
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/IR6bhoy3ePPWWwo3_ZpGpP-A008.roa
File: IR6bhoy3ePPWWwo3_ZpGpP-A008.roa (raw, json)
Hash identifier: hO+Cpd9CrCTDtpZsy+pHeVwO7+muAbZ+Xuft5N9bxEw=
Subject key identifier: 21:1E:9B:86:8C:B7:78:F3:D6:5B:0A:37:FD:9A:46:A4:FF:80:D3:4F
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 0199B91D2BB4B7D99C6A0516D3EF1E24913B
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/IR6bhoy3ePPWWwo3_ZpGpP-A008.roa
Signing time: Mon 06 Oct 2025 10:42:00 +0000
ROA not before: Mon 06 Oct 2025 10:42:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212669
IP address blocks: 91.132.15.0/24 maxlen: 24
194.31.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b9:1d:2b:b4:b7:d9:9c:6a:05:16:d3:ef:1e:24:91:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Oct 6 10:42:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=211e9b868cb778f3d65b0a37fd9a46a4ff80d34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:73:46:15:12:52:23:fb:17:21:33:81:3a:14:
63:89:ab:93:90:17:54:06:08:4d:a3:2d:e6:f6:fe:
69:8d:82:aa:d6:6a:71:d7:2b:78:a4:dd:29:50:56:
24:c6:fc:cf:1e:63:0e:c8:57:0a:d4:fa:93:62:71:
9a:a6:0a:f0:8f:63:5d:a8:b1:22:81:94:b4:c4:19:
2b:cf:e6:f3:bb:dc:a4:a8:e9:36:c6:0d:5f:b7:44:
44:ab:3f:d8:a6:05:cb:cb:88:48:2c:fd:2b:98:c6:
ac:6f:47:ba:29:6c:18:62:43:c6:f2:d7:f2:b0:fd:
e3:fe:5b:d1:8c:99:d7:d1:a4:bb:ce:18:e2:2e:d4:
a6:ca:e5:98:2d:96:8c:87:0f:7b:8c:15:f8:a0:99:
bb:3d:2a:76:ea:b6:a4:c2:4c:11:88:57:d4:29:fd:
eb:e0:e2:97:90:a2:5e:0f:49:29:1c:6c:ee:c6:8d:
59:71:09:33:12:8f:35:30:29:a9:23:45:da:1a:b9:
06:0b:b1:33:d7:6c:b1:fb:9b:1d:62:b8:33:a8:f5:
0d:73:87:51:08:82:1a:72:10:3f:f5:01:e5:83:d3:
21:2d:39:1e:22:71:c5:3f:9f:0f:d2:b9:8e:14:b9:
e4:6b:1b:93:7a:d9:38:df:aa:b0:33:94:40:49:44:
27:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1E:9B:86:8C:B7:78:F3:D6:5B:0A:37:FD:9A:46:A4:FF:80:D3:4F
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/IR6bhoy3ePPWWwo3_ZpGpP-A008.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.15.0/24
194.31.183.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:46:65:fe:b0:8d:17:7a:e7:9b:5d:5b:44:a1:6b:b0:b7:2f:
24:2c:69:f6:aa:f8:11:90:07:4d:71:7e:0e:75:44:6f:1d:31:
86:80:66:28:d1:cd:c7:94:7d:ac:ba:be:c9:04:c0:c5:73:71:
77:85:39:b2:e8:ef:bb:28:98:4e:e7:4f:60:3f:52:80:6f:dd:
33:f2:f7:15:63:f1:d3:0e:b3:7d:08:ba:ef:5a:0e:70:d6:31:
aa:6a:1d:6d:2d:35:db:fa:0a:f1:0d:a1:99:65:7a:f0:16:41:
e5:8e:37:52:82:43:5c:73:45:b1:34:b8:3a:ac:bd:78:09:8e:
78:f1:b7:d8:4b:fb:85:b6:c5:01:50:b7:fe:86:9c:29:2b:73:
6b:68:ec:01:0c:c5:70:e4:4e:e0:48:08:60:91:39:7c:f8:14:
2a:49:a4:c7:af:79:f4:33:13:cb:0c:9b:1d:ea:37:1f:f7:e9:
a1:7b:da:e6:b9:7c:81:06:31:95:e7:a9:30:d6:64:18:f0:82:
84:73:76:f6:e0:2a:62:bb:33:32:1f:e9:23:9e:dc:ab:93:a7:
dd:0d:f6:0b:f0:b2:6d:e5:b3:0f:d0:e0:00:30:67:a3:95:4a:
a1:bb:fa:61:e4:1e:0e:78:ca:d6:48:ce:06:b0:d0:2f:0d:d2:
ff:e4:e6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:45:00 2025 by rpki-client