Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/96LYebW41F9cWbiRR3tXv_5JTlA.roa
File: 96LYebW41F9cWbiRR3tXv_5JTlA.roa (raw, json)
Hash identifier: E9I1sWzxYkdu6eno5OeViMQO2tf/PXjG/rZzNUHedvQ=
Subject key identifier: F7:A2:D8:79:B5:B8:D4:5F:5C:59:B8:91:47:7B:57:BF:FE:49:4E:50
Certificate issuer: /CN=b1768f0a8d1ed1173ecedc689c177b249ee3a68c
Certificate serial: 019976F8D876C79FF321AA29F9E42EC1EDC2
Authority key identifier: B1:76:8F:0A:8D:1E:D1:17:3E:CE:DC:68:9C:17:7B:24:9E:E3:A6:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/96LYebW41F9cWbiRR3tXv_5JTlA.roa
Signing time: Tue 23 Sep 2025 14:27:23 +0000
ROA not before: Tue 23 Sep 2025 14:27:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208864
IP address blocks: 91.212.139.0/24 maxlen: 24
91.220.53.0/24 maxlen: 24
185.35.96.0/22 maxlen: 22
185.145.24.0/22 maxlen: 22
185.178.232.0/22 maxlen: 22
185.252.76.0/22 maxlen: 22
185.252.244.0/22 maxlen: 22
2a00:dfa0::/32 maxlen: 32
2a0a:6f80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:76:f8:d8:76:c7:9f:f3:21:aa:29:f9:e4:2e:c1:ed:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1768f0a8d1ed1173ecedc689c177b249ee3a68c
Validity
Not Before: Sep 23 14:27:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7a2d879b5b8d45f5c59b891477b57bffe494e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e0:ee:bd:ee:0e:3c:b7:eb:9f:2f:39:0e:b8:
df:b2:4a:34:23:cb:8f:3f:10:68:6d:b1:47:d3:0a:
c6:03:ab:f0:f6:95:1c:38:24:2f:87:8a:e0:ac:65:
6d:50:ef:26:25:0c:f3:ed:88:db:67:78:36:a2:9b:
e1:fb:09:a6:ff:3b:77:9c:db:91:96:f5:dc:af:81:
7d:c3:7b:ce:d6:7d:eb:35:c0:a8:81:2b:5b:80:c2:
14:3b:8b:5c:8e:63:dd:95:0a:aa:23:f9:97:24:09:
ff:ea:fd:90:fc:f7:dd:2a:f4:c2:c2:8c:ed:23:fb:
53:20:da:46:e8:28:29:20:45:1d:34:3a:c5:5e:10:
58:ce:07:1d:48:eb:c0:39:c2:0f:ce:12:7c:da:37:
b8:52:a1:76:42:10:64:bf:10:3f:0c:04:9c:f8:77:
50:5e:8a:b3:92:33:0e:9a:df:87:52:2f:88:6e:7d:
1e:79:d8:68:8f:42:1e:9c:64:04:73:48:62:74:86:
a0:51:85:be:fc:6a:f6:96:80:fd:6a:4b:4d:03:24:
ba:9b:f9:6e:0f:5b:bb:fb:0f:d0:08:3c:d8:4b:4b:
14:8e:27:d5:fc:1e:a3:7f:4f:f1:93:35:29:1a:b7:
eb:85:e8:d0:e6:4c:ce:98:db:27:14:8e:77:91:ed:
95:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A2:D8:79:B5:B8:D4:5F:5C:59:B8:91:47:7B:57:BF:FE:49:4E:50
X509v3 Authority Key Identifier:
keyid:B1:76:8F:0A:8D:1E:D1:17:3E:CE:DC:68:9C:17:7B:24:9E:E3:A6:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/96LYebW41F9cWbiRR3tXv_5JTlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.139.0/24
91.220.53.0/24
185.35.96.0/22
185.145.24.0/22
185.178.232.0/22
185.252.76.0/22
185.252.244.0/22
IPv6:
2a00:dfa0::/32
2a0a:6f80::/32
Signature Algorithm: sha256WithRSAEncryption
19:97:e2:59:34:39:f8:5b:f8:b2:36:4a:9b:d1:85:32:9c:ac:
d6:a2:d2:b4:c7:4e:ef:49:1d:5e:33:8b:c4:31:73:0f:49:da:
4b:9b:12:77:01:ad:9b:4e:0c:30:af:d5:cf:2e:ff:a1:e3:3a:
dc:6e:6c:19:fe:93:76:5d:37:72:a5:15:e4:4b:48:76:fb:85:
66:1d:21:f8:a0:f9:fc:8a:59:35:5f:82:44:e7:09:d0:49:81:
33:b4:ab:f0:f7:7a:bb:a9:ca:c7:4c:03:b1:4e:4d:19:6f:d5:
0c:04:0b:cb:51:bd:dd:d2:8e:7a:97:d3:1d:f2:ae:a2:36:ec:
15:e3:85:09:83:4e:d3:ef:31:6b:03:55:ff:99:cb:ca:80:92:
f1:85:f3:9e:99:12:fe:fb:e0:83:62:4b:fe:eb:58:11:7f:8d:
86:19:b6:e8:ac:97:0f:f2:2e:46:4a:56:95:18:44:4b:b7:51:
1d:2c:41:c9:ad:17:f6:ca:e8:9b:4b:a0:ec:7b:06:20:70:2e:
74:73:a4:71:33:a3:6d:aa:14:bf:2a:27:39:3a:a7:bd:d7:38:
cf:4a:20:2a:f7:3e:2e:c3:54:2b:54:93:c2:3c:f0:01:df:0c:
7a:74:bb:95:8e:7e:ce:4f:a9:b3:47:d7:ba:54:b9:64:fa:1e:
41:25:47:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:35:43 2025 by rpki-client