Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/Xk5tmPIosW8yWOoBE4vC97DKTmI.roa
File: Xk5tmPIosW8yWOoBE4vC97DKTmI.roa (raw, json)
Hash identifier: n+WSuCldCqJF0J/zIrAAsy8W1NaktFT44ojEQwTF8/A=
Subject key identifier: 5E:4E:6D:98:F2:28:B1:6F:32:58:EA:01:13:8B:C2:F7:B0:CA:4E:62
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 0197F3F4FE029B0AE346A82D1608E6753E84
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/Xk5tmPIosW8yWOoBE4vC97DKTmI.roa
Signing time: Thu 10 Jul 2025 10:50:08 +0000
ROA not before: Thu 10 Jul 2025 10:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29390
IP address blocks: 91.198.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 11:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f3:f4:fe:02:9b:0a:e3:46:a8:2d:16:08:e6:75:3e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Jul 10 10:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e4e6d98f228b16f3258ea01138bc2f7b0ca4e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f3:9b:0c:80:2a:a3:33:22:de:9a:ca:e9:ec:
de:99:b3:88:2b:8e:25:b4:c7:e0:47:54:b5:5f:78:
2d:b0:54:07:d5:9c:14:17:db:99:bd:36:5b:32:a2:
0d:ea:dd:f4:b9:0e:c1:91:ac:96:69:40:a9:20:60:
95:ba:91:d7:ba:7c:41:fb:4e:7a:ae:25:9a:9a:a1:
55:44:bc:57:24:ba:b2:aa:29:9c:59:8f:91:f6:a9:
f4:35:83:bf:64:ab:09:2a:b1:e3:c7:57:4d:1a:09:
85:cd:fa:4a:ff:f4:77:8a:a2:5e:ee:f0:9b:60:0d:
e3:a2:e2:38:22:40:97:29:d1:94:5e:80:62:a7:f5:
6d:76:2d:c9:d5:89:3e:95:c1:f5:37:a1:34:42:02:
b4:c4:a8:94:58:b5:59:08:8c:56:57:4d:0e:0b:bf:
35:db:45:50:b7:42:47:2e:f6:b4:c0:c3:d8:f9:5e:
4c:6a:77:80:f8:a4:d6:d1:fa:c2:b7:49:3f:0c:96:
93:8f:a2:b1:9a:57:9a:94:e8:f7:28:87:e9:a4:0f:
72:a9:fa:8e:c1:0b:6e:6d:d9:bc:81:e5:bc:98:9c:
5c:e9:23:e6:77:70:33:a3:ff:fe:e9:0c:ec:75:4a:
04:58:c3:d5:75:14:8e:eb:06:44:1a:41:45:2b:9e:
20:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:4E:6D:98:F2:28:B1:6F:32:58:EA:01:13:8B:C2:F7:B0:CA:4E:62
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/Xk5tmPIosW8yWOoBE4vC97DKTmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.133.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:8c:68:6c:ce:8d:d0:37:27:6f:8f:9a:00:36:6f:0b:fc:ee:
47:af:f2:4a:1f:ab:be:cc:39:24:12:14:00:04:58:21:7d:4f:
7d:d2:44:11:cb:8f:7f:70:8f:cd:d9:02:a8:bb:99:cb:de:50:
a1:ba:1c:a6:a2:0c:62:e3:9f:0e:74:05:fe:7b:1b:12:14:d6:
e5:99:58:90:33:12:ac:aa:d0:bf:2f:e9:a3:17:a9:1f:b3:16:
4f:14:8c:7b:2f:bd:c3:56:ca:22:4c:b4:32:d0:95:79:53:2e:
cd:35:48:fb:6f:66:82:66:fd:d2:2b:70:93:bf:c2:6c:b3:53:
52:66:be:10:c2:47:22:b2:44:69:5b:62:09:f1:04:6e:ec:9d:
15:24:ea:8d:fc:48:36:df:96:da:46:0d:5f:d3:3f:33:ad:6a:
43:af:a1:41:bf:a4:2a:5e:4d:65:ab:74:c9:5a:1f:45:b9:ea:
a3:fb:6f:43:f6:e5:9d:3f:98:06:31:b9:5e:b9:8a:9b:ee:5b:
9f:72:1d:b0:a5:16:41:e7:69:47:74:1e:94:31:e6:64:a6:cd:
9b:4a:ad:fe:ff:d2:e4:21:6b:15:86:8b:1f:c3:e7:06:54:e7:
b5:f9:6f:0e:2e:92:0a:d7:64:bb:df:ef:0d:57:ee:89:e0:d0:
a1:f4:78:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 16:31:16 2025 by rpki-client