Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/P8Q-dEsRs4H8f4xsbLowkJwmY-M.roa
File: P8Q-dEsRs4H8f4xsbLowkJwmY-M.roa (raw, json)
Hash identifier: dvuvjztjSPRyovxa6mOiurUCRvnf3SsP4Zst2kQEuLU=
Subject key identifier: 3F:C4:3E:74:4B:11:B3:81:FC:7F:8C:6C:6C:BA:30:90:9C:26:63:E3
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 0199017C21762D334EA31B2D130C667F2B74
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/P8Q-dEsRs4H8f4xsbLowkJwmY-M.roa
Signing time: Sun 31 Aug 2025 18:55:36 +0000
ROA not before: Sun 31 Aug 2025 18:55:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60707
IP address blocks: 91.228.12.0/24 maxlen: 24
91.228.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 21:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:01:7c:21:76:2d:33:4e:a3:1b:2d:13:0c:66:7f:2b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Aug 31 18:55:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fc43e744b11b381fc7f8c6c6cba30909c2663e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d6:6c:9a:e5:78:02:1c:d2:6d:21:de:91:ec:
5c:04:2b:9d:05:d5:24:7e:3f:c6:ef:3c:37:2c:0d:
6f:ac:b5:05:72:88:36:5f:cc:16:67:f0:f4:12:b3:
b6:ec:fa:ca:65:b3:15:9b:61:1b:1e:87:80:eb:58:
19:3f:b4:e9:13:d0:d3:23:64:7c:75:1a:b3:e3:44:
20:71:ae:5f:5d:f2:be:19:f0:8e:e8:8c:b0:3c:5f:
40:c4:8d:e6:a9:04:59:4b:b8:c0:31:87:fe:68:28:
ba:7b:b0:54:22:ba:70:18:fb:ef:df:d0:5d:af:cc:
f7:43:70:6a:e8:ac:26:21:ae:45:ed:c4:8d:31:1e:
8e:00:84:b5:91:50:5d:60:ad:90:66:57:a6:38:34:
bc:69:59:2d:26:3c:bc:5f:07:ae:e1:81:18:da:04:
34:00:31:f3:91:d3:76:30:6a:c2:d3:08:7e:49:88:
8f:56:b0:b9:e1:ca:36:e4:e2:72:3d:49:6e:02:32:
20:be:5c:ea:4c:fb:a1:5d:bb:de:ca:52:c0:63:9e:
6a:96:29:02:aa:a7:77:82:dd:21:a0:29:00:4b:11:
d7:53:14:f9:d8:cd:90:24:d7:f7:36:f6:fb:c0:60:
50:05:1c:85:2a:99:29:b6:47:d0:ac:67:4b:dc:ec:
fe:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C4:3E:74:4B:11:B3:81:FC:7F:8C:6C:6C:BA:30:90:9C:26:63:E3
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/P8Q-dEsRs4H8f4xsbLowkJwmY-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.12.0/24
91.228.14.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:1a:29:ee:80:f7:71:13:94:69:c6:2d:e6:35:37:d6:dd:ff:
4d:5f:2b:e1:9a:b7:98:73:a8:26:ad:44:36:15:7e:eb:02:a3:
0e:41:63:8e:54:3e:d4:6e:77:7b:80:dc:51:df:fb:07:3c:dc:
9f:5e:3b:4e:0f:ba:e6:eb:40:2d:a3:99:60:aa:21:10:5d:ba:
23:99:05:de:b8:ac:55:d1:3f:bd:73:f9:62:7a:dc:39:00:2f:
2d:9d:80:ce:ba:17:c6:12:79:89:bf:a8:04:7c:97:b7:f5:3e:
36:51:07:bb:ef:ba:95:18:cc:e2:f5:00:24:8e:1a:9e:3a:3d:
4a:a8:e3:0a:34:78:94:51:cf:ad:9a:f8:ca:a9:d0:3a:a4:9e:
69:00:e2:0a:10:d4:e7:54:da:c9:a4:45:20:99:fe:b9:ca:67:
cd:a3:02:80:6f:35:ed:c8:49:af:f8:39:86:42:43:9f:5b:52:
85:70:e9:ef:ea:4c:98:be:38:0d:49:0d:a8:8e:cd:48:99:09:
99:35:e9:81:aa:8e:d4:0f:59:d3:27:8f:48:75:82:2d:7b:e0:
8d:c3:a7:78:66:3a:f2:63:99:3b:7b:f8:20:a5:39:60:27:c9:
47:7f:ba:23:db:3e:e0:7e:f0:f7:44:ae:be:57:40:d0:24:b3:
cd:a5:a9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 05:01:12 2025 by rpki-client