Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/IKVCvx5MN-J1BNtiE_pmtxKhPFE.roa
File: IKVCvx5MN-J1BNtiE_pmtxKhPFE.roa (raw, json)
Hash identifier: zVMfL3NWgpYlRkGpohLiXMVJSyF4ZhyYzOmQzEwbEgc=
Subject key identifier: 20:A5:42:BF:1E:4C:37:E2:75:04:DB:62:13:FA:66:B7:12:A1:3C:51
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 01991537D31E640F9899635D0DDDCD8FD983
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/IKVCvx5MN-J1BNtiE_pmtxKhPFE.roa
Signing time: Thu 04 Sep 2025 14:53:24 +0000
ROA not before: Thu 04 Sep 2025 14:53:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 91.108.237.0/24 maxlen: 24
91.108.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:15:37:d3:1e:64:0f:98:99:63:5d:0d:dd:cd:8f:d9:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Sep 4 14:53:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20a542bf1e4c37e27504db6213fa66b712a13c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c4:27:05:c5:64:0d:11:58:3b:4c:5e:99:70:
af:bb:4d:96:c5:d1:7c:58:33:2d:a0:bb:80:e4:be:
09:6b:6a:f8:e5:d0:8f:18:cf:33:0f:d8:83:ba:ed:
95:24:4f:b3:a7:a9:d2:a6:01:1d:82:77:9f:ea:5a:
e5:ad:ef:86:ce:a7:80:eb:c6:82:37:75:21:f7:53:
02:d3:ae:fe:82:eb:e1:36:49:c9:82:51:30:ef:a6:
d7:7d:d1:02:1d:47:40:5c:bd:da:ee:f4:85:eb:6a:
8c:f6:92:70:cf:e4:f6:41:94:37:ce:d5:b2:da:c1:
b2:7b:ec:fa:e9:a4:96:93:c0:3a:6c:eb:5b:9d:73:
cb:36:2d:10:93:94:83:c7:1d:a8:6e:9c:5c:e3:01:
1f:4b:6f:a6:6f:a7:70:d0:02:7e:55:3b:3d:48:ec:
21:97:21:c7:94:f0:5c:ab:c9:1c:d5:a2:7b:a6:b4:
a8:44:57:6d:43:e7:4e:1b:87:8c:8c:c7:85:b5:3f:
f6:1a:54:ea:69:f9:85:0a:ae:ce:88:80:c8:4b:7a:
d6:79:4c:a3:9e:b0:7b:b5:a2:4b:ab:d2:97:29:35:
3d:7f:4d:a0:5f:df:62:fc:34:15:42:82:91:06:fc:
3d:9e:81:9b:aa:b6:c9:0b:de:85:62:8e:63:c2:a0:
f1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A5:42:BF:1E:4C:37:E2:75:04:DB:62:13:FA:66:B7:12:A1:3C:51
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/IKVCvx5MN-J1BNtiE_pmtxKhPFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.237.0/24
91.108.254.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:6f:3e:97:18:42:8e:b7:e5:8c:72:64:66:4d:02:49:9e:f8:
71:ae:13:0c:bd:ff:37:bc:23:a2:27:ec:b0:1d:00:fa:61:7d:
9b:8e:cd:3e:bd:27:51:74:2a:1e:6a:9d:fe:bf:3a:c6:4a:8a:
b9:cf:3f:ef:79:e5:8e:30:35:f2:74:5e:ea:3b:9b:54:07:ae:
8c:1d:28:1c:f9:cd:64:bd:ba:a9:30:6e:30:9d:cf:78:58:8e:
2e:69:24:7b:02:ee:95:51:32:8a:da:57:9a:00:91:94:5f:02:
91:37:d1:be:f1:d1:a0:47:45:ad:c5:06:cf:2f:ae:99:3e:1e:
64:7a:22:ff:76:e4:b1:dc:96:ac:13:66:a8:69:b7:44:1b:87:
d7:5c:2d:68:c1:e7:69:7a:fc:ce:98:7d:d4:20:52:5e:7b:fe:
bf:11:07:db:f5:84:f5:b6:3d:34:72:50:ac:88:67:51:7b:56:
e0:6d:3b:d4:9d:f7:f2:08:07:c5:29:46:e7:97:bb:b1:5a:46:
38:fa:aa:63:f5:78:6c:eb:38:f3:ef:61:e6:e8:d4:3c:a4:02:
63:cb:a2:fc:c1:b2:e7:28:06:4c:2c:9f:7e:18:65:ce:6c:d7:
27:61:4b:e8:7b:3e:f9:75:e6:21:b9:e3:4d:69:b2:23:32:10:
16:fc:28:2f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZkVN9MeZA+YmWNdDd3Nj9mDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZWU0NTQyNmUxMmU1MGZlMzBlOGZmYzM5ZTA0NDg1ZDhm
NzMzMzkwHhcNMjUwOTA0MTQ1MzI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMGE1NDJiZjFlNGMzN2UyNzUwNGRiNjIxM2ZhNjZiNzEyYTEzYzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsQnBcVkDRFYO0xemXCvu02WxdF8
WDMtoLuA5L4Ja2r45dCPGM8zD9iDuu2VJE+zp6nSpgEdgnef6lrlre+GzqeA68aC
N3Uh91MC067+guvhNknJglEw76bXfdECHUdAXL3a7vSF62qM9pJwz+T2QZQ3ztWy
2sGye+z66aSWk8A6bOtbnXPLNi0Qk5SDxx2obpxc4wEfS2+mb6dw0AJ+VTs9SOwh
lyHHlPBcq8kc1aJ7prSoRFdtQ+dOG4eMjMeFtT/2GlTqafmFCq7OiIDIS3rWeUyj
nrB7taJLq9KXKTU9f02gX99i/DQVQoKRBvw9noGbqrbJC96FYo5jwqDxfQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCClQr8eTDfidQTbYhP6ZrcSoTxRMB8GA1UdIwQY
MBaAFMLuRUJuEuUP4w6P/DngRIXY9zM5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUt
ZGE3NTQzMGIxNmY2LzEvSUtWQ3Z4NU1OLUoxQk50aUVfcG10eEtoUEZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUtZGE3NTQzMGIxNmY2
LzEvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW2ztAwQA
W2z+MA0GCSqGSIb3DQEBCwUAA4IBAQALbz6XGEKOt+WMcmRmTQJJnvhxrhMMvf83
vCOiJ+ywHQD6YX2bjs0+vSdRdCoeap3+vzrGSoq5zz/veeWOMDXydF7qO5tUB66M
HSgc+c1kvbqpMG4wnc94WI4uaSR7Au6VUTKK2leaAJGUXwKRN9G+8dGgR0WtxQbP
L66ZPh5keiL/duSx3JasE2aoabdEG4fXXC1owedpevzOmH3UIFJee/6/EQfb9YT1
tj00clCsiGdRe1bgbTvUnffyCAfFKUbnl7uxWkY4+qpj9Xhs6zjz72Hm6NQ8pAJj
y6L8wbLnKAZMLJ9+GGXObNcnYUvoez75deYhueNNabIjMhAW/Cgv
-----END CERTIFICATE-----
Generated at Sat Sep 6 17:17:51 2025 by rpki-client