Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/IZdk74hSrnh74ZynVfW7EO53suI.roa
File: IZdk74hSrnh74ZynVfW7EO53suI.roa (raw, json)
Hash identifier: 5Lf7wqH7b2uz1cEp7iE8xbZTzdwcRRNn/RAvAhVoRXw=
Subject key identifier: 21:97:64:EF:88:52:AE:78:7B:E1:9C:A7:55:F5:BB:10:EE:77:B2:E2
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 0199EE868B8A8506E25E97FD51775531BB5A
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/IZdk74hSrnh74ZynVfW7EO53suI.roa
Signing time: Thu 16 Oct 2025 19:36:58 +0000
ROA not before: Thu 16 Oct 2025 19:36:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214208
IP address blocks: 91.102.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ee:86:8b:8a:85:06:e2:5e:97:fd:51:77:55:31:bb:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Oct 16 19:36:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=219764ef8852ae787be19ca755f5bb10ee77b2e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d9:a6:fb:31:d1:d4:92:45:15:2b:49:02:de:
bf:44:4c:00:98:74:a8:bf:26:22:7f:ac:44:36:9d:
92:3e:d4:8e:1b:6d:e6:7a:28:e1:b2:61:1d:9e:bf:
7b:c5:b5:8e:8d:cb:a9:30:c1:de:81:13:e7:b9:e1:
da:01:6d:4f:88:58:2a:34:ef:fb:f4:8a:d2:9d:d8:
c5:73:bb:a5:a8:64:51:09:df:f0:0c:d2:b8:87:d9:
f5:9f:93:85:1e:c2:87:1f:3a:d0:7d:6f:38:45:64:
e0:fd:33:4d:bc:dd:16:7b:fa:da:51:21:f3:9a:4e:
e8:0e:eb:70:01:25:59:83:05:a7:8e:08:5d:e6:89:
ab:8d:89:e4:ea:c3:14:cf:7b:37:bd:d2:9e:b0:95:
5c:60:cf:aa:70:0a:14:49:12:44:44:ce:ba:9c:b0:
87:98:90:4b:35:a0:5d:eb:5f:c1:ae:fd:6d:da:90:
a8:f7:e5:66:3e:5e:ce:31:b7:c0:d2:ed:9c:0d:9d:
57:6a:d4:87:57:49:8f:a6:4e:23:42:a5:d9:81:31:
d2:42:d6:98:3a:a9:6e:d0:76:33:68:9f:19:4a:57:
80:78:4b:0d:8a:0f:fe:d8:0c:88:2a:e6:a2:c1:62:
a1:da:e8:59:8d:45:37:e4:54:9b:71:ca:cb:20:b0:
46:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:97:64:EF:88:52:AE:78:7B:E1:9C:A7:55:F5:BB:10:EE:77:B2:E2
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/IZdk74hSrnh74ZynVfW7EO53suI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.167.0/24
Signature Algorithm: sha256WithRSAEncryption
47:f0:24:7b:8d:75:be:57:e5:34:1d:b1:a5:03:0d:a2:d3:78:
f7:ef:3f:ac:39:e5:b3:17:27:36:73:67:9f:c3:7e:cb:0e:6a:
10:ff:cf:89:e2:12:2b:72:80:c7:de:b3:82:23:e6:66:f6:27:
a4:c1:a1:e4:04:6b:76:e5:5f:fe:43:2c:3a:88:4e:b8:c4:99:
af:2b:25:64:c6:0e:71:0c:97:9b:85:7a:32:04:82:0b:4b:0c:
d0:39:b8:02:61:fc:b8:be:a8:6d:71:d5:bc:3f:56:03:ef:56:
b0:be:f7:f3:d7:fd:79:1b:d2:4a:5b:43:25:da:26:86:8b:ef:
47:ae:5d:8b:3f:b2:9c:c6:83:f1:35:6f:94:b2:93:df:ed:9e:
a2:02:5d:ff:21:da:63:a9:4e:84:4a:81:b6:d8:58:8a:cc:c3:
ff:59:34:9e:01:e1:b2:ed:80:0e:e4:27:96:2e:eb:ef:1a:b0:
2e:c0:0e:24:76:c1:68:de:71:0d:b5:d6:c2:7a:58:fc:48:d6:
89:f4:17:1c:81:08:53:2b:da:a5:63:24:11:c6:f4:60:74:4e:
ad:ca:73:34:9b:6e:57:bd:a6:76:28:7a:14:e5:0e:62:11:39:
1d:42:cd:94:d3:6a:dd:23:02:61:4f:92:e7:c3:eb:51:f4:e7:
3b:18:77:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:42:12 2025 by rpki-client