Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/0CCtO-p9B4ORLnQWHO_vIlBkP0Y.roa
File: 0CCtO-p9B4ORLnQWHO_vIlBkP0Y.roa (raw, json)
Hash identifier: OI3JSqGoVhnWz6wBW9AEkvVH4snnPUL3xdpL+eJr7uQ=
Subject key identifier: D0:20:AD:3B:EA:7D:07:83:91:2E:74:16:1C:EF:EF:22:50:64:3F:46
Certificate issuer: /CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Certificate serial: 0198F5A03E4E9E363F853176087CE6952CD9
Authority key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/0CCtO-p9B4ORLnQWHO_vIlBkP0Y.roa
Signing time: Fri 29 Aug 2025 11:39:36 +0000
ROA not before: Fri 29 Aug 2025 11:39:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205185
IP address blocks: 91.231.4.0/23 maxlen: 24
91.231.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f5:a0:3e:4e:9e:36:3f:85:31:76:08:7c:e6:95:2c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Validity
Not Before: Aug 29 11:39:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d020ad3bea7d0783912e74161cefef2250643f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:93:c4:ec:ff:d8:1b:a7:e0:82:dd:57:0c:ed:
97:00:ef:e7:0c:53:d7:98:f2:ce:f6:2c:0c:4d:1d:
34:94:e9:52:b5:e0:d0:16:fd:91:77:f0:7c:5e:d6:
67:c4:1b:94:83:c1:ce:63:29:cb:da:29:75:00:97:
06:54:ba:78:2d:49:6f:60:b7:29:f8:fa:b6:96:a0:
44:ef:ad:21:5a:e3:d7:55:14:9f:b3:11:54:be:ff:
96:09:68:d6:e3:da:80:34:a2:10:6a:0b:f1:dc:9b:
ac:a1:2d:aa:85:fd:f5:6d:89:2d:0c:c9:5c:ca:51:
83:27:96:85:9c:c9:99:86:75:d5:d9:c6:e4:47:d5:
b9:f9:39:93:52:69:ba:dd:fd:ef:df:3d:70:6e:a1:
28:43:ae:96:68:33:a5:d7:59:b6:19:d5:6d:70:63:
34:b0:00:7b:d8:d9:d3:a2:9e:87:c6:e3:7f:e2:ae:
11:5f:7e:f1:63:b3:74:84:ce:db:20:c0:3d:2f:e5:
72:0c:05:22:34:df:fb:42:9f:74:f7:29:1d:3c:e4:
11:f6:9d:4b:d6:39:18:e3:0b:a5:1e:a1:22:f1:a6:
f6:18:da:a7:da:35:23:5c:9d:34:eb:cd:69:a3:09:
13:80:d3:72:05:b9:1c:d2:03:66:d8:59:95:35:e7:
a2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:20:AD:3B:EA:7D:07:83:91:2E:74:16:1C:EF:EF:22:50:64:3F:46
X509v3 Authority Key Identifier:
keyid:2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/0CCtO-p9B4ORLnQWHO_vIlBkP0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.4.0-91.231.6.255
Signature Algorithm: sha256WithRSAEncryption
cf:c3:27:96:b1:a8:4c:1a:d0:81:25:3c:5c:56:e7:29:7f:70:
07:83:2b:52:00:5f:96:7a:06:a2:df:73:f9:88:5e:5d:ae:21:
b3:d8:43:32:30:75:83:ed:7e:02:cb:ff:0e:89:a7:4c:5d:3f:
4f:41:64:99:3f:2c:91:f9:8d:b5:bc:13:f4:df:9f:ea:73:92:
90:13:e7:d3:ff:ff:ed:b4:9f:45:8b:29:c4:2c:b1:3b:05:95:
54:b5:a5:68:fe:1e:82:a4:9e:38:9d:07:ae:d9:9e:0d:e0:ee:
26:c9:ee:9f:3d:9c:c5:5a:16:00:94:18:04:2e:7b:56:7a:f6:
d9:00:06:78:a7:8e:20:e7:78:04:25:b3:1b:cf:75:05:81:e0:
d1:b2:b8:7a:37:4d:2f:ed:5f:56:fa:e8:11:1e:ea:15:40:74:
1e:ae:60:bf:0f:31:6b:49:38:ac:fa:95:28:20:6a:31:36:76:
fd:19:9d:a7:10:12:87:ba:d4:26:ee:df:53:3d:2f:af:7b:ea:
8f:df:4e:f7:c9:e4:f5:59:8f:cf:eb:c3:8d:cf:8f:bc:c7:52:
07:e5:2d:b7:69:59:90:0e:55:23:d9:5c:bb:9f:e9:81:7a:43:
9d:9f:05:fc:16:17:6e:06:e7:91:9d:03:b8:f4:3e:1c:f4:5c:
40:ef:71:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 02:27:31 2025 by rpki-client