Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/XO5629FFpWYFF8ZRrD5XKcMM2vo.roa
File: XO5629FFpWYFF8ZRrD5XKcMM2vo.roa (raw, json)
Hash identifier: wKy5dCiE9pBzbJNPaAeHBHoxO/6aKqqjDAe2f2qYl60=
Subject key identifier: 5C:EE:7A:DB:D1:45:A5:66:05:17:C6:51:AC:3E:57:29:C3:0C:DA:FA
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 0197563F4A83130951075288B07F33F0AA22
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/XO5629FFpWYFF8ZRrD5XKcMM2vo.roa
Signing time: Mon 09 Jun 2025 19:51:17 +0000
ROA not before: Mon 09 Jun 2025 19:51:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 91.225.227.0/24 maxlen: 24
188.191.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:3f:4a:83:13:09:51:07:52:88:b0:7f:33:f0:aa:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Jun 9 19:51:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5cee7adbd145a5660517c651ac3e5729c30cdafa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a4:84:db:b6:68:4a:8d:ee:b1:5f:f0:f8:25:
49:23:39:0d:1e:51:58:7b:16:12:48:a1:35:24:2d:
45:8a:1e:f4:26:ad:43:97:73:a9:56:2e:7c:f2:02:
46:e9:16:60:10:0d:03:31:de:d2:45:a7:75:86:23:
4a:40:01:2a:0c:1e:4b:8b:14:d8:f8:fe:f6:b7:d1:
7a:d7:e0:19:42:fd:50:02:ce:d5:5e:d2:35:76:2a:
fd:e4:45:d0:2e:77:4e:0b:b8:cd:84:fd:bb:5a:14:
0e:ee:14:b0:d7:a1:0a:96:37:d0:c8:06:b4:86:ae:
1c:26:b9:4e:53:f4:1b:a3:7e:da:ef:54:dc:2f:3b:
9d:88:14:81:3c:f7:9d:a4:81:4e:5c:80:f7:01:f5:
9c:aa:11:02:18:9b:e4:1e:85:e2:6b:74:cc:c7:eb:
88:68:13:5d:b8:1b:e3:fa:ec:14:35:37:5f:d9:d1:
01:63:3b:16:c1:97:f0:bd:62:88:6b:1c:b3:6d:86:
5a:06:cd:21:5f:83:36:ce:5f:8f:af:45:cd:d0:77:
54:a5:e1:a6:e2:3e:eb:14:26:58:f4:c2:f9:e6:92:
6b:7f:e5:00:4a:3f:d2:69:d2:a4:0e:6a:09:8a:18:
46:fe:0b:b6:56:77:00:30:14:1c:5d:e6:0c:86:84:
36:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EE:7A:DB:D1:45:A5:66:05:17:C6:51:AC:3E:57:29:C3:0C:DA:FA
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/XO5629FFpWYFF8ZRrD5XKcMM2vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.227.0/24
188.191.99.0/24
Signature Algorithm: sha256WithRSAEncryption
08:bc:02:bf:38:80:8d:ac:e5:54:dd:a6:10:f7:d2:e1:c6:5e:
ab:9f:44:ac:55:ed:51:da:22:b4:77:8c:8d:7e:bb:0b:4f:ce:
76:3f:00:11:64:bb:ea:7e:b8:52:fc:3c:6c:d5:1f:f5:26:6e:
bf:bf:d2:b9:cb:03:b3:17:fc:97:e4:47:be:7e:c4:00:bb:c1:
98:7f:ef:29:69:03:db:b9:45:84:26:ad:0a:b6:a9:45:3f:ac:
3b:ec:5f:d8:93:38:62:52:c9:98:e3:4c:3d:94:31:55:32:73:
64:99:2e:bc:19:70:41:e8:e1:94:5b:22:9d:61:2b:cd:eb:07:
15:cc:3f:a4:e3:73:89:e2:aa:d4:f1:31:b4:8f:b7:cd:a1:75:
b0:bc:db:a2:0c:79:ed:e4:11:7b:6d:85:90:56:8c:25:21:3b:
82:33:64:11:a4:fd:43:f8:60:29:00:0e:cb:ae:11:0a:80:63:
98:ed:f8:ce:fe:cb:fc:61:13:91:10:0e:ca:26:ec:fd:e8:a9:
32:76:d8:e4:24:0b:05:25:67:df:33:7b:31:e8:75:07:f3:de:
c5:de:43:a9:d2:52:fe:50:67:8b:32:a3:bc:1b:b9:6a:5f:8f:
91:1e:7c:a9:23:9c:d6:31:50:75:3f:81:14:e5:87:9c:58:6e:
11:b1:2c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:44:14 2025 by rpki-client