Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/k-unbvIHRxHT5yM1y8qlc9Btn9o.roa
File: k-unbvIHRxHT5yM1y8qlc9Btn9o.roa (raw, json)
Hash identifier: oS7YlGyyrNnyQ6jzR/qaKUsVU55hphXEbQnqQD/HGLA=
Subject key identifier: 93:EB:A7:6E:F2:07:47:11:D3:E7:23:35:CB:CA:A5:73:D0:6D:9F:DA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0196ED7551023CD89211891307FCD6410005
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/k-unbvIHRxHT5yM1y8qlc9Btn9o.roa
Signing time: Tue 20 May 2025 11:30:10 +0000
ROA not before: Tue 20 May 2025 11:30:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209101
IP address blocks: 45.151.91.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 08:25:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:75:51:02:3c:d8:92:11:89:13:07:fc:d6:41:00:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 20 11:30:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93eba76ef2074711d3e72335cbcaa573d06d9fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:24:04:98:63:16:4b:76:b8:92:df:70:58:f5:
97:0d:fc:c3:20:ed:02:b5:51:56:3c:c5:3a:d5:36:
68:35:15:91:fc:f0:41:ee:7c:88:4a:d2:a8:d8:15:
4f:7e:14:29:22:c9:b7:4b:48:be:d8:3f:a5:d4:c8:
9e:48:b6:5e:f1:53:54:a2:c7:83:f6:f0:d0:49:06:
a5:0f:41:4d:de:3b:b4:24:f5:f5:85:06:f3:84:75:
30:f2:42:bd:4a:e1:56:f7:eb:2d:1f:7f:04:4f:d1:
52:25:c5:8d:0d:ad:b4:6b:54:c7:be:a4:a9:a0:5f:
4a:61:a2:bc:c1:3b:4c:37:4e:51:72:e6:8c:48:23:
90:7e:fa:b9:02:e6:bb:9f:4d:5d:aa:11:4f:0d:9a:
1e:57:dd:e0:54:19:cb:84:41:cd:2c:a7:38:77:f4:
23:93:aa:15:c0:b0:11:ee:3e:22:4c:31:8a:40:12:
63:71:5e:0c:fd:96:3b:ea:ac:87:6f:83:3c:82:2a:
22:6e:9e:5d:4d:0e:3d:82:74:ed:c0:dc:f7:44:27:
4b:57:eb:26:2a:4e:2e:2c:9b:2f:3b:f1:0b:24:9c:
5c:29:69:f7:14:70:85:94:79:a2:67:23:36:64:07:
2a:20:72:29:72:3a:04:e6:a9:0e:27:c1:2a:e2:6e:
71:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:EB:A7:6E:F2:07:47:11:D3:E7:23:35:CB:CA:A5:73:D0:6D:9F:DA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/k-unbvIHRxHT5yM1y8qlc9Btn9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.91.0/24
94.154.172.0/24
Signature Algorithm: sha256WithRSAEncryption
07:e7:94:db:2c:79:86:9d:76:2f:30:6c:05:0d:85:c2:1b:4c:
fe:5c:7c:b5:49:94:76:af:5c:1a:67:b3:c0:3c:51:22:33:72:
04:fa:62:76:b8:8c:f9:b6:e6:9f:a5:d0:19:60:a8:5c:d6:07:
5d:02:22:7b:8c:94:dd:b0:28:c0:cc:d8:18:8c:93:d6:e8:1b:
54:5b:d9:77:c1:1a:31:8a:ef:bf:7c:62:c9:b6:d0:07:ad:0c:
d8:4b:bc:87:6d:3b:e6:e7:ac:87:6d:37:7a:20:23:14:0e:84:
13:97:d6:3c:ed:68:d1:e5:b6:e8:e2:97:19:34:f8:b3:66:2e:
60:b6:2b:37:1b:e2:fe:1f:e6:04:cc:07:8f:6f:05:05:c2:56:
42:79:94:06:32:fe:dc:fb:63:82:8b:b6:8a:f8:f2:fb:97:a7:
2e:0b:d1:cf:bf:28:fa:4b:7e:3a:db:56:9e:e5:0f:33:4d:81:
7f:2b:08:a1:d3:28:df:12:3e:db:b6:72:6d:68:07:9b:1d:b4:
ec:75:2d:9f:9a:65:bf:22:ea:6d:11:e9:0f:4f:6d:2c:80:6c:
00:a7:67:e2:87:11:7a:65:c2:2e:36:f8:50:1b:87:f0:6f:ba:
81:7d:40:8c:c8:e2:a9:b3:46:33:f7:fd:83:ce:32:f1:21:43:
76:56:78:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:04:57 2025 by rpki-client