Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/0vnSiPOWnmFU81unx3CiiKoqL9Y.roa
File: 0vnSiPOWnmFU81unx3CiiKoqL9Y.roa (raw, json)
Hash identifier: DfmLpO9j7T70YWipxuVu48t55S7NoYp0HKdaTOCmQYU=
Subject key identifier: D2:F9:D2:88:F3:96:9E:61:54:F3:5B:A7:C7:70:A2:88:AA:2A:2F:D6
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 0199E4264A26905B0F09899670501EEAE46A
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/0vnSiPOWnmFU81unx3CiiKoqL9Y.roa
Signing time: Tue 14 Oct 2025 19:15:38 +0000
ROA not before: Tue 14 Oct 2025 19:15:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205886
IP address blocks: 213.137.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e4:26:4a:26:90:5b:0f:09:89:96:70:50:1e:ea:e4:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Oct 14 19:15:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2f9d288f3969e6154f35ba7c770a288aa2a2fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:42:c9:2f:fc:85:c2:df:76:d4:68:3f:a7:4a:
fa:39:88:73:e7:5c:2e:ae:17:85:4e:6e:08:8f:fb:
d4:4a:d9:c6:25:1a:c7:8f:cd:61:ca:73:99:39:14:
88:e3:2d:3c:d5:9a:76:b7:c2:a7:7a:46:32:39:af:
87:ce:eb:a1:f4:ff:6d:43:47:1f:83:b2:98:fd:d6:
80:d2:53:ac:49:6f:7b:bb:c0:98:94:4e:62:8d:89:
71:32:e2:af:1b:ba:c3:85:99:d4:1a:0a:62:90:81:
63:e1:2e:74:b9:cd:62:82:02:bc:49:04:d9:dc:aa:
36:b2:b3:50:cd:ed:75:7b:12:24:73:7a:f7:16:aa:
82:cc:09:70:09:5a:71:cd:42:e4:d8:8f:6c:a6:48:
6a:96:85:8e:23:30:19:16:80:02:4c:85:95:17:94:
45:c9:59:73:00:02:36:2e:35:a9:71:66:0e:2b:3d:
b5:d4:dd:fa:8e:09:9b:b3:84:13:b7:bb:32:7b:c8:
16:bf:23:df:f8:d4:62:2c:dd:0e:6d:2d:69:db:19:
be:2c:3a:d5:e3:c0:60:e7:5e:df:28:b4:7c:9a:38:
20:f8:2c:2a:59:00:6c:c0:70:6d:8b:76:05:a7:2d:
6e:01:32:3e:a4:6e:53:dd:6b:eb:2d:b8:13:6a:d4:
03:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F9:D2:88:F3:96:9E:61:54:F3:5B:A7:C7:70:A2:88:AA:2A:2F:D6
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/0vnSiPOWnmFU81unx3CiiKoqL9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.137.93.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:84:9c:fb:f7:6f:5d:bf:8c:1c:4e:47:06:28:2b:d8:a7:82:
92:8b:1b:2d:01:3e:a8:ed:e5:c0:d5:97:c8:84:aa:db:d6:c8:
25:cc:f0:bb:97:fa:31:04:c1:02:d0:44:43:7f:67:b8:f8:c5:
4b:1a:a1:00:f6:42:55:e2:da:a7:13:c9:2c:30:19:bf:30:89:
39:7e:ee:c1:97:30:b6:3f:52:37:fd:ec:9e:ea:7b:0c:82:ad:
46:cc:cb:30:6f:e2:1a:dc:df:43:ae:40:18:12:11:6d:bc:b2:
ef:7f:a8:f6:15:53:76:12:12:d8:fe:52:24:87:38:99:e9:a3:
c9:f3:74:68:34:f2:c2:3b:05:21:be:f7:91:4f:63:4b:cd:4c:
76:86:a5:56:8c:c2:4b:82:00:38:d3:f4:eb:6d:f1:11:72:79:
44:fb:f2:9d:4f:9f:a8:9d:b1:6d:5c:25:8b:2d:9e:0f:c8:d5:
7b:2c:fb:8f:ef:da:44:30:92:44:aa:30:fc:88:fb:4f:9a:24:
9c:7c:79:8e:5a:f6:ca:96:d8:22:62:cf:e0:61:28:77:72:36:
b6:98:e5:b3:f6:4e:04:56:01:cd:2d:bb:38:f0:b0:28:c8:83:
79:37:39:23:ed:1a:2b:17:97:69:13:06:63:65:00:62:ac:39:
2e:a7:d0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:14 2025 by rpki-client