Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/aSrHCQIT4pfyWNVtX5PsNo34yos.roa
File: aSrHCQIT4pfyWNVtX5PsNo34yos.roa (raw, json)
Hash identifier: PzxdBgO+9mdjiqiAtfFS95/jZclQ/pzO7110cuOtJf4=
Subject key identifier: 69:2A:C7:09:02:13:E2:97:F2:58:D5:6D:5F:93:EC:36:8D:F8:CA:8B
Certificate issuer: /CN=e91f9dbbe68b84027ced4d31e8803f13e9d65d13
Certificate serial: 0199B9BF3893CF35CDE34A2E258B083D9EC4
Authority key identifier: E9:1F:9D:BB:E6:8B:84:02:7C:ED:4D:31:E8:80:3F:13:E9:D6:5D:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6R-du-aLhAJ87U0x6IA_E-nWXRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/aSrHCQIT4pfyWNVtX5PsNo34yos.roa
Signing time: Mon 06 Oct 2025 13:39:00 +0000
ROA not before: Mon 06 Oct 2025 13:39:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42905
IP address blocks: 91.199.245.0/24 maxlen: 24
193.39.118.0/24 maxlen: 24
193.200.151.0/24 maxlen: 24
195.62.36.0/23 maxlen: 23
195.62.36.0/24 maxlen: 24
195.62.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/6R-du-aLhAJ87U0x6IA_E-nWXRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/6R-du-aLhAJ87U0x6IA_E-nWXRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6R-du-aLhAJ87U0x6IA_E-nWXRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b9:bf:38:93:cf:35:cd:e3:4a:2e:25:8b:08:3d:9e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e91f9dbbe68b84027ced4d31e8803f13e9d65d13
Validity
Not Before: Oct 6 13:39:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=692ac7090213e297f258d56d5f93ec368df8ca8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7e:32:0e:00:70:69:5d:4e:c8:4e:63:b2:85:
20:61:8f:7d:34:26:42:f9:fb:04:4d:35:97:a2:7e:
65:4e:6c:5f:b4:6f:05:fe:4b:b1:86:41:0c:26:f9:
61:3a:df:08:30:4f:46:b9:52:5e:a6:23:ab:99:06:
92:42:c5:22:ee:1f:8b:3c:e0:ae:e7:eb:f0:a8:63:
44:a7:14:8f:e8:38:a6:ad:ea:73:f2:6f:2c:78:10:
09:f9:33:2e:56:cc:03:25:cb:0d:14:a7:95:99:78:
06:4f:a0:81:bd:36:73:e0:bb:73:b4:49:2b:71:68:
d4:d6:7b:b6:80:68:4d:76:61:d3:cf:64:88:75:28:
0d:3a:77:a2:d8:61:f5:e5:87:5a:4e:49:58:02:96:
83:2f:ad:7b:bf:d9:aa:d1:5e:3e:d9:c4:25:d7:3f:
6c:f1:32:34:87:e1:13:c1:2b:28:41:4c:ea:ea:97:
7b:8f:b3:24:24:df:d2:b7:6b:a0:de:1b:e1:1b:98:
38:a7:09:0e:ef:d0:b1:7f:a3:1f:84:e5:b9:91:ad:
02:bd:04:5d:83:92:33:06:2f:54:56:e4:25:15:c0:
71:f3:6c:74:7b:92:ed:ef:7f:87:87:7d:f6:c9:83:
d7:ad:62:75:23:a1:30:fa:e1:15:3c:7a:95:4a:ac:
34:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:2A:C7:09:02:13:E2:97:F2:58:D5:6D:5F:93:EC:36:8D:F8:CA:8B
X509v3 Authority Key Identifier:
keyid:E9:1F:9D:BB:E6:8B:84:02:7C:ED:4D:31:E8:80:3F:13:E9:D6:5D:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R-du-aLhAJ87U0x6IA_E-nWXRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/aSrHCQIT4pfyWNVtX5PsNo34yos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/6R-du-aLhAJ87U0x6IA_E-nWXRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.245.0/24
193.39.118.0/24
193.200.151.0/24
195.62.36.0/23
Signature Algorithm: sha256WithRSAEncryption
40:48:29:b4:61:c6:af:53:5b:72:2b:96:68:0e:29:c6:49:2c:
f7:34:93:34:92:5d:f8:ba:ab:7b:37:4b:3a:9d:c6:d5:8a:32:
08:4a:43:ec:26:8b:2c:5d:f6:01:bb:82:ae:2a:f5:04:8d:cf:
35:ff:33:34:03:43:e4:fe:9d:e7:c4:32:f0:8b:2f:93:04:21:
a9:a0:85:96:0b:ac:53:19:d5:17:ac:01:5f:b6:ee:f1:a2:be:
fb:b3:d0:3d:4f:9b:08:1f:b3:4c:ea:b8:82:b4:18:35:37:90:
07:72:7a:a2:26:56:a8:ce:2b:b3:77:ed:03:b5:6a:4d:28:9c:
02:1b:9a:ea:aa:82:cf:cd:43:80:2e:f7:39:d6:92:f7:f7:76:
ec:99:87:40:90:6f:80:57:38:cb:dc:80:f5:b3:2e:d7:e3:bf:
d7:19:51:cd:51:32:5b:fc:5b:04:e5:6c:6b:28:e6:2c:82:e8:
27:bc:05:fa:a9:cf:2c:42:1d:4e:f0:78:49:cc:f9:ba:7e:94:
46:1a:8f:8f:a0:7f:7c:9b:e7:3c:75:03:d4:ed:da:e4:9e:55:
ea:ff:35:7d:d2:b9:19:9e:43:cd:b0:1e:d6:c4:5f:b2:3b:05:
80:f5:f4:04:17:0c:4a:dc:44:96:2a:94:36:a5:4e:38:c2:ea:
5d:cc:69:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:59:03 2025 by rpki-client