Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/p4n6DMVXRfxSNvujgZMUtP18wqQ.roa
File: p4n6DMVXRfxSNvujgZMUtP18wqQ.roa (raw, json)
Hash identifier: E3oRG9G+UtQqAk8G6rS3MWGj3sQbFqJ/BYIdf5UtbNU=
Subject key identifier: A7:89:FA:0C:C5:57:45:FC:52:36:FB:A3:81:93:14:B4:FD:7C:C2:A4
Certificate issuer: /CN=b0ff273a8fe212090ba1cb78c6331f80e78c3025
Certificate serial: 0198A7EB7C5335DE5402AC60B4237E0E3A0D
Authority key identifier: B0:FF:27:3A:8F:E2:12:09:0B:A1:CB:78:C6:33:1F:80:E7:8C:30:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/p4n6DMVXRfxSNvujgZMUtP18wqQ.roa
Signing time: Thu 14 Aug 2025 09:31:24 +0000
ROA not before: Thu 14 Aug 2025 09:31:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215454
IP address blocks: 91.103.139.0/24 maxlen: 24
2a13:30c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a7:eb:7c:53:35:de:54:02:ac:60:b4:23:7e:0e:3a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ff273a8fe212090ba1cb78c6331f80e78c3025
Validity
Not Before: Aug 14 09:31:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a789fa0cc55745fc5236fba3819314b4fd7cc2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:53:7f:e6:fc:cd:43:56:d7:ff:f4:1c:cc:06:
42:9d:a3:df:1e:b5:a1:5b:bc:5e:e5:6b:4d:b0:a5:
3d:4f:3b:cd:e4:2f:31:cd:58:79:82:26:26:7f:09:
5e:97:dd:14:b0:42:b2:46:71:eb:42:20:a9:a9:e0:
69:83:82:27:be:93:5a:ea:1b:e9:d7:62:11:de:45:
da:9d:81:e1:15:fc:e6:94:02:81:75:21:46:df:96:
26:0b:45:4a:06:c2:ed:c7:43:fa:27:4c:51:90:d4:
48:86:3f:13:68:58:db:f4:93:0f:b6:a2:4f:94:b8:
48:54:b4:33:1d:bc:9f:db:6b:99:27:ab:ca:57:18:
39:30:92:01:dd:0d:84:7d:2f:6b:08:1d:9e:27:b3:
fa:24:d8:64:60:85:7b:01:d4:de:74:d1:35:3c:39:
4e:63:07:c8:96:6e:46:e3:29:0a:8f:8a:f8:41:c3:
83:a6:0d:d2:e3:02:4d:d9:fd:8d:40:0d:51:6b:29:
e9:05:a0:99:13:72:8a:00:68:48:10:bd:1c:c5:3c:
08:53:79:50:84:6f:f6:a0:14:97:7d:56:38:bc:34:
8a:ad:6e:8e:2f:e4:aa:02:23:f4:1b:aa:ca:86:f4:
8e:9e:c8:d9:76:a7:99:c1:3a:15:86:14:d4:51:ec:
a9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:89:FA:0C:C5:57:45:FC:52:36:FB:A3:81:93:14:B4:FD:7C:C2:A4
X509v3 Authority Key Identifier:
keyid:B0:FF:27:3A:8F:E2:12:09:0B:A1:CB:78:C6:33:1F:80:E7:8C:30:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/p4n6DMVXRfxSNvujgZMUtP18wqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.139.0/24
IPv6:
2a13:30c0::/29
Signature Algorithm: sha256WithRSAEncryption
6d:fe:1e:f9:0e:f4:96:1e:79:85:6c:d6:90:7a:d3:58:ba:e9:
64:89:d4:eb:60:b9:b9:ab:09:50:cf:be:37:43:f2:87:39:e3:
62:35:3c:b8:25:f9:93:12:52:8b:c9:f9:e0:04:79:3b:cf:eb:
14:92:be:b9:91:a0:6c:d7:eb:9b:dd:aa:4f:e2:b0:fe:64:a4:
7b:35:8d:6a:68:a2:d8:21:50:e3:64:d1:2f:b7:e1:08:76:d5:
6a:d0:37:1e:ec:38:96:ba:72:77:ee:96:aa:1c:26:73:84:c0:
a5:53:2e:5f:f9:f7:bf:fd:10:40:e1:d6:2e:5b:91:1f:55:f8:
9d:8d:a8:e1:1a:22:67:e0:02:a4:0d:4a:6e:bb:5e:b6:83:33:
67:2a:70:21:41:dd:58:7d:e3:b5:e9:28:b7:3f:c6:40:54:a2:
8d:ce:b3:32:da:1e:7f:1b:a2:05:17:d4:22:e2:b3:85:6b:d1:
13:89:58:b7:ea:61:d4:2c:21:42:16:21:3c:d4:dc:40:cf:ed:
13:a2:c6:ec:5d:c3:2f:88:82:7f:d8:f0:f7:08:fd:d7:80:fa:
fc:dd:dd:9f:b2:7d:14:76:3e:52:50:6a:be:ff:f6:5e:41:1d:
86:30:e3:ee:b6:92:06:f4:92:c5:77:d2:fa:78:30:95:36:06:
21:70:61:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:46:15 2025 by rpki-client