Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/tv0ukI6khIAMOhIHQUwhybvajH8.roa
File: tv0ukI6khIAMOhIHQUwhybvajH8.roa (raw, json)
Hash identifier: 15K34MSiCF97LiSsF0K1zSiL3spXFwrQsFzvbUDfnUU=
Subject key identifier: B6:FD:2E:90:8E:A4:84:80:0C:3A:12:07:41:4C:21:C9:BB:DA:8C:7F
Certificate issuer: /CN=671cd071dc960bdc829b0be7e34b6b61cf8b0b1e
Certificate serial: 0199CE660B793A61F2A998516CD9DEE58C3C
Authority key identifier: 67:1C:D0:71:DC:96:0B:DC:82:9B:0B:E7:E3:4B:6B:61:CF:8B:0B:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/tv0ukI6khIAMOhIHQUwhybvajH8.roa
Signing time: Fri 10 Oct 2025 13:53:38 +0000
ROA not before: Fri 10 Oct 2025 13:53:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21489
IP address blocks: 91.223.21.0/24 maxlen: 24
185.45.52.0/24 maxlen: 24
185.45.53.0/24 maxlen: 24
185.45.54.0/24 maxlen: 24
185.45.55.0/24 maxlen: 24
192.101.252.0/24 maxlen: 24
193.110.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ce:66:0b:79:3a:61:f2:a9:98:51:6c:d9:de:e5:8c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=671cd071dc960bdc829b0be7e34b6b61cf8b0b1e
Validity
Not Before: Oct 10 13:53:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6fd2e908ea484800c3a1207414c21c9bbda8c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:92:30:6e:68:3b:55:f4:59:af:51:6a:6e:0e:
78:d5:e4:f8:dc:fe:c8:00:b7:0c:3a:dd:c4:58:ea:
37:e5:0e:cd:34:83:66:01:b6:41:f9:9f:7d:96:43:
a6:a3:34:97:c1:57:27:79:f3:38:df:78:d4:71:63:
5a:c1:df:11:0d:14:e8:04:89:01:a6:b4:d4:1d:02:
e3:a8:a6:58:64:b3:87:de:50:83:5d:6b:50:a0:20:
c6:ae:f2:69:0f:64:10:06:ab:d1:10:62:bc:43:8a:
da:5f:7c:b8:94:0f:b5:0f:e0:d4:fa:e3:5c:04:6f:
00:0f:a7:ed:f8:79:1f:9f:e0:9a:8c:3a:bc:f4:8b:
86:dc:19:45:b8:10:e0:d7:ed:b2:cf:5e:05:49:a4:
fb:a4:5e:c7:c1:ab:43:7a:25:47:46:c6:39:22:c0:
1a:fe:a8:4d:fa:58:98:b1:bf:14:de:aa:c2:3c:67:
ee:a4:18:41:fb:80:29:71:51:d1:71:59:fd:d0:94:
03:14:f8:4a:9e:ae:49:cb:b7:13:22:30:db:a8:bf:
9f:c7:6c:10:dd:98:73:5e:81:3c:a1:ce:32:98:c9:
93:41:90:d3:c1:7e:4d:c9:c7:bd:5f:6c:e7:6b:f7:
01:88:99:ad:d1:fe:9f:bf:a5:ee:6f:b8:30:ad:d0:
a6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FD:2E:90:8E:A4:84:80:0C:3A:12:07:41:4C:21:C9:BB:DA:8C:7F
X509v3 Authority Key Identifier:
keyid:67:1C:D0:71:DC:96:0B:DC:82:9B:0B:E7:E3:4B:6B:61:CF:8B:0B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/tv0ukI6khIAMOhIHQUwhybvajH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.21.0/24
185.45.52.0/22
192.101.252.0/24
193.110.130.0/24
Signature Algorithm: sha256WithRSAEncryption
14:aa:74:10:71:1e:09:e5:f8:61:94:d2:61:ab:4d:e7:71:8a:
cc:31:9d:16:1d:2e:af:f4:c1:d2:70:09:88:b4:4b:2b:ef:6c:
91:4a:5f:1c:38:63:29:3d:04:e0:fc:1c:26:a9:df:10:71:a7:
af:ec:08:0c:a8:67:84:31:43:c5:2b:dd:dc:39:9a:fa:c9:4d:
29:27:7a:d3:c0:af:a2:21:bf:bb:92:7f:86:bc:7f:3b:e6:e2:
f7:6e:99:4b:95:f3:6a:17:f3:d2:6c:1f:ad:c9:36:53:87:d9:
72:40:49:3e:d9:50:d9:fe:75:8e:18:7e:98:dd:15:c5:a5:fd:
99:74:28:74:67:b4:10:e8:b1:ee:26:69:55:c1:52:56:52:c6:
42:3c:00:e8:5a:a8:d1:e6:15:43:87:8b:bb:44:2d:f1:a7:a7:
79:ee:d2:ed:9d:0d:09:27:33:af:ee:52:35:e0:cc:84:28:e9:
12:37:02:e8:9b:84:d6:ea:c0:11:77:13:c2:cc:b0:31:e2:c2:
2c:54:5b:10:4a:c8:34:da:37:5a:9f:a3:c1:7b:19:af:72:ef:
ab:63:fc:34:fa:87:53:88:23:43:ef:96:2e:ea:98:8d:a0:58:
7c:69:9a:5b:e4:87:85:06:94:6a:5a:80:2e:30:f7:f6:47:2b:
33:bc:9e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:09:07 2025 by rpki-client