Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/qYoYfUlCCn9zP-yDwbrlHyj3qyU.roa
File: qYoYfUlCCn9zP-yDwbrlHyj3qyU.roa (raw, json)
Hash identifier: AiZ+gWtLdz0jof3tMOVdLJ+BBsLKxSxUlK2q0zbs/tg=
Subject key identifier: A9:8A:18:7D:49:42:0A:7F:73:3F:EC:83:C1:BA:E5:1F:28:F7:AB:25
Certificate issuer: /CN=0ede17b8caf02461bf54c0964ed38a2590062f94
Certificate serial: 0196F6431AA4B607BA7F8BAABCC7C25D5939
Authority key identifier: 0E:DE:17:B8:CA:F0:24:61:BF:54:C0:96:4E:D3:8A:25:90:06:2F:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/qYoYfUlCCn9zP-yDwbrlHyj3qyU.roa
Signing time: Thu 22 May 2025 04:31:54 +0000
ROA not before: Thu 22 May 2025 04:31:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196659
IP address blocks: 91.102.232.0/21 maxlen: 24
91.102.233.0/24 maxlen: 24
91.102.234.0/24 maxlen: 24
91.102.235.0/24 maxlen: 24
91.102.236.0/24 maxlen: 24
91.102.237.0/24 maxlen: 24
91.102.238.0/24 maxlen: 24
91.102.239.0/24 maxlen: 24
2a0b:c9c0:1::/48 maxlen: 48
2a0b:c9c0:2::/48 maxlen: 48
2a0b:c9c0:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f6:43:1a:a4:b6:07:ba:7f:8b:aa:bc:c7:c2:5d:59:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ede17b8caf02461bf54c0964ed38a2590062f94
Validity
Not Before: May 22 04:31:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a98a187d49420a7f733fec83c1bae51f28f7ab25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1f:3e:55:92:b2:d7:06:bf:04:62:04:e5:fc:
e9:b6:38:67:82:9a:68:97:d1:9c:87:5a:da:3d:bb:
c0:52:ce:7d:76:90:fb:4c:a1:78:01:27:01:aa:79:
3a:96:cb:27:df:8e:49:25:90:d7:aa:87:ed:51:77:
17:c5:4b:79:0f:38:70:94:06:68:9d:ba:15:3f:9e:
fc:65:07:e2:16:9c:f4:7a:3b:d0:cd:9b:63:da:c4:
a6:20:c3:c7:46:81:e8:d7:b4:80:0b:36:85:e4:79:
c4:85:36:02:e6:f4:c5:2a:fc:c1:ef:44:91:4b:b5:
61:b2:0c:d4:87:5f:15:3a:24:d6:62:f3:b9:cc:f0:
42:cb:5c:08:6e:02:7d:93:36:ef:cb:e9:f8:d7:c6:
74:e1:4b:27:3f:bc:11:54:52:cd:d1:7a:e4:2e:85:
1e:6a:62:af:b8:78:e3:8c:80:8f:0e:2e:1c:ec:2a:
a5:61:74:35:b5:7c:0a:4a:c9:d3:3b:2c:53:41:82:
4c:5e:52:27:f5:3b:ac:c7:34:e5:59:59:5f:2a:26:
0b:45:86:77:b5:cd:73:8b:f9:f8:48:d7:4c:b7:7f:
f5:46:31:f9:64:68:72:28:0a:9a:02:d7:4b:3b:a8:
5b:b2:0d:68:a1:d5:fe:68:6b:f6:b7:ac:78:e2:b3:
76:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8A:18:7D:49:42:0A:7F:73:3F:EC:83:C1:BA:E5:1F:28:F7:AB:25
X509v3 Authority Key Identifier:
keyid:0E:DE:17:B8:CA:F0:24:61:BF:54:C0:96:4E:D3:8A:25:90:06:2F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/qYoYfUlCCn9zP-yDwbrlHyj3qyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.232.0/21
IPv6:
2a0b:c9c0:1::-2a0b:c9c0:3:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
d1:f5:9d:a2:53:ff:c2:21:d3:31:da:a5:3e:c9:1c:8e:7e:cd:
96:4e:59:bd:b7:e9:7c:ad:e1:be:c1:33:9c:1d:b3:f1:ef:90:
b0:d7:37:48:7a:57:fc:85:af:03:b6:d7:68:e4:38:ab:3d:3e:
30:e3:a2:30:f2:c2:3d:0c:2e:85:ab:1e:13:0e:5a:80:99:1d:
f4:f8:55:77:28:12:6f:f1:8c:9d:3e:2d:6c:60:7f:05:e1:60:
8b:d6:13:33:78:7a:3a:43:e3:27:6f:49:ac:e1:5d:ba:21:fa:
a9:9c:77:76:26:f7:3b:f4:db:8f:9b:46:5c:63:2e:c2:cf:d6:
65:eb:d6:dc:88:70:c5:0d:fe:c9:4e:9b:db:d1:51:7d:6c:7b:
a7:35:47:12:9c:80:d9:fa:c0:23:c5:d7:7c:24:48:3f:94:f9:
2a:ef:85:35:7c:2c:f3:ab:1d:d4:9b:56:7d:c7:58:43:de:fa:
71:21:4f:a7:a7:32:2f:e5:87:dd:26:dc:75:41:c4:88:e6:0c:
15:2b:89:d6:56:f5:db:aa:a0:42:29:eb:02:a4:2f:b5:7f:46:
18:64:7f:96:57:5e:40:28:ac:11:1b:2c:ca:e8:65:db:81:f4:
c5:19:9a:7b:bb:f6:40:39:e2:bc:e1:22:41:aa:97:62:62:79:
27:8e:c0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:15:55 2025 by rpki-client