Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/pJx5ZmGpMBzKdhva9TUAsBAh7rI.roa
File: pJx5ZmGpMBzKdhva9TUAsBAh7rI.roa (raw, json)
Hash identifier: Uzf9k8Eo4hXFL8bxPdsqvqjBlJo7pRnh10Nmvo1NzMk=
Subject key identifier: A4:9C:79:66:61:A9:30:1C:CA:76:1B:DA:F5:35:00:B0:10:21:EE:B2
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 0198B08F1756DDBE428FE3575379A3D5DFD9
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/pJx5ZmGpMBzKdhva9TUAsBAh7rI.roa
Signing time: Sat 16 Aug 2025 01:47:04 +0000
ROA not before: Sat 16 Aug 2025 01:47:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56582
IP address blocks: 91.102.160.0/23 maxlen: 23
91.102.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b0:8f:17:56:dd:be:42:8f:e3:57:53:79:a3:d5:df:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Aug 16 01:47:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a49c796661a9301cca761bdaf53500b01021eeb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b6:0d:5f:4e:c6:be:77:b1:77:25:a4:7b:1e:
b6:01:90:2e:ff:45:8f:fc:ed:05:80:21:77:27:b9:
ab:e2:a5:08:60:ba:69:44:64:b7:05:e9:c0:10:00:
88:54:8c:65:fe:88:bb:42:40:d3:fd:cd:4f:8e:91:
45:87:88:f6:7c:e7:2e:95:d4:fa:39:64:61:ed:00:
29:31:93:21:2b:da:a6:df:62:7c:be:1e:4f:d4:49:
0c:15:9f:20:5a:37:55:cd:ce:f9:58:6c:56:be:fe:
7a:26:0f:8d:e3:f4:65:e7:7c:b5:10:0b:f2:ad:93:
47:7d:05:7f:43:b5:c2:3c:5f:92:1d:68:a1:c0:66:
79:0b:ec:9b:3c:dd:83:7d:74:16:fa:ed:e2:36:b0:
de:7d:d7:ab:6f:6c:31:d2:1d:54:7c:3a:c6:aa:da:
8f:07:37:0c:d7:c2:ac:1d:67:bf:aa:b4:c2:7b:86:
bb:7b:03:03:9f:e6:a5:42:bc:46:a1:5f:ea:41:7a:
3c:52:b2:0d:09:03:36:28:98:db:30:ae:2a:e0:47:
35:12:14:7b:e3:c0:4d:c4:39:9a:74:de:bd:cf:fb:
d3:ad:67:db:16:85:40:92:57:f0:f0:a9:02:e2:6b:
ac:e2:29:cb:8b:2e:25:dc:44:19:f7:bb:38:40:f9:
ec:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9C:79:66:61:A9:30:1C:CA:76:1B:DA:F5:35:00:B0:10:21:EE:B2
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/pJx5ZmGpMBzKdhva9TUAsBAh7rI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.160.0/23
91.102.167.0/24
Signature Algorithm: sha256WithRSAEncryption
50:e9:97:1d:5c:ad:35:1c:73:23:20:6e:35:83:70:10:35:07:
0f:57:e2:d8:38:f1:a3:cb:88:d1:63:42:28:06:e7:ba:57:af:
27:0f:85:09:c2:28:ec:a2:0d:5c:53:12:b7:bb:c5:0f:5d:61:
e4:f9:82:9b:ca:ed:cb:3c:ba:6b:06:84:b9:45:78:f8:f1:03:
3b:2d:31:ad:10:31:6d:97:0e:ea:6e:b1:b3:7a:3c:16:f7:2e:
2b:72:77:8a:41:08:f8:4c:cb:fa:1b:1d:00:70:7f:73:10:61:
3d:0b:74:f4:3d:48:de:8a:b6:05:a4:07:99:8a:07:18:b6:19:
22:7f:98:ea:b3:7e:80:35:b6:f6:6b:ce:dd:2e:36:96:6c:87:
bd:0a:80:15:bc:74:59:01:87:ea:81:25:2f:62:f6:04:7c:30:
51:d8:ac:fb:10:57:54:35:56:15:19:91:d1:7a:a2:1f:29:29:
6d:5f:57:90:f0:af:d4:c2:94:2e:ec:8d:51:14:fd:64:95:6d:
84:0b:9a:08:52:9e:7f:79:bd:3e:e8:a2:44:0f:99:cd:af:49:
f8:70:83:75:dd:3e:bf:b5:a0:7b:34:fb:ad:a3:00:34:1f:b5:
b9:92:8d:ee:70:f5:85:9d:b0:cd:97:c2:a7:2b:15:bd:7f:a4:
04:25:c8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:00:54 2025 by rpki-client