Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/IMmNfpSRVyc9d84nynEHmEk_lj8.roa
File: IMmNfpSRVyc9d84nynEHmEk_lj8.roa (raw, json)
Hash identifier: CpQGlsJ12iJFqosZ5+2LrNvjHZgiGDKRRsy+udORmkU=
Subject key identifier: 20:C9:8D:7E:94:91:57:27:3D:77:CE:27:CA:71:07:98:49:3F:96:3F
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 01980D7EC5AB20EBF7474CD0D8C21AC61A76
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/IMmNfpSRVyc9d84nynEHmEk_lj8.roa
Signing time: Tue 15 Jul 2025 09:51:08 +0000
ROA not before: Tue 15 Jul 2025 09:51:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 91.108.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0d:7e:c5:ab:20:eb:f7:47:4c:d0:d8:c2:1a:c6:1a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Jul 15 09:51:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20c98d7e949157273d77ce27ca710798493f963f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3a:8b:fe:d4:5c:ea:4c:20:3c:30:66:79:d9:
f8:31:25:71:39:c2:90:cc:33:17:01:c1:50:6f:d0:
1d:fc:f1:bd:77:59:47:78:55:90:00:86:59:81:73:
ef:da:fb:fa:a5:58:9c:ce:16:57:5f:24:d8:b3:75:
8b:35:f2:60:0d:0d:4b:02:30:20:dd:00:43:28:67:
04:da:86:e8:4b:00:ef:ba:30:ed:4a:8c:45:48:0f:
83:f2:ae:22:55:16:99:02:13:82:a0:9c:1c:c8:f8:
e1:cc:f6:49:5d:79:fa:80:7c:d7:8e:5a:ac:8f:e5:
c6:f5:1f:2d:34:c5:d9:33:b3:54:fd:6d:3f:22:f0:
a5:32:2a:45:ba:a8:ed:7d:42:b2:c2:c1:ae:b2:54:
f5:35:43:5f:0a:56:23:82:63:e5:a9:11:f0:ae:eb:
24:7f:89:b9:e1:8b:85:35:05:aa:90:15:4b:67:53:
e7:37:ed:1a:26:aa:1b:45:5f:4e:67:b3:b2:dc:93:
22:a0:a7:05:6d:30:6b:eb:e2:0b:f5:15:0d:72:80:
6d:92:fd:3e:b8:b6:c3:f1:7c:02:88:2c:8e:5e:41:
94:c4:27:8b:32:1d:11:2b:74:b5:f1:dd:d9:a8:84:
a6:f4:aa:6d:31:8f:45:ff:a0:94:49:58:4e:57:73:
b8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C9:8D:7E:94:91:57:27:3D:77:CE:27:CA:71:07:98:49:3F:96:3F
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/IMmNfpSRVyc9d84nynEHmEk_lj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.237.0/24
Signature Algorithm: sha256WithRSAEncryption
97:18:92:71:6f:88:29:6d:59:eb:ce:f5:e5:b7:9e:80:f7:55:
be:23:8f:31:94:32:7c:36:f4:60:0c:a7:b1:27:43:24:ac:a9:
05:dd:af:be:2e:b2:f4:20:74:fe:cb:a4:ad:f0:e6:ff:77:13:
e4:57:12:58:23:7f:e4:54:cd:ad:76:7a:01:c4:89:d9:22:e7:
b8:6e:6a:78:a3:19:3f:5d:38:75:cb:9d:d0:97:d7:b3:3b:12:
f8:b7:19:ef:ff:71:d0:51:9c:6d:a4:30:22:35:34:29:d7:90:
07:89:04:83:d2:ff:55:11:97:54:a3:76:0d:98:6e:55:f5:9b:
0a:25:e8:b0:50:53:9c:8f:36:4b:b2:68:54:a4:18:cf:a8:cf:
99:9a:a5:25:02:4a:a0:54:99:d9:b1:71:62:c8:ed:f6:85:d7:
be:3a:6f:2d:fe:a1:84:cf:de:c7:51:64:fe:be:6d:3e:da:0f:
8b:8f:6c:fa:c4:87:28:22:c3:5d:c2:c4:67:22:dd:c7:6e:42:
a1:1a:d8:0d:a7:25:a0:cb:73:ae:f2:86:ed:9b:b2:15:43:a2:
4d:29:b9:cb:8c:9b:dc:6d:86:a1:9f:c0:84:f3:41:07:61:a6:
bf:64:ad:ac:34:6a:73:ac:db:e9:20:a8:06:6c:8b:81:f0:0a:
52:78:da:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 16:33:54 2025 by rpki-client