Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/dGW1FU7WEhTZHuwZkZW6nRc7oyw.roa
File: dGW1FU7WEhTZHuwZkZW6nRc7oyw.roa (raw, json)
Hash identifier: b3jMX68O+rKcLGgMZNQr4ecBhH3oDiVmJuYCs2ww/m4=
Subject key identifier: 74:65:B5:15:4E:D6:12:14:D9:1E:EC:19:91:95:BA:9D:17:3B:A3:2C
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 0199B5E9C60D03C32C7B12F3E9F0944D24DF
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/dGW1FU7WEhTZHuwZkZW6nRc7oyw.roa
Signing time: Sun 05 Oct 2025 19:47:00 +0000
ROA not before: Sun 05 Oct 2025 19:47:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9121
IP address blocks: 91.102.160.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b5:e9:c6:0d:03:c3:2c:7b:12:f3:e9:f0:94:4d:24:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Oct 5 19:47:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7465b5154ed61214d91eec199195ba9d173ba32c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dd:54:79:76:df:bc:dc:d5:bc:26:70:83:7e:
43:44:8f:ba:5f:ad:1a:53:2a:7b:45:3b:98:de:7b:
77:e0:a4:c8:a4:3a:dc:25:04:1c:1d:24:cf:ef:12:
dd:f4:77:f0:08:19:99:29:70:47:57:ab:ec:08:fb:
06:3e:2b:67:1c:53:9d:66:48:2a:7c:45:16:47:1a:
b7:0f:8c:9b:37:83:79:92:c7:c6:9e:f8:77:c7:20:
5c:17:98:cf:ed:99:e4:0c:66:ce:ab:1f:8f:56:89:
31:74:db:5b:38:bd:4a:ab:0b:0d:4e:fa:ab:9f:60:
d8:a8:90:e3:8e:4c:17:9c:67:e0:a3:8d:0a:4d:1a:
32:d2:ec:0d:dd:68:22:f9:8e:7e:6a:ee:b5:11:e2:
4b:89:63:f1:47:a5:b1:1b:79:53:f0:aa:de:9d:c6:
2a:36:21:62:78:e3:56:b4:0c:a0:b1:75:c6:7a:e1:
4e:52:17:4d:97:09:b1:c1:be:8e:ac:3e:e3:4c:90:
89:7a:a4:f6:38:11:5d:1a:64:ed:5b:80:7c:2f:68:
3c:c2:43:69:92:14:4e:27:ed:40:4c:2b:94:a0:56:
c4:b8:d4:bd:48:c7:0a:0a:4a:20:4e:a2:cd:16:cf:
36:e3:eb:34:e8:d9:e6:45:d3:53:a0:6a:8c:54:ce:
ef:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:65:B5:15:4E:D6:12:14:D9:1E:EC:19:91:95:BA:9D:17:3B:A3:2C
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/dGW1FU7WEhTZHuwZkZW6nRc7oyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.160.0/23
Signature Algorithm: sha256WithRSAEncryption
47:2e:bd:28:ff:24:b1:96:0e:ad:66:a5:98:37:6c:ba:f6:69:
00:f9:d9:ae:cf:eb:61:ca:8e:48:36:f4:62:bc:ab:e9:53:67:
87:20:4c:0c:da:64:9d:dd:2d:ba:09:2c:86:77:2f:e5:ba:0b:
a8:7e:8e:0c:66:b4:84:f8:1a:2e:e3:51:c9:04:7c:f7:4f:07:
b8:12:9d:d4:fd:09:16:98:f5:c4:30:ad:a2:39:47:78:6e:28:
cd:1f:78:4f:be:a3:6c:b9:12:63:82:86:c7:1b:e7:02:4b:ea:
c0:ca:c2:c4:d9:71:e1:99:8f:16:e4:33:3e:1e:50:93:51:bc:
b1:a3:7f:fa:48:1a:88:98:2b:33:a1:e7:39:f0:9d:e9:37:94:
14:f4:44:b6:c6:83:08:26:10:36:e6:3a:d3:e8:cf:80:a4:82:
26:62:02:52:a8:d8:37:5b:f8:8e:85:98:d2:ac:47:91:d4:27:
77:dc:e2:44:ee:ec:27:0a:11:b5:89:c1:bc:ef:2e:db:5f:ef:
d5:dd:7f:35:c4:95:8e:ef:e8:0d:59:60:52:aa:b0:a4:a1:73:
4a:53:3a:80:07:f6:f7:b6:e1:f7:38:65:3e:7d:00:1a:d5:04:
3c:71:21:fe:b8:e0:77:82:8d:9f:da:23:40:a5:71:87:61:98:
dd:ce:77:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:41:48 2025 by rpki-client