Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/tXRtPKP9Oxbd9TzUo4NhbcHEFn4.roa
File: tXRtPKP9Oxbd9TzUo4NhbcHEFn4.roa (raw, json)
Hash identifier: Ris6hBqNWZMF+s12g2tQvmQ1NwSTPRPOxXDkCZqMFA4=
Subject key identifier: B5:74:6D:3C:A3:FD:3B:16:DD:F5:3C:D4:A3:83:61:6D:C1:C4:16:7E
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019A581550DCB83E9C439A4344099520D5FE
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/tXRtPKP9Oxbd9TzUo4NhbcHEFn4.roa
Signing time: Thu 06 Nov 2025 07:33:03 +0000
ROA not before: Thu 06 Nov 2025 07:33:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208241
IP address blocks: 91.223.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 12:35:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:58:15:50:dc:b8:3e:9c:43:9a:43:44:09:95:20:d5:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 6 07:33:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5746d3ca3fd3b16ddf53cd4a383616dc1c4167e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:53:af:e5:ac:18:2e:bd:dc:66:61:b1:34:61:
7e:6a:0c:1d:6c:a3:24:d5:bf:2d:25:7f:10:7e:3b:
7c:26:03:01:57:3d:ea:84:72:e5:f1:ec:40:57:18:
56:c0:0a:57:11:e8:df:c7:89:f1:5d:39:f6:99:02:
34:a0:b8:cb:db:63:42:9c:b0:9f:2e:bf:e4:8f:b9:
79:78:48:ef:e2:9a:d3:8b:96:ee:4b:92:16:23:3b:
76:bd:a2:ef:91:64:3a:5b:1c:53:b0:e8:16:20:2b:
b0:ce:b5:43:6e:a0:48:d4:7a:f3:64:e2:fc:01:20:
65:fc:b2:25:c2:dd:37:b3:bf:79:a2:c4:e2:6e:d8:
71:20:ae:13:06:b6:9a:27:b6:6e:6d:70:34:48:63:
64:dd:70:ce:d4:b8:6a:3b:46:63:57:68:de:bd:47:
e3:95:38:70:a6:57:db:0f:c3:28:e5:42:dd:c3:74:
98:00:ed:e9:ae:37:e8:43:69:11:9b:9f:ff:3e:8f:
08:e8:87:35:37:99:48:06:5a:a2:9f:27:79:5f:ab:
30:ad:5c:e4:41:37:05:eb:88:2c:da:c4:2c:60:f0:
42:1a:ef:6f:83:ec:5a:ac:b2:5a:22:42:30:99:b5:
2e:a8:5e:f4:5e:2e:bb:f0:a2:25:e9:48:55:b0:86:
eb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:74:6D:3C:A3:FD:3B:16:DD:F5:3C:D4:A3:83:61:6D:C1:C4:16:7E
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/tXRtPKP9Oxbd9TzUo4NhbcHEFn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.110.0/24
Signature Algorithm: sha256WithRSAEncryption
91:97:96:e2:55:39:5e:47:f9:10:43:78:d7:a6:0d:b0:03:02:
42:38:5c:2b:f2:e7:a6:56:b2:bc:a4:f0:82:a7:ee:4e:b4:02:
f5:37:c7:bd:dd:f1:4b:c5:e2:2c:25:2e:e3:01:79:18:b9:8f:
0f:bc:31:de:2f:0c:73:c8:e6:65:3f:b8:0c:99:80:93:bb:ee:
96:1a:82:0e:46:f8:c3:bc:64:42:e2:a9:54:38:b2:ab:69:f8:
dc:35:6d:29:c4:7c:11:01:3c:e9:aa:7f:eb:a7:26:be:81:a5:
be:79:46:73:3f:61:db:5d:24:69:32:cf:a4:f2:2c:34:c3:1e:
b4:13:97:37:4a:e0:c1:33:dc:fc:34:1e:16:5d:83:34:64:17:
3a:ea:b0:a5:6a:aa:c8:c9:f0:8d:31:94:e6:1f:3b:7f:8e:2e:
e9:15:67:f6:9b:99:6a:5a:5d:8a:bf:cd:70:5f:07:fd:f6:b7:
03:ff:b7:e9:0e:dc:94:4f:17:29:21:8d:43:43:d2:0a:96:e1:
67:7f:17:8c:83:04:41:ec:34:4e:17:42:43:52:f8:ee:a1:92:
26:21:a5:f1:f0:a3:9f:0c:8f:4f:a6:28:6b:cd:03:6e:60:d0:
76:84:99:e6:97:d9:8a:86:9b:9b:e8:c4:f9:15:e9:a6:bc:fd:
e4:2d:16:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 18:46:53 2025 by rpki-client