e:13:b2:c5:26:
d8:d6:8e:13:56:71:63:a1:b2:c0:44:ab:ce:4d:8e:
9e:50:29:4a:35:fd:f9:33:02:78:9c:f8:5b:2e:46:
6e:38:62:4e:42:ec:a8:0f:fe:a4:63:96:e1:df:5e:
2d:dc:89:33:68:ae:34:09:62:62:79:e2:85:c5:d8:
fb:de:11:f4:b8:cb:92:12:ca:f9:69:20:fc:b7:b0:
a8:7b:de:2c:47:0b:f9:06:e7:ab:28:21:f4:7d:18:
86:e4:09:e8:58:09:f8:fa:83:55:1a:cd:16:35:87:
ba:4e:44:f5:0f:86:fd:86:9d:e5:e6:08:5a:95:65:
06:c1:8f:7c:40:fe:67:c9:e0:22:0f:4e:6c:50:0e:
ab:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F3:EF:36:86:46:18:AC:0A:A3:57:C8:3C:0B:C0:E2:93:46:39:61
X509v3 Authority Key Identifier:
keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/u_PvNoZGGKwKo1fIPAvA4pNGOWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.14.0/23
185.216.174.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:13:25:f1:49:43:b6:5c:8a:dc:f8:34:91:67:53:11:77:20:
27:3f:75:22:ce:86:68:1f:09:07:17:d6:2a:2e:11:73:69:21:
58:0e:29:55:43:d3:9b:f4:ce:7b:55:04:58:55:84:1b:4c:9e:
18:41:7b:e7:f5:01:ec:e6:97:37:6e:88:be:29:24:df:c5:75:
45:48:0b:64:cf:fb:54:a2:b5:b9:f1:81:0b:e0:d9:ec:46:08:
24:e9:b2:82:4a:2d:19:ea:31:22:b1:36:7b:c7:4e:a7:25:75:
5a:20:a1:3b:1c:4e:35:7a:c6:e6:da:8c:9f:7b:7e:21:87:5a:
dc:0a:90:5e:37:91:6d:06:05:2d:f2:54:64:7b:87:76:39:48:
38:bd:fb:06:1c:21:54:b3:b7:1d:6f:c7:ef:0d:08:15:e2:2c:
f3:b5:2c:96:a5:80:16:4b:4f:00:60:99:b5:00:21:78:ae:5a:
db:10:89:d9:cd:db:03:8c:8b:af:3f:23:c7:28:b4:65:b1:35:
2f:fb:80:b2:df:bb:83:88:04:be:e1:7a:ed:71:fb:ff:06:76:
12:93:5b:8b:ac:9e:4c:60:27:62:7f:04:33:26:29:f4:ba:45:
f7:46:04:99:99:81:e4:f2:9a:ad:fc:94:41:8f:87:86:f7:cb:
77:24:6e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:31:14 2025 by rpki-client