Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/6TAg5h6JB3I0CM2Vyicny0RgSwI.roa
File: 6TAg5h6JB3I0CM2Vyicny0RgSwI.roa (raw, json)
Hash identifier: D8FLS1BfWg93BjIKpEgKtuQ3uhfK/yRWFwiL8yH9elI=
Subject key identifier: E9:30:20:E6:1E:89:07:72:34:08:CD:95:CA:27:27:CB:44:60:4B:02
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0197E496927ECBC4DE697E69FA8E62D7CFBD
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/6TAg5h6JB3I0CM2Vyicny0RgSwI.roa
Signing time: Mon 07 Jul 2025 11:12:42 +0000
ROA not before: Mon 07 Jul 2025 11:12:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22160
IP address blocks: 91.200.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Jul 2025 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e4:96:92:7e:cb:c4:de:69:7e:69:fa:8e:62:d7:cf:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jul 7 11:12:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e93020e61e8907723408cd95ca2727cb44604b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:23:8e:56:3e:17:c7:55:1c:9b:ca:80:cd:d5:
fb:5a:25:1c:7d:c6:e2:ff:a6:d1:b2:57:58:3d:a1:
7c:9e:27:3c:c8:cf:83:24:94:38:4f:9b:79:58:1e:
a2:7e:a0:91:8e:71:8e:81:3d:a4:e5:0a:90:e2:dc:
2e:2b:df:b2:6b:18:12:a2:60:11:29:63:56:fa:01:
49:ef:1b:fa:3e:06:3b:e5:13:1e:6b:b8:f6:1a:c4:
7e:8f:c6:ea:a4:59:07:21:5a:37:a9:6d:ce:90:7a:
2d:b9:98:2d:c3:8c:17:2c:fc:c4:3a:80:d6:61:fc:
63:0d:12:c0:a7:f7:1a:f1:5e:22:55:13:aa:e9:de:
a4:f5:56:bd:98:13:c6:ac:bc:14:f7:12:25:a7:ad:
5d:24:ee:69:18:0b:03:4b:6c:61:a7:1c:a9:02:3b:
01:1f:17:dd:fe:71:46:d0:1a:2d:93:45:c5:e9:1a:
3f:06:7e:45:f9:11:cc:37:fa:95:33:fc:ba:6e:63:
59:31:54:a1:6b:02:03:58:a1:76:d9:4b:33:34:2c:
56:e9:9a:54:04:82:72:4e:d1:44:b9:f1:b8:dd:19:
f1:38:68:c9:fa:24:a2:9f:93:fa:1a:14:bc:6f:7e:
8a:f2:23:97:44:23:41:b0:db:d3:3c:11:da:8b:93:
97:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:30:20:E6:1E:89:07:72:34:08:CD:95:CA:27:27:CB:44:60:4B:02
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/6TAg5h6JB3I0CM2Vyicny0RgSwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.221.0/24
Signature Algorithm: sha256WithRSAEncryption
21:88:ba:1f:b9:1c:05:95:1b:3e:0f:9b:dd:8a:98:24:16:72:
e7:e3:56:23:05:50:b6:66:52:07:aa:60:8c:2e:c0:03:41:8f:
78:8c:3d:06:5b:f3:54:0e:fb:12:a7:95:17:3b:2c:4e:cd:b6:
f5:60:88:82:5e:eb:9e:03:eb:96:1f:d1:7e:f6:5d:88:11:0d:
ad:4a:87:44:bd:cb:1f:c2:f6:70:cc:ca:2e:89:82:5c:7d:c3:
34:2d:ac:14:e2:d9:6d:f4:d4:54:6d:1d:04:70:cd:03:ed:69:
69:f9:e4:b5:25:e1:8f:5a:c8:ce:e6:55:c9:f2:df:c8:08:1f:
f9:a3:10:d4:e5:15:8a:6f:50:e1:57:9c:19:e4:9b:10:22:6d:
07:59:5a:2f:54:0d:c0:1e:31:b9:00:fe:90:f5:de:d4:ec:7c:
c0:ce:36:d4:25:50:4b:9e:2c:25:82:e5:24:c1:c7:85:c9:de:
7f:17:d3:7e:28:92:d2:d5:f8:d6:15:2b:a0:e9:7d:fd:37:ec:
e7:b0:33:8b:b9:fa:05:7f:90:d6:0e:19:1a:df:fd:a0:2e:42:
d6:f0:d7:0b:02:7a:cc:b1:46:5f:6c:07:06:30:47:09:ab:31:
1c:9e:dd:5d:88:37:4b:67:1a:4d:88:95:03:24:6b:b8:f8:3a:
06:87:a9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 10:53:34 2025 by rpki-client