Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/CIo-BgB8VLz23mVvzLJf5y1Jozw.roa
File: CIo-BgB8VLz23mVvzLJf5y1Jozw.roa (raw, json)
Hash identifier: suwTTo+nD8SR7uRS4oyE8ZrCaTgcEyJrOHNdenAG8Xk=
Subject key identifier: 08:8A:3E:06:00:7C:54:BC:F6:DE:65:6F:CC:B2:5F:E7:2D:49:A3:3C
Certificate issuer: /CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
Certificate serial: 0197C2862CCC9D4CC7B4D60BB85FC254D294
Authority key identifier: AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/CIo-BgB8VLz23mVvzLJf5y1Jozw.roa
Signing time: Mon 30 Jun 2025 20:27:42 +0000
ROA not before: Mon 30 Jun 2025 20:27:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 91.108.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 16:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:86:2c:cc:9d:4c:c7:b4:d6:0b:b8:5f:c2:54:d2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
Validity
Not Before: Jun 30 20:27:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=088a3e06007c54bcf6de656fccb25fe72d49a33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:89:19:a3:27:a3:fa:77:bd:b0:1d:49:97:a8:
51:63:9e:9a:d7:a5:ee:05:a5:7a:94:a8:a1:2d:1b:
6b:ef:2d:99:fd:16:4c:d7:44:2a:68:57:1d:d8:c8:
82:19:0a:fc:ed:78:ad:21:5f:2d:e3:58:59:02:ab:
93:6c:6c:ff:ff:17:cc:75:4c:32:b5:87:b7:7d:b4:
de:79:18:cc:fb:1c:9f:e7:f3:11:c1:a8:24:49:20:
17:17:a6:c8:aa:e1:a5:2d:70:44:80:ea:fe:a7:df:
24:aa:29:4c:62:72:2d:43:47:c7:aa:f4:d3:91:f5:
86:d2:db:86:46:27:7e:ea:55:aa:24:b3:b9:0b:fd:
bd:fb:dd:a7:bc:11:7c:d5:80:0f:1e:46:0b:d0:62:
89:ec:c7:8e:0d:5b:db:30:4d:9d:4d:72:2e:58:ac:
e2:43:29:1b:86:36:a0:d1:ff:47:33:89:8a:97:b1:
21:52:15:b9:34:25:9b:de:c5:d0:68:94:c5:85:06:
95:3b:d8:99:e1:75:2e:27:2d:12:48:c5:e3:16:75:
5c:30:80:aa:8e:84:6c:c9:c4:06:dd:21:3d:a0:9b:
8b:aa:a0:86:6e:58:11:09:a2:c6:b5:08:00:e5:7a:
b3:7a:73:67:50:e3:cb:7c:75:11:3c:4f:0d:67:af:
f2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8A:3E:06:00:7C:54:BC:F6:DE:65:6F:CC:B2:5F:E7:2D:49:A3:3C
X509v3 Authority Key Identifier:
keyid:AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/CIo-BgB8VLz23mVvzLJf5y1Jozw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.186.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:3b:77:fc:e6:90:1d:35:f6:17:98:4b:2c:ae:bf:58:9e:84:
b1:00:25:72:94:a0:cd:f7:a5:22:b2:87:60:fe:18:7c:b9:12:
e3:e5:d2:85:92:03:af:86:a9:b3:be:4e:67:e5:be:35:d1:4c:
ea:c4:b5:c2:04:41:03:a0:64:af:70:74:cc:6e:48:37:d3:1d:
61:59:8d:60:41:1b:9d:c3:e9:85:7b:e7:28:c0:59:07:2e:f3:
9d:4b:b4:ad:bd:16:84:5c:15:49:80:95:e9:fb:88:7e:fc:b9:
f3:be:cc:4f:f1:95:62:05:fa:2e:bd:68:01:26:d7:22:3a:93:
0c:f5:5a:64:5e:e1:c7:70:d0:65:4a:78:91:2b:90:a2:cd:c3:
f1:2a:7d:8a:84:95:ce:07:67:0b:7f:84:c0:fd:08:5c:c1:31:
ca:3b:d9:d5:51:76:cc:f8:43:ae:dd:f3:63:35:c5:28:d6:58:
a2:9b:56:3a:ee:16:72:9f:4f:c1:3f:c3:b7:5c:07:51:fe:92:
c4:9a:a2:71:25:9f:37:2c:d8:ca:1a:37:7f:3b:58:b4:fc:0d:
3e:f4:51:62:79:84:8e:30:3f:4a:c6:5b:e3:ea:9c:ca:4a:aa:
d3:9e:a0:f7:f9:e1:a4:42:1e:6a:85:49:92:c1:52:85:e1:b9:
91:65:90:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 21:32:29 2025 by rpki-client