Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/sZTa8Qa0TVk8uF_RHqCxSF_1GR0.roa
File: sZTa8Qa0TVk8uF_RHqCxSF_1GR0.roa (raw, json)
Hash identifier: u/AILdLiccMU6aDdQlKIvISGgDYDPhdz3YzBRcZY5lA=
Subject key identifier: B1:94:DA:F1:06:B4:4D:59:3C:B8:5F:D1:1E:A0:B1:48:5F:F5:19:1D
Certificate issuer: /CN=7f6bd1a6b04625c571d830f878b1c0238247408c
Certificate serial: 01997AEF3F8D10D07D7768603E7AAFAD7351
Authority key identifier: 7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/sZTa8Qa0TVk8uF_RHqCxSF_1GR0.roa
Signing time: Wed 24 Sep 2025 08:55:23 +0000
ROA not before: Wed 24 Sep 2025 08:55:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 91.246.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7a:ef:3f:8d:10:d0:7d:77:68:60:3e:7a:af:ad:73:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f6bd1a6b04625c571d830f878b1c0238247408c
Validity
Not Before: Sep 24 08:55:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b194daf106b44d593cb85fd11ea0b1485ff5191d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b3:b3:11:5d:b5:ca:c5:43:d2:82:e1:b1:ba:
03:72:62:19:a1:ed:39:32:09:1e:95:5f:3e:29:e8:
89:bd:e8:1d:b9:51:74:7a:26:a4:e5:d6:ea:01:68:
8b:48:77:b4:b7:01:b5:27:ee:08:aa:26:6f:fd:57:
5a:29:2a:1e:6c:01:1b:b4:91:7d:12:7e:ef:68:8b:
e0:b6:93:1e:ea:ea:cf:c3:c0:fd:a6:89:87:4c:b5:
00:51:0a:1a:80:61:0a:0a:69:b1:8b:17:3c:89:83:
fe:9c:7a:a3:f5:d7:28:87:a0:18:5b:20:eb:f5:8e:
79:28:1f:09:51:34:ff:a9:bb:cb:44:46:bd:9c:05:
22:71:29:8e:b7:1e:e1:36:99:b6:4a:56:76:b9:bd:
4f:ee:3a:73:99:73:a7:b7:c2:96:8b:24:1f:ff:d1:
69:a8:27:a6:3b:a4:1b:c5:47:9b:e3:98:b4:a6:a8:
00:65:a2:a9:df:b1:51:d4:12:ec:aa:94:86:e5:3f:
1e:f6:c9:f9:c9:81:c5:e4:c9:e9:b4:71:49:12:2f:
56:8c:59:ea:a6:14:e0:13:03:7b:ee:38:93:cd:07:
34:0e:7c:13:ac:05:2f:d4:97:de:8b:2e:1f:da:05:
9e:f3:4a:3d:4a:8b:6a:37:07:58:e2:28:ca:35:ab:
57:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:94:DA:F1:06:B4:4D:59:3C:B8:5F:D1:1E:A0:B1:48:5F:F5:19:1D
X509v3 Authority Key Identifier:
keyid:7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/sZTa8Qa0TVk8uF_RHqCxSF_1GR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.43.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:4b:59:08:d4:25:06:ab:d2:89:48:45:4d:62:e2:2e:54:b6:
22:05:e4:6c:07:c1:6c:71:7b:0d:79:fa:af:de:5b:65:8c:b9:
38:bd:f5:8b:ff:26:b0:ee:87:13:c7:fa:cf:7b:7d:df:67:2b:
1f:7a:5e:5f:87:2c:6a:8f:bd:52:eb:58:5d:25:a5:5b:81:1c:
89:dc:41:2a:06:5c:7e:d5:14:a5:ed:f0:8d:91:61:1f:41:58:
59:16:fa:5d:75:c3:d5:b4:49:af:1c:3e:4d:fa:84:3c:b6:1e:
77:94:f7:77:b0:33:b8:ca:d8:53:ac:84:45:15:95:07:fe:8d:
ea:c9:8d:00:92:16:51:83:3c:35:fd:88:9e:74:21:8b:ee:23:
e9:53:c4:24:8c:e1:62:ac:81:66:b1:cb:b5:10:b5:2e:5c:1b:
59:d1:c3:b4:8b:a1:6e:7e:bc:e5:4c:d0:61:d2:2d:1a:49:81:
60:6f:52:ca:67:73:fa:23:71:f2:ad:b4:1a:a6:29:95:8e:1f:
e7:26:f5:4c:dd:0d:9a:24:15:ff:5e:83:a6:7a:42:37:8f:0a:
65:d5:dd:62:71:a2:b5:af:04:65:8d:3d:6e:bb:1d:59:d8:10:
f6:cb:f3:c8:fd:28:08:36:4c:3b:23:cd:22:29:78:7a:4a:2c:
40:15:f3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:36:11 2025 by rpki-client