Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/AU3u1VuwQfZckeT14fdrTId0G1k.roa
File: AU3u1VuwQfZckeT14fdrTId0G1k.roa (raw, json)
Hash identifier: VL9lGqOz9NbiJezJsH1muW4OGo8/usp9uiYXSnWyMI4=
Subject key identifier: 01:4D:EE:D5:5B:B0:41:F6:5C:91:E4:F5:E1:F7:6B:4C:87:74:1B:59
Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Certificate serial: 019931AF64DC37D5E42B6737248074EFCACB
Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/AU3u1VuwQfZckeT14fdrTId0G1k.roa
Signing time: Wed 10 Sep 2025 03:33:22 +0000
ROA not before: Wed 10 Sep 2025 03:33:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214789
IP address blocks: 91.147.110.0/24 maxlen: 24
194.164.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:af:64:dc:37:d5:e4:2b:67:37:24:80:74:ef:ca:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Validity
Not Before: Sep 10 03:33:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=014deed55bb041f65c91e4f5e1f76b4c87741b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:93:fb:ce:0b:08:d5:97:08:a9:fe:fc:05:2e:
01:6a:19:ae:64:3e:16:19:6f:5a:a7:b4:1b:78:62:
fa:53:c1:ac:80:b6:3a:8a:1f:2f:0e:90:9e:a1:26:
70:20:8e:82:41:bf:1b:8d:d6:6e:00:f1:8b:b2:90:
7e:46:c4:24:e3:37:c8:75:9d:58:a5:aa:3d:6f:22:
61:4e:8d:1c:39:91:de:97:59:1b:68:cc:1f:d9:ff:
cb:a6:7f:2b:32:ad:f7:f0:cb:3a:4c:2b:17:12:31:
9d:2d:38:f6:dd:db:23:25:0e:14:fd:a4:d7:3b:8c:
3d:dd:b5:6d:d2:6a:75:c1:db:e2:6a:fb:41:17:d8:
c7:82:e7:8d:32:3c:ff:29:76:a1:81:75:22:34:b3:
fb:88:2a:e3:c4:70:fe:b3:a9:7e:15:42:e7:b2:00:
3c:04:bb:99:7a:6e:70:04:34:21:65:51:2e:13:e4:
81:41:95:db:db:1b:ec:33:e3:46:23:d1:3f:a8:c2:
15:7c:66:d9:42:47:47:bb:e2:55:12:0a:fc:3d:73:
0b:e7:4e:12:a8:1f:ca:62:c3:66:2b:e3:d8:7e:d1:
85:4e:3d:cf:cf:7b:c3:54:98:3e:7c:da:76:69:f0:
c2:ee:41:41:01:71:82:ca:c6:3c:15:f3:e3:d8:c7:
ed:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:4D:EE:D5:5B:B0:41:F6:5C:91:E4:F5:E1:F7:6B:4C:87:74:1B:59
X509v3 Authority Key Identifier:
keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/AU3u1VuwQfZckeT14fdrTId0G1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.110.0/24
194.164.115.0/24
Signature Algorithm: sha256WithRSAEncryption
18:ac:0f:9b:14:28:ba:0c:a9:db:5f:28:9b:11:9b:86:60:46:
5a:88:ce:86:29:9b:dc:74:5b:2d:22:62:d3:a5:0a:8e:c2:64:
ee:c1:3f:f6:06:a9:57:94:c9:7d:dc:0b:21:19:86:98:96:18:
9e:f7:3e:71:db:9e:17:b3:a4:39:33:d0:f2:a3:fa:67:c9:f2:
2a:39:a0:52:ce:72:7c:f3:9d:c5:1d:07:ac:c3:08:da:f6:34:
8c:27:f9:84:03:7e:7e:4a:48:5e:d3:f4:bf:58:82:56:6d:c6:
9d:ed:bc:c0:11:b6:d3:32:b7:57:b4:59:c5:5c:10:a3:4a:66:
31:91:06:a8:8d:36:1c:47:ce:88:9b:6d:db:8b:a0:50:39:25:
3b:e7:b4:70:56:40:6e:2e:e0:60:7d:19:2d:7a:84:fc:6b:60:
75:91:b6:02:f0:07:96:5e:48:82:fe:cb:34:d3:e1:b2:0c:cb:
d6:de:c2:a9:92:92:73:9d:17:16:35:07:52:01:83:02:7e:57:
1f:47:42:b1:8e:d8:ca:fa:5a:a0:cb:78:e0:5b:67:aa:2e:e4:
1d:c7:5a:d8:d4:20:ad:e3:29:8b:a2:dd:ab:ec:7a:e4:49:54:
79:26:93:93:a3:8e:0e:92:31:ce:45:fd:98:2d:e4:9e:1c:40:
e0:f8:35:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 13:07:49 2025 by rpki-client