Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/joUfA7wmiDy4bESPg0qWDrSmTss.roa
File: joUfA7wmiDy4bESPg0qWDrSmTss.roa (raw, json)
Hash identifier: 1QUrxZN7VrpsU9R2lfkft3ATlxKCm7MpFqrD8hOkNNA=
Subject key identifier: 8E:85:1F:03:BC:26:88:3C:B8:6C:44:8F:83:4A:96:0E:B4:A6:4E:CB
Certificate issuer: /CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Certificate serial: 0199D46AE0A39CA5AAA4C7A56F5CF36D199A
Authority key identifier: B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/joUfA7wmiDy4bESPg0qWDrSmTss.roa
Signing time: Sat 11 Oct 2025 17:56:38 +0000
ROA not before: Sat 11 Oct 2025 17:56:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205229
IP address blocks: 91.216.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d4:6a:e0:a3:9c:a5:aa:a4:c7:a5:6f:5c:f3:6d:19:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Validity
Not Before: Oct 11 17:56:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e851f03bc26883cb86c448f834a960eb4a64ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7c:33:e6:2c:77:07:6e:a2:c0:63:99:8d:4b:
82:3d:90:e6:92:32:bb:5b:f6:10:16:d4:46:46:54:
36:a8:02:45:a0:1e:4f:4b:d5:ca:ce:ae:ed:f5:42:
00:67:34:46:4c:3d:02:d5:85:80:e1:87:40:0d:6b:
53:98:9c:f0:c1:6c:ca:c8:f8:b7:3a:8f:a0:9e:ce:
b4:da:0c:d9:1e:5a:b1:05:8f:2a:12:3a:4d:0f:36:
15:74:91:f0:ca:7f:20:e6:36:89:a0:c4:2e:02:8d:
22:d8:4c:1a:28:43:2d:96:71:0c:7c:4a:5c:d5:16:
9f:c2:0b:41:4e:d0:42:2d:19:e0:f0:c9:df:4e:86:
43:4b:49:7a:45:de:01:2c:a5:1a:fb:3c:fe:4a:2a:
8c:ee:de:5d:74:69:98:89:72:e8:20:6a:c5:74:29:
2e:fd:3d:7c:4a:d5:e2:fa:ec:c9:10:a5:9c:01:0d:
b1:1a:05:e9:ef:21:6b:65:da:78:ef:af:7a:7b:ae:
da:75:dc:2b:2b:70:95:09:cf:29:a4:97:79:2e:c1:
18:33:dd:17:0d:02:8e:0e:b4:7b:ba:a2:b0:96:50:
13:31:d6:89:ac:a4:34:03:8f:9b:65:2e:ee:53:3d:
bc:73:3f:fc:89:2d:f2:89:2f:69:60:66:fc:85:1e:
8f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:85:1F:03:BC:26:88:3C:B8:6C:44:8F:83:4A:96:0E:B4:A6:4E:CB
X509v3 Authority Key Identifier:
keyid:B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/joUfA7wmiDy4bESPg0qWDrSmTss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.71.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:8b:56:d9:3f:05:f3:3a:1c:9c:44:ad:98:90:74:e1:20:d6:
f2:90:1a:45:c3:d4:70:21:33:ee:bd:d8:29:35:d2:8e:dc:de:
51:fd:3b:72:53:df:3f:42:dd:da:9d:b8:e0:6a:7b:21:02:aa:
05:f5:52:b5:ac:60:7d:0a:cc:ff:46:be:37:29:b6:1f:1c:ce:
cb:c3:e9:b6:45:49:0f:13:0d:a8:19:0b:4d:78:68:90:a7:2f:
0b:cb:99:09:36:17:67:1e:4c:f3:cd:ae:62:a0:ce:84:da:10:
8e:68:fc:dd:68:59:e5:c7:8d:d8:80:97:85:d0:b2:9d:78:e8:
bb:bf:1c:8b:ed:44:9d:ed:87:23:d4:be:46:e0:6c:31:a0:64:
f1:0e:82:d9:55:ab:e4:9e:e8:20:ec:b3:0d:17:28:ad:81:7f:
e6:1a:cb:61:d2:1f:87:d7:c9:78:ca:fe:f5:c4:4e:61:c3:a0:
8f:b0:13:7c:1a:43:43:a2:d7:03:7c:34:50:76:53:22:92:d9:
4b:93:c3:30:e8:b3:b2:b9:c9:fe:78:8a:13:63:93:19:1e:1b:
3c:8e:e8:03:bc:80:70:e7:f3:65:e6:50:ee:eb:ba:b2:e6:8f:
8c:65:f8:cf:70:65:bd:72:d1:31:ca:51:92:29:69:d1:3e:04:
36:51:d4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:07:39 2025 by rpki-client