Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3a44a2-7f37-4ef5-b034-a4fc67e1c2fb/1/rOJqhADJ5rc7U_0FXgnllg311Uw.roa
File: rOJqhADJ5rc7U_0FXgnllg311Uw.roa (raw, json)
Hash identifier: Cbl9MsCAqt+xAwhZCVrGdH/26tfRlYC7HA90lZevZDY=
Subject key identifier: AC:E2:6A:84:00:C9:E6:B7:3B:53:FD:05:5E:09:E5:96:0D:F5:D5:4C
Certificate issuer: /CN=759dbbb4ca04329bc509d6dd1cd50b9356ad8906
Certificate serial: 019934324347B21B2C32F0F4063E009789B3
Authority key identifier: 75:9D:BB:B4:CA:04:32:9B:C5:09:D6:DD:1C:D5:0B:93:56:AD:89:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ27tMoEMpvFCdbdHNULk1atiQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3a44a2-7f37-4ef5-b034-a4fc67e1c2fb/1/rOJqhADJ5rc7U_0FXgnllg311Uw.roa
Signing time: Wed 10 Sep 2025 15:15:33 +0000
ROA not before: Wed 10 Sep 2025 15:15:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44023
IP address blocks: 91.198.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/3a44a2-7f37-4ef5-b034-a4fc67e1c2fb/1/dZ27tMoEMpvFCdbdHNULk1atiQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/3a44a2-7f37-4ef5-b034-a4fc67e1c2fb/1/dZ27tMoEMpvFCdbdHNULk1atiQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZ27tMoEMpvFCdbdHNULk1atiQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:32:43:47:b2:1b:2c:32:f0:f4:06:3e:00:97:89:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759dbbb4ca04329bc509d6dd1cd50b9356ad8906
Validity
Not Before: Sep 10 15:15:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ace26a8400c9e6b73b53fd055e09e5960df5d54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:63:00:bf:7f:49:92:4e:71:3f:cc:34:b0:4b:
ab:58:db:fc:0d:e6:c9:40:3d:e4:5c:b4:86:8e:f6:
da:36:9d:00:58:b8:98:81:8d:20:11:2d:88:d7:0a:
57:a2:35:7d:0a:33:da:b8:7a:a3:7f:63:4a:f5:57:
3f:2a:0d:f1:29:60:81:40:bb:25:e6:a4:39:e9:83:
2f:5f:49:ac:1b:79:fa:f1:3b:bf:fc:58:49:61:3b:
76:ac:6c:20:08:ec:05:7f:4e:65:fd:41:cf:ce:90:
e5:2b:4c:07:75:fc:76:08:5e:99:b4:14:a4:b9:71:
5c:eb:c2:64:02:70:ac:f4:df:74:4a:36:ab:3f:30:
33:85:0a:e6:86:5c:d8:a8:90:78:b5:d3:da:46:1c:
4a:a8:4f:0e:c4:48:0e:11:78:59:ec:5a:df:a2:b9:
4a:6e:61:bb:e9:c7:b1:d6:e9:1a:a0:ce:3c:54:c3:
d3:57:2d:6c:60:04:c1:8a:bc:7d:86:95:ef:59:f7:
1c:a9:e7:7e:4a:ad:8e:3f:3f:01:5f:42:35:f5:e8:
c0:b9:37:58:8a:fa:bd:ea:45:4d:95:54:cc:e9:ef:
6c:54:f7:1c:71:38:3b:4c:5c:2b:d9:5d:56:a4:89:
68:58:c9:31:b6:8e:7a:d4:1e:b7:e5:87:b9:53:40:
ee:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E2:6A:84:00:C9:E6:B7:3B:53:FD:05:5E:09:E5:96:0D:F5:D5:4C
X509v3 Authority Key Identifier:
keyid:75:9D:BB:B4:CA:04:32:9B:C5:09:D6:DD:1C:D5:0B:93:56:AD:89:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ27tMoEMpvFCdbdHNULk1atiQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a44a2-7f37-4ef5-b034-a4fc67e1c2fb/1/rOJqhADJ5rc7U_0FXgnllg311Uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a44a2-7f37-4ef5-b034-a4fc67e1c2fb/1/dZ27tMoEMpvFCdbdHNULk1atiQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.253.0/24
Signature Algorithm: sha256WithRSAEncryption
37:fc:22:d2:43:af:8d:f8:bc:10:75:34:34:b4:58:b8:a5:87:
c0:45:d2:52:52:57:bb:87:7d:0d:25:57:9c:2f:cd:8a:07:e9:
e3:2b:1e:2d:e2:2e:07:db:ae:fa:40:06:f8:25:b1:b9:7d:1b:
1e:16:1c:37:61:19:42:46:ef:e6:26:96:a2:ee:8d:62:51:d7:
8a:2f:fe:09:4d:b4:3b:8e:a1:47:3f:1c:12:95:a1:5c:fe:dd:
0d:aa:95:4d:5e:4c:c4:19:6b:a2:e6:a6:a9:5e:1c:40:ca:c0:
fa:bf:df:46:22:cc:6c:9f:63:6d:3f:78:9f:70:ec:22:6f:30:
e6:5d:59:17:d6:92:7a:6a:e5:c1:59:1f:71:58:d3:2e:2a:e7:
02:1a:f3:0d:b5:1d:30:9a:37:bb:58:59:24:28:cd:f2:de:31:
7a:9e:ea:a2:16:2a:33:c0:f2:da:0f:76:3e:96:49:2e:d0:34:
f8:6f:b2:eb:79:ca:6c:93:bb:d5:96:15:43:cc:3b:d3:a1:74:
93:18:a3:c0:f7:50:5d:05:22:9d:92:ce:aa:7d:2e:2f:33:22:
0c:fa:db:b8:cc:d6:f4:f9:8e:11:d1:31:db:df:1e:3d:f2:22:
76:0e:0d:fc:d8:07:12:30:f0:6c:6d:52:f7:c6:d7:8f:3d:ba:
2f:14:3c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:24:36 2025 by rpki-client