Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/cfd609-98c7-44a7-b480-0f0fc35347ff/1/_ibmZHaelkcyc4omh-Qm8NJPUxk.roa
File: _ibmZHaelkcyc4omh-Qm8NJPUxk.roa (raw, json)
Hash identifier: 6dSWb0nF2DGjmt5A4wFgvT5vOxkwCq5uvr2uq8+cBaQ=
Subject key identifier: FE:26:E6:64:76:9E:96:47:32:73:8A:26:87:E4:26:F0:D2:4F:53:19
Certificate issuer: /CN=55d383b68a3eafb30c27ba0c4c69f0a2b950dcc5
Certificate serial: 01993E8F5BA52DD5C111C83A32C9045A9AE4
Authority key identifier: 55:D3:83:B6:8A:3E:AF:B3:0C:27:BA:0C:4C:69:F0:A2:B9:50:DC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VdODtoo-r7MMJ7oMTGnworlQ3MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/cfd609-98c7-44a7-b480-0f0fc35347ff/1/_ibmZHaelkcyc4omh-Qm8NJPUxk.roa
Signing time: Fri 12 Sep 2025 15:33:26 +0000
ROA not before: Fri 12 Sep 2025 15:33:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48255
IP address blocks: 91.209.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/cfd609-98c7-44a7-b480-0f0fc35347ff/1/VdODtoo-r7MMJ7oMTGnworlQ3MU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/cfd609-98c7-44a7-b480-0f0fc35347ff/1/VdODtoo-r7MMJ7oMTGnworlQ3MU.mft
rsync://rpki.ripe.net/repository/DEFAULT/VdODtoo-r7MMJ7oMTGnworlQ3MU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3e:8f:5b:a5:2d:d5:c1:11:c8:3a:32:c9:04:5a:9a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55d383b68a3eafb30c27ba0c4c69f0a2b950dcc5
Validity
Not Before: Sep 12 15:33:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe26e664769e964732738a2687e426f0d24f5319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7f:7a:34:78:a7:e7:78:43:a9:49:cf:e3:ac:
d7:2b:53:95:70:01:9a:a9:69:23:55:91:59:0e:d5:
1b:31:06:fb:ce:64:f4:c6:76:de:13:90:11:81:08:
75:29:04:51:85:2b:68:f2:93:e3:00:b9:7a:ea:4a:
d0:b8:a7:db:66:09:52:d7:be:24:27:30:d6:d1:d7:
0c:16:4c:2b:c2:f7:b9:40:6b:ac:e7:8a:d7:58:77:
73:df:e0:96:c9:c0:22:5b:9a:67:4c:e1:d6:c3:6a:
ee:2f:c1:dd:ec:39:4b:11:fd:d1:fd:5a:45:71:17:
1c:b7:25:00:2c:59:e9:28:bd:cd:26:6c:8d:d4:8e:
2e:39:90:49:7b:6a:41:44:0d:57:af:02:bc:68:a5:
b4:98:a9:aa:c7:bc:38:22:79:40:a3:e9:45:17:2c:
29:d6:ad:5f:20:28:ee:ae:06:77:95:25:bb:a5:a0:
48:94:d1:9d:3b:4b:1e:4e:11:34:3f:d2:62:2b:21:
1b:5f:3d:d2:e2:0a:cd:09:12:48:96:26:fb:fa:27:
a0:d9:c7:63:b3:73:42:ed:f6:cf:00:62:5f:75:7d:
ce:a9:5b:40:4e:b7:d2:7c:72:4b:de:6c:07:4c:47:
1c:4a:f2:40:b4:3c:b8:79:46:c1:bd:50:ea:2c:a0:
58:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:26:E6:64:76:9E:96:47:32:73:8A:26:87:E4:26:F0:D2:4F:53:19
X509v3 Authority Key Identifier:
keyid:55:D3:83:B6:8A:3E:AF:B3:0C:27:BA:0C:4C:69:F0:A2:B9:50:DC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdODtoo-r7MMJ7oMTGnworlQ3MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cfd609-98c7-44a7-b480-0f0fc35347ff/1/_ibmZHaelkcyc4omh-Qm8NJPUxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cfd609-98c7-44a7-b480-0f0fc35347ff/1/VdODtoo-r7MMJ7oMTGnworlQ3MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.74.0/24
Signature Algorithm: sha256WithRSAEncryption
33:e3:8a:d0:11:67:56:5f:fe:96:0b:b7:26:e2:3b:3b:39:fe:
cf:6e:03:51:82:94:d7:4e:0e:d0:7e:77:fa:18:49:dc:1c:37:
07:c8:7b:54:95:fd:c0:30:92:84:7c:f5:16:1a:10:17:9f:dc:
71:e7:c9:e6:01:86:62:f6:41:6e:7f:b5:4b:e7:c5:3d:56:25:
f8:52:ea:bb:d9:e2:24:a2:58:17:ad:18:d5:bc:9c:98:e1:43:
52:7b:92:20:da:fe:84:e9:94:81:0a:ea:c8:a0:4a:72:85:3b:
c5:e3:c6:52:0a:e2:af:dc:4c:96:6b:22:7a:48:03:22:23:5b:
79:27:5e:16:3f:b0:b0:ee:bc:5a:05:e0:58:38:ab:c2:6f:38:
e9:1b:4e:19:d4:0f:14:d2:07:e0:d0:61:f4:54:e7:b6:39:b2:
c3:1e:c2:ba:c1:af:fe:a8:cc:26:37:e5:a9:15:c1:6d:c1:a5:
b5:20:05:e9:2b:1f:7b:0c:c3:af:0f:0b:43:11:d4:f7:31:a6:
d7:ff:d6:b6:f6:cd:76:c5:10:5e:67:80:eb:27:2f:08:16:37:
ff:cb:d4:ca:45:25:35:20:52:ac:f2:07:c4:cb:b4:97:b3:1b:
60:68:ea:8d:32:bf:0e:06:52:1f:78:d4:77:a0:8e:6f:a4:fd:
e4:21:50:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:24 2025 by rpki-client