Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/B6bhuDNpDuevEHZ19SeWCNW99rQ.roa
File: B6bhuDNpDuevEHZ19SeWCNW99rQ.roa (raw, json)
Hash identifier: pOV3p5Ey4fmwroAFxyoZLB4XCjD3dz2oZcOtKKQJEOs=
Subject key identifier: 07:A6:E1:B8:33:69:0E:E7:AF:10:76:75:F5:27:96:08:D5:BD:F6:B4
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 01982E86D7DC6E97F81FD16A7C8ABF2EA21B
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/B6bhuDNpDuevEHZ19SeWCNW99rQ.roa
Signing time: Mon 21 Jul 2025 19:47:25 +0000
ROA not before: Mon 21 Jul 2025 19:47:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216405
IP address blocks: 91.108.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2e:86:d7:dc:6e:97:f8:1f:d1:6a:7c:8a:bf:2e:a2:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Jul 21 19:47:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07a6e1b833690ee7af107675f5279608d5bdf6b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:72:7e:f0:9e:92:d9:3c:bb:8a:78:f6:53:8f:
fd:19:5e:60:ac:74:2d:92:ed:67:e7:e8:6d:74:69:
4e:bd:cb:14:b0:bd:55:cf:7e:8b:08:28:39:6f:6b:
50:16:b2:aa:bd:e4:cf:4c:b6:58:5c:a5:ea:9c:d6:
2a:28:4a:7a:5c:c1:72:83:f5:1e:7d:e9:32:49:4c:
37:59:6b:13:56:01:35:66:e4:40:f1:09:4f:ca:27:
19:75:1e:bb:ba:76:aa:1c:a7:fd:97:12:8b:56:e5:
1d:e2:33:37:2a:9a:6f:75:8b:e1:4c:04:1b:5a:1c:
62:a5:24:07:02:27:08:6c:27:12:88:ee:18:dc:c9:
a4:4c:8e:4e:27:0a:bc:a1:e3:64:08:7f:9d:01:eb:
3c:b8:d5:eb:64:c2:fd:6b:d9:4f:e8:16:79:93:b6:
e6:9b:cf:d7:66:9f:31:d3:f7:c6:43:1d:56:4e:b1:
7b:04:41:4a:92:29:b3:f9:e1:d5:76:9b:6b:e2:55:
75:9e:77:8b:d1:ae:f6:00:5c:cd:ef:8a:80:d7:a7:
69:06:23:02:b5:37:8b:12:14:3a:69:d1:a8:16:57:
b0:47:5c:b3:16:ba:73:ed:70:03:bb:04:c1:67:f8:
0e:24:a9:3e:b1:aa:97:cf:c9:e4:7b:8a:c0:ca:95:
0b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A6:E1:B8:33:69:0E:E7:AF:10:76:75:F5:27:96:08:D5:BD:F6:B4
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/B6bhuDNpDuevEHZ19SeWCNW99rQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.254.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:f6:49:8f:73:8e:e7:87:df:00:7c:bb:c6:cb:36:50:af:ec:
d8:a9:a0:74:f3:0c:ad:1b:7a:47:1a:e0:af:28:0f:ae:55:6d:
52:5c:b6:46:63:5a:d5:ef:2f:87:a3:65:d9:f4:35:ea:82:1d:
1a:ef:0e:fe:53:4b:41:2d:a7:64:60:91:3b:bc:5c:e0:22:15:
e6:b7:98:5b:f1:b3:f1:a3:1d:0e:ec:54:a1:0a:c0:da:fc:7c:
3d:da:bf:c9:2f:2d:56:ed:ef:4f:f2:f3:27:64:81:a4:b3:0f:
4f:db:76:8e:26:1f:b8:16:26:62:bd:bf:2d:f2:4b:7a:fd:93:
04:66:d4:af:ee:4b:82:49:1d:92:55:d9:9c:5f:cd:cc:73:b6:
dd:68:e1:91:48:39:d1:b0:51:d4:91:a5:f1:fa:30:40:c2:5b:
c2:ff:1a:ae:50:c5:cd:74:55:51:43:f8:a9:97:bb:d2:f3:aa:
05:3f:b8:30:75:c8:57:8d:45:90:fc:fe:89:09:af:7f:9f:b4:
fb:c0:23:3d:88:07:ef:94:65:6c:78:d0:3f:5d:41:d1:3e:80:
4b:2f:be:a9:55:bb:23:b0:64:43:4d:15:c1:67:3f:d5:67:e5:
c7:21:14:f4:16:9a:c2:d9:9b:b8:21:3c:d0:18:2b:6b:3c:9e:
11:93:d9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 16:35:36 2025 by rpki-client