Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/aBpP3bYzGKuR6nhWBmH2ZNVu5M0.roa
File: aBpP3bYzGKuR6nhWBmH2ZNVu5M0.roa (raw, json)
Hash identifier: GDuJcoE/4sB2mx00j2kfWz5EyEq+Z7H0hLsLa7O17eM=
Subject key identifier: 68:1A:4F:DD:B6:33:18:AB:91:EA:78:56:06:61:F6:64:D5:6E:E4:CD
Certificate issuer: /CN=0976bed9bfb96ffa198220558aa3d5b8c8f9cd3d
Certificate serial: 019783DB426C18B6F53529883C69280A9568
Authority key identifier: 09:76:BE:D9:BF:B9:6F:FA:19:82:20:55:8A:A3:D5:B8:C8:F9:CD:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXa-2b-5b_oZgiBViqPVuMj5zT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/aBpP3bYzGKuR6nhWBmH2ZNVu5M0.roa
Signing time: Wed 18 Jun 2025 16:24:34 +0000
ROA not before: Wed 18 Jun 2025 16:24:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198891
IP address blocks: 91.236.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXa-2b-5b_oZgiBViqPVuMj5zT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 19:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:db:42:6c:18:b6:f5:35:29:88:3c:69:28:0a:95:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0976bed9bfb96ffa198220558aa3d5b8c8f9cd3d
Validity
Not Before: Jun 18 16:24:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=681a4fddb63318ab91ea78560661f664d56ee4cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c0:d7:4e:3a:78:8c:d8:19:89:a7:77:43:cc:
79:cf:4c:dc:e7:b5:5f:af:64:03:35:23:1c:8e:18:
ce:64:44:1b:27:92:72:7c:9e:6d:62:5e:b0:2f:83:
ba:94:a3:a6:b0:1f:cb:f5:19:58:bb:75:c7:4a:03:
f8:1b:9e:30:52:86:36:2d:0a:0a:e2:6c:37:dd:53:
a3:1b:ab:a3:fe:6c:3e:24:da:c8:92:39:ed:8e:19:
e8:d3:6b:35:33:dd:21:8f:c8:40:24:fb:87:71:18:
11:73:08:4a:68:6e:de:0f:e9:da:0e:01:d3:ca:36:
15:35:2d:c1:af:af:d9:03:98:f7:f5:26:17:40:61:
0e:66:fa:fa:60:94:0c:e4:6c:1e:7e:36:8a:63:6a:
13:d5:8e:99:13:d7:14:cc:f2:96:74:4f:b0:a5:ea:
40:b7:51:46:d1:d9:cd:68:86:fb:23:2b:8f:c5:d4:
40:e7:c9:ea:40:33:b0:47:c9:90:51:e9:cc:9d:3f:
2c:97:65:0f:ab:4d:9b:0f:aa:6c:2c:d4:57:fe:14:
2a:73:0a:55:70:a8:ca:db:0e:46:7b:59:fc:48:de:
09:38:b5:17:3f:80:6b:f7:90:bb:14:de:02:21:09:
65:92:1f:04:df:66:29:1c:69:df:89:13:3c:79:8b:
e8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1A:4F:DD:B6:33:18:AB:91:EA:78:56:06:61:F6:64:D5:6E:E4:CD
X509v3 Authority Key Identifier:
keyid:09:76:BE:D9:BF:B9:6F:FA:19:82:20:55:8A:A3:D5:B8:C8:F9:CD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXa-2b-5b_oZgiBViqPVuMj5zT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/aBpP3bYzGKuR6nhWBmH2ZNVu5M0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ecc2cf-ecc0-4cbb-9635-166c6a3d3ecf/1/CXa-2b-5b_oZgiBViqPVuMj5zT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.137.0/24
Signature Algorithm: sha256WithRSAEncryption
40:18:45:77:48:5d:87:c4:ae:bd:1b:6f:9e:bf:48:82:21:79:
5d:ec:bf:c4:e6:1a:24:ba:dd:1e:aa:6d:70:d2:ef:47:28:e4:
53:36:05:b8:4d:5e:5e:90:ac:55:89:d6:48:40:96:9a:8b:63:
62:8d:b4:9f:f0:4c:1e:93:2e:10:72:b8:73:44:d9:ec:63:6f:
08:32:dd:86:41:6e:2b:3d:98:28:c1:76:23:75:0b:f1:06:bf:
fe:99:68:b0:0d:cc:60:7d:cc:6a:12:95:6a:70:48:aa:9e:df:
41:c6:8a:1f:1e:c5:b1:7f:4d:4b:97:13:07:ba:5d:34:a9:95:
ca:8a:1e:c3:61:a1:03:f8:26:38:cf:00:2a:82:d8:62:a2:1b:
53:64:af:0c:e5:70:db:3c:83:d2:2c:71:7e:7b:86:38:48:a2:
e4:be:23:9f:bc:c6:1c:a8:dc:2a:38:cb:c7:5f:02:4b:8e:99:
6c:21:7b:d3:50:a2:a7:dd:26:f5:e8:8f:21:bf:c8:e6:e8:d6:
29:60:4d:f8:9e:e5:ec:8b:95:bc:22:8b:57:09:48:1b:fe:55:
cf:29:b9:c8:f9:5f:67:8d:c3:fe:60:e1:31:db:93:82:14:20:
bc:6b:38:44:57:f6:e9:a3:c3:0d:62:ab:51:e4:70:01:24:e2:
b3:2e:12:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 03:34:31 2025 by rpki-client