Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/p-0-WRExyZV5USsnbA07oLLM0Dk.roa
File: p-0-WRExyZV5USsnbA07oLLM0Dk.roa (raw, json)
Hash identifier: TpKQK+Apn7tf7RflC4lVp209f1NDxfhMP5jeUnHBKic=
Subject key identifier: A7:ED:3E:59:11:31:C9:95:79:51:2B:27:6C:0D:3B:A0:B2:CC:D0:39
Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial: 019957D7F7FB87D65C338413704A838ACFA3
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/p-0-WRExyZV5USsnbA07oLLM0Dk.roa
Signing time: Wed 17 Sep 2025 13:23:15 +0000
ROA not before: Wed 17 Sep 2025 13:23:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214382
IP address blocks: 80.91.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:57:d7:f7:fb:87:d6:5c:33:84:13:70:4a:83:8a:cf:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
Validity
Not Before: Sep 17 13:23:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7ed3e591131c99579512b276c0d3ba0b2ccd039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:99:6f:2b:9f:83:cb:d5:80:4e:98:66:1d:3e:
18:dc:38:5b:4f:f6:f5:e0:0f:a2:c8:c2:16:eb:22:
6e:a3:85:51:e3:50:6d:cc:7b:9a:a4:cc:b7:1b:f6:
2c:ed:4a:8e:67:c7:7a:a2:7f:2d:4e:97:86:ae:f5:
01:71:5f:4e:26:0b:8b:2c:19:62:ba:8b:95:95:09:
10:4d:7e:3a:c0:e8:12:1c:85:cb:35:ae:63:52:5b:
66:83:c4:fa:56:a1:f5:de:cf:69:c2:b7:78:06:b6:
63:d6:74:8f:28:10:34:00:1b:f4:e0:58:f6:80:b8:
a3:56:ad:67:0e:2a:f4:e6:01:ab:6a:27:84:a6:7a:
ce:eb:ee:0c:ea:29:1a:80:04:19:24:9e:fc:f0:d4:
b8:c9:c5:33:83:69:35:9f:e1:40:d1:b5:27:d3:a0:
90:cc:64:27:29:da:4a:01:75:dd:90:cd:ce:7f:af:
0e:11:02:c6:ce:c3:be:ad:7d:5c:a5:14:c9:bc:74:
70:ca:12:28:87:76:dd:a4:17:00:c4:90:26:8d:44:
02:25:bd:48:00:a1:df:fd:5e:a5:b1:21:65:a3:35:
b8:4c:03:b1:8b:4c:e8:c1:ad:89:dd:b8:c4:14:c5:
67:b7:53:f6:26:bd:e7:d2:4e:64:9e:8a:21:d4:e8:
ba:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:ED:3E:59:11:31:C9:95:79:51:2B:27:6C:0D:3B:A0:B2:CC:D0:39
X509v3 Authority Key Identifier:
keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/p-0-WRExyZV5USsnbA07oLLM0Dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.71.0/24
Signature Algorithm: sha256WithRSAEncryption
57:16:d6:82:24:df:79:b8:92:c7:7f:bc:e4:e0:83:36:a4:0f:
8e:90:b5:da:a2:da:f8:f4:fe:19:48:20:82:26:0f:6b:3f:19:
0f:9d:c1:c1:d3:e3:b5:0a:d4:3d:31:b2:eb:1e:36:fc:09:1d:
a5:d3:74:61:d9:26:e7:d9:b0:af:65:de:f0:b5:3f:56:53:2b:
1d:f8:74:70:50:06:32:c6:2a:de:a7:65:ca:59:db:e9:a2:21:
a1:15:4a:f9:96:50:32:52:0b:ca:af:14:26:2d:13:aa:b0:3e:
a0:47:89:24:54:f8:ca:d6:b2:c5:f8:2a:a4:6d:9d:e3:6d:62:
e3:e3:5b:0e:b1:95:aa:b9:8c:46:f5:68:8d:45:f9:9d:ef:a0:
87:d4:88:1c:e5:1e:7f:3b:62:cd:98:61:be:57:60:9d:ef:6a:
06:08:df:50:a6:44:90:b6:55:8d:b2:26:c6:63:cb:de:a7:f5:
3f:fe:e6:5e:27:c1:91:81:c3:d0:81:dd:77:77:a4:89:d5:4f:
2a:00:67:bc:81:19:41:0f:a5:aa:d9:14:17:39:0e:8f:49:a3:
d5:79:f8:f2:97:b9:20:a3:a0:cf:80:23:00:a4:2d:f0:3b:b9:
52:1e:03:8e:68:3b:5b:d1:1d:e9:f9:c4:4b:b6:47:c1:09:4d:
32:d8:e8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:10:45 2025 by rpki-client