Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/9LlqBOZrF4SBJFApdi1WJjsEJwQ.roa
File: 9LlqBOZrF4SBJFApdi1WJjsEJwQ.roa (raw, json)
Hash identifier: hM+HJpIJptN08ori750yWre+VYMnzo/BXYZmLiiupXc=
Subject key identifier: F4:B9:6A:04:E6:6B:17:84:81:24:50:29:76:2D:56:26:3B:04:27:04
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 0198E2CE401400936C1639B017527EFD4673
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/9LlqBOZrF4SBJFApdi1WJjsEJwQ.roa
Signing time: Mon 25 Aug 2025 19:57:04 +0000
ROA not before: Mon 25 Aug 2025 19:57:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213541
IP address blocks: 91.108.200.0/22 maxlen: 22
91.108.200.0/24 maxlen: 24
91.108.204.0/22 maxlen: 22
91.108.204.0/24 maxlen: 24
91.108.216.0/22 maxlen: 22
91.108.216.0/24 maxlen: 24
91.108.220.0/22 maxlen: 22
91.108.220.0/24 maxlen: 24
91.108.228.0/22 maxlen: 22
91.108.232.0/22 maxlen: 22
91.108.236.0/24 maxlen: 24
91.108.238.0/24 maxlen: 24
91.108.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e2:ce:40:14:00:93:6c:16:39:b0:17:52:7e:fd:46:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Aug 25 19:57:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4b96a04e66b178481245029762d56263b042704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4b:31:fb:33:88:e9:4a:ca:0a:51:35:97:17:
b6:0e:a2:c4:38:e2:a0:9c:94:43:42:0c:4c:02:23:
18:f5:ec:5f:df:b9:55:47:ee:08:c7:64:53:9a:ab:
f1:b1:5f:80:70:5a:54:9b:a9:39:5f:28:67:23:e9:
eb:fc:2e:6c:79:7c:9d:7e:14:3e:03:1c:bf:27:a3:
7f:de:53:dc:f6:86:a8:f3:4f:c8:83:3b:2c:a2:7d:
0d:0b:91:ed:77:fd:5c:b4:4f:9c:be:e7:fb:2f:7e:
78:d8:f0:0c:c0:a7:93:49:84:33:92:68:71:d8:54:
0c:29:dd:1e:b0:51:3d:fd:a4:28:f0:18:e1:63:3f:
df:49:83:2a:aa:b8:65:7b:20:52:ec:a8:ce:6c:6e:
f0:b1:e4:59:b8:6b:56:98:35:4c:ed:dd:b4:88:20:
e4:31:82:1b:e8:87:6d:0c:0a:dc:40:69:d8:c1:0a:
09:20:79:20:2e:4c:88:b5:d2:20:33:d4:2b:6a:37:
8a:be:1f:f3:84:f1:8c:67:52:f9:f5:66:98:ad:4d:
cb:bc:68:78:11:dc:4c:04:5f:55:4b:69:f0:2a:c9:
69:68:a5:bc:43:de:88:42:46:c7:24:88:01:91:ad:
a3:0f:5f:9c:7f:38:91:79:29:49:f9:35:2b:f6:b6:
50:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B9:6A:04:E6:6B:17:84:81:24:50:29:76:2D:56:26:3B:04:27:04
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/9LlqBOZrF4SBJFApdi1WJjsEJwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.200.0/21
91.108.216.0/21
91.108.228.0-91.108.236.255
91.108.238.0/24
91.108.255.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:6a:ea:7c:00:fe:eb:17:f8:7e:85:b9:66:5b:1b:7e:37:c7:
43:be:cc:50:d0:1e:c9:4b:7b:cd:85:2e:c2:5d:67:40:4e:6b:
2b:19:aa:47:8e:c8:c0:9d:ac:14:9c:c5:6b:2d:20:db:96:f3:
30:68:ea:18:a5:e7:fd:03:6b:57:f1:23:58:ed:73:1b:1b:6c:
b5:5e:c0:85:f9:6c:7d:35:7e:2d:66:9b:45:18:64:13:0d:31:
8f:83:ac:d1:9b:63:07:97:a9:c7:37:76:b5:cc:a4:a9:ad:90:
52:38:79:c6:78:5e:9a:61:05:e2:e3:f2:17:39:fa:b5:41:96:
6c:57:db:8d:b1:df:87:72:fb:a5:dc:1b:db:90:67:28:9c:61:
a0:26:3d:f7:f9:53:2c:0b:e1:8d:89:12:35:a7:fa:c0:e4:06:
72:ca:03:fc:e6:d1:64:cd:b6:b1:64:ef:99:6e:6a:c5:e8:14:
c2:e5:b0:fa:f9:d4:88:c6:63:d8:c8:46:0e:fb:5e:63:49:ea:
a7:61:ba:e5:ad:30:6e:94:3b:f9:1c:75:f8:d7:86:47:27:98:
4b:b0:87:a5:5e:47:d1:94:90:97:b1:06:35:63:bf:80:3f:b4:
06:37:0a:51:b0:fb:f6:c2:58:86:bf:c7:66:27:49:f6:9b:31:
cd:72:e4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 17:19:43 2025 by rpki-client