Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/X0VOPwSHvzkDEaI9vdnqoeKICu4.roa
File: X0VOPwSHvzkDEaI9vdnqoeKICu4.roa (raw, json)
Hash identifier: QYZRUmSjoVGFNA4mKmXvECcmo9Gvd4pgJxevI7UENLo=
Subject key identifier: 5F:45:4E:3F:04:87:BF:39:03:11:A2:3D:BD:D9:EA:A1:E2:88:0A:EE
Certificate issuer: /CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Certificate serial: 01992CE848039D374141F7CDBA6331BF31A1
Authority key identifier: 0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/X0VOPwSHvzkDEaI9vdnqoeKICu4.roa
Signing time: Tue 09 Sep 2025 05:17:24 +0000
ROA not before: Tue 09 Sep 2025 05:17:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 91.191.128.0/21 maxlen: 21
91.191.136.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:e8:48:03:9d:37:41:41:f7:cd:ba:63:31:bf:31:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Validity
Not Before: Sep 9 05:17:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f454e3f0487bf390311a23dbdd9eaa1e2880aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ec:37:6b:40:f8:f6:e8:83:04:bd:38:34:85:
2c:9d:04:9b:d7:7b:66:13:e5:24:55:74:54:e6:36:
fc:bb:96:f0:14:ef:a2:dc:6e:de:8c:89:6b:b0:1a:
b6:a4:b7:3c:62:e9:a5:d9:af:0b:85:ef:38:4d:d3:
31:60:c5:db:78:49:1e:69:dd:f0:49:dc:c3:85:cf:
24:a7:05:2c:34:ae:3f:9a:69:cf:79:4c:fc:ad:06:
b5:da:4b:b1:d4:4d:cb:05:55:85:c9:f7:fc:e0:cc:
0c:fa:8b:39:bf:99:81:04:eb:98:52:7f:29:04:19:
9c:18:1e:a6:d1:e3:ad:6b:0e:1a:90:51:18:38:36:
b4:43:61:94:6e:cf:a4:ce:0b:e6:43:63:34:a3:d3:
0f:53:a1:66:aa:f2:04:de:68:7d:42:87:cc:62:6b:
4f:74:bd:d9:83:56:fc:a8:5b:59:5f:79:56:f8:84:
92:97:6d:7f:56:59:28:a7:59:37:61:fc:40:06:5f:
e0:11:f6:a2:dd:62:3a:80:3f:3a:e2:97:dd:6c:a4:
a0:7b:4d:99:39:8d:35:aa:32:cd:7d:40:16:5e:f7:
5d:13:8d:35:cc:4c:8f:95:40:22:34:24:b6:01:5f:
d0:d3:2f:36:ef:6a:d7:a7:6f:20:3b:dc:22:ac:0e:
83:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:45:4E:3F:04:87:BF:39:03:11:A2:3D:BD:D9:EA:A1:E2:88:0A:EE
X509v3 Authority Key Identifier:
keyid:0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/X0VOPwSHvzkDEaI9vdnqoeKICu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.191.128.0/20
Signature Algorithm: sha256WithRSAEncryption
49:28:c1:d2:37:43:cf:4e:07:68:9b:39:45:ec:e3:be:61:79:
a5:4a:b3:dc:92:84:1f:ad:89:df:0f:c6:65:d9:66:33:d4:04:
19:ba:1a:3e:9e:33:98:cf:df:90:2b:79:36:9f:39:9b:90:5f:
7f:2b:69:ad:c4:a6:16:9f:eb:f8:60:a9:ec:17:43:72:73:84:
0e:df:9e:86:c7:68:89:d1:b9:42:f9:bc:7d:6f:c7:80:df:ce:
2d:9a:d6:fb:1f:2f:4d:20:db:18:06:94:5c:a8:8a:06:af:0b:
8d:a1:d4:08:cf:d8:f5:57:73:06:b3:c4:f6:15:61:1b:b5:74:
27:63:96:cb:59:94:30:d2:74:c4:c7:51:98:cb:c7:1b:87:53:
4b:db:61:b2:46:ff:2f:bf:43:c3:18:9d:40:4b:6d:61:de:c9:
00:81:c5:f8:6f:59:04:db:42:ac:4c:58:bc:2b:a2:cc:9e:fc:
13:9a:58:05:ab:07:5f:66:ff:77:c2:8b:f0:fc:eb:4b:0d:d0:
ac:ec:4a:1e:0a:b2:85:31:52:5d:57:ad:c9:05:01:44:47:5a:
cf:fa:bf:da:06:1a:7b:b1:a1:30:6a:d2:20:ea:2e:0a:ab:fb:
9b:32:3c:b2:4a:2d:90:17:1b:9c:77:b2:ce:21:be:05:04:3a:
7f:ed:1e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:25 2025 by rpki-client