Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/N7j1ZhYZ0T5QddVWxbE14vo2CcA.roa
File: N7j1ZhYZ0T5QddVWxbE14vo2CcA.roa (raw, json)
Hash identifier: cqjBrKmZI9mIPuouhRB7VhgV5e28yJ3zyhcZAGu++aE=
Subject key identifier: 37:B8:F5:66:16:19:D1:3E:50:75:D5:56:C5:B1:35:E2:FA:36:09:C0
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 0197A66843D81C2A0C54A1EA4562612D7EF9
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/N7j1ZhYZ0T5QddVWxbE14vo2CcA.roa
Signing time: Wed 25 Jun 2025 09:25:40 +0000
ROA not before: Wed 25 Jun 2025 09:25:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 91.221.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a6:68:43:d8:1c:2a:0c:54:a1:ea:45:62:61:2d:7e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Jun 25 09:25:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37b8f5661619d13e5075d556c5b135e2fa3609c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f6:64:55:b5:cc:04:ee:38:d9:3a:ec:c4:b7:
9a:b1:d3:db:bd:09:84:62:8b:47:63:61:e4:06:94:
46:65:dd:39:4c:4e:d9:1c:53:ad:d1:d7:9f:70:ab:
24:9e:67:63:11:ac:e5:44:80:b2:0e:bb:3f:02:7c:
22:f6:d9:0f:8e:2c:0c:b9:49:76:41:01:42:e0:23:
4d:96:b7:7c:29:f3:0a:43:5e:98:7d:d3:cd:03:0c:
d4:da:3a:a9:d2:4a:7a:fa:cd:36:f8:a0:47:ca:a4:
87:66:a6:e8:00:f7:36:7b:71:dd:49:5e:93:b8:89:
71:e7:6f:d0:b2:fa:13:79:d6:65:2b:bf:0b:bc:b8:
90:dd:a5:4d:e2:b8:53:80:ae:9c:30:d3:da:27:72:
c1:5a:43:df:c0:0c:f6:f1:4a:4f:7e:b5:c6:c0:51:
f1:d4:60:85:4b:6e:a8:da:2f:08:f1:77:18:4c:61:
d6:f0:9a:99:df:ee:04:1e:96:57:77:cc:7f:ba:d4:
97:73:de:08:8a:9f:6a:58:a4:06:d7:84:55:da:83:
9c:10:12:86:a3:5e:7f:22:23:4b:d9:85:28:cd:2a:
81:e8:40:98:87:61:10:50:4f:f3:3b:12:0b:2d:33:
67:f9:24:d3:8c:e1:98:8d:bd:9e:dd:62:0f:d5:49:
c2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B8:F5:66:16:19:D1:3E:50:75:D5:56:C5:B1:35:E2:FA:36:09:C0
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/N7j1ZhYZ0T5QddVWxbE14vo2CcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.116.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:c7:58:8f:11:c0:f8:70:aa:a8:ad:78:e5:b2:a7:92:76:df:
67:0c:2c:24:0c:f0:66:ba:08:ea:cc:d0:f7:98:38:f2:de:59:
da:63:b8:82:38:b0:54:d7:e1:74:e2:5d:c4:29:a5:a4:82:d2:
7f:e7:dc:12:00:89:3b:d2:fe:4d:c1:9f:1f:a0:35:2d:2d:8e:
38:8b:15:10:74:ca:66:5a:88:b3:57:25:cc:60:92:c0:77:7a:
5c:86:6b:90:2c:10:06:0f:85:7d:10:ad:52:34:e6:5b:49:19:
03:78:1d:44:eb:67:87:f6:ee:47:9b:dc:3c:7a:64:e0:47:18:
15:a7:07:7b:43:67:f0:6a:a7:b3:12:c6:f5:df:a7:f9:5b:59:
fc:65:de:3c:6f:e3:e0:49:ee:67:7b:c7:68:24:08:c4:35:bb:
ff:2b:11:ae:8a:6a:5e:30:da:5d:91:42:d1:0d:36:8e:45:5f:
8e:ee:b4:c3:b4:c2:ca:bc:6e:d2:00:26:b0:8c:4c:c2:d8:71:
15:2a:25:ce:a9:32:8e:8f:7b:21:c4:bc:1e:66:89:38:ca:bb:
34:4d:5b:d3:7a:22:55:b6:29:a1:cf:70:a2:b4:d5:b7:84:18:
56:3c:24:47:f9:df:a9:cb:d0:b0:90:51:23:80:43:13:2a:9f:
90:5b:53:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:23:49 2025 by rpki-client