Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/nE6ZJSY3uZnD_6G1EG5pg8N9veo.roa
File: nE6ZJSY3uZnD_6G1EG5pg8N9veo.roa (raw, json)
Hash identifier: Kxexihews9YF1QZ3WH31HHS7CIi4TDdNrZ0Pl6O2Xyg=
Subject key identifier: 9C:4E:99:25:26:37:B9:99:C3:FF:A1:B5:10:6E:69:83:C3:7D:BD:EA
Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Certificate serial: 0197B2B12281DEC51CFA1FB0C421FE81EA4E
Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/nE6ZJSY3uZnD_6G1EG5pg8N9veo.roa
Signing time: Fri 27 Jun 2025 18:40:42 +0000
ROA not before: Fri 27 Jun 2025 18:40:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 91.202.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b2:b1:22:81:de:c5:1c:fa:1f:b0:c4:21:fe:81:ea:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Validity
Not Before: Jun 27 18:40:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c4e99252637b999c3ffa1b5106e6983c37dbdea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:49:3e:cc:28:e7:71:88:e4:d6:5f:dc:cc:de:
bf:ac:cb:c2:e5:65:1d:cb:c5:78:c8:dd:9e:7a:76:
74:53:5c:11:20:b3:6d:97:64:03:dd:a8:15:36:60:
d7:7f:18:8d:02:f3:92:a4:ee:f7:32:a0:2f:af:f4:
86:4f:52:66:0b:5f:62:7f:31:1d:74:9d:89:cd:df:
a2:70:ad:6d:06:d4:d5:2a:5c:5f:13:96:8c:ce:a8:
4f:bd:cf:fa:5a:90:24:d3:ce:b1:f8:2b:59:55:24:
60:07:fc:dc:be:22:16:e0:c9:31:0b:eb:85:a1:13:
07:e6:fb:5e:ca:4b:5d:c6:8c:21:2c:0b:e5:c9:90:
ec:21:34:2b:33:1e:86:ee:9c:64:b4:df:3c:d2:f2:
85:ef:fa:99:33:a2:c6:0b:96:78:86:13:6a:2a:69:
f7:da:be:d7:a8:3d:aa:c1:51:11:98:3a:ac:80:95:
e8:e6:04:2a:07:70:59:79:51:91:10:d8:03:41:ea:
c7:e8:a4:e9:42:46:22:b8:59:56:9d:a5:e5:8b:e7:
7c:c9:00:3e:4b:9d:2e:2e:2f:fd:04:92:99:10:a5:
36:ac:a1:ed:49:ff:05:d1:27:58:e0:7c:b8:70:94:
53:78:37:d2:14:13:c3:97:75:ac:24:52:5a:83:0e:
98:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4E:99:25:26:37:B9:99:C3:FF:A1:B5:10:6E:69:83:C3:7D:BD:EA
X509v3 Authority Key Identifier:
keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/nE6ZJSY3uZnD_6G1EG5pg8N9veo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.56.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:83:fc:b6:a7:24:f5:b7:30:f8:e8:5d:6e:3a:6c:06:13:86:
a8:d5:42:2f:35:c0:22:57:f3:ca:7d:0c:66:98:ae:3e:23:7a:
d4:90:68:f3:59:27:04:0a:35:aa:df:82:5a:c3:5a:0d:31:9c:
d3:61:df:b2:8b:e1:89:45:52:41:24:59:ba:db:12:d2:8c:b2:
ba:73:6b:82:5d:fb:5c:0d:a4:df:81:4a:06:f7:96:98:3c:b4:
6d:61:06:de:bb:64:aa:cd:19:16:20:83:c2:a9:c1:9e:c9:0d:
0b:d1:ae:68:16:e2:44:f5:b6:16:1a:32:4c:5b:4e:57:47:9f:
08:75:20:76:e0:5a:c0:35:76:ae:d6:6c:2b:c8:c4:a4:ff:20:
f2:87:2f:c3:d7:5e:8e:6a:2d:0b:2d:f4:32:94:08:36:4f:f0:
2e:74:8b:ea:27:34:04:bd:04:da:f4:c8:35:4c:cf:97:9c:6e:
e2:6b:0f:e9:1b:be:26:0f:f3:21:bf:83:ed:07:66:44:54:07:
30:62:aa:de:d5:70:c3:08:33:0e:3a:14:2f:1c:d7:96:c4:7e:
e9:ce:8a:c0:c6:85:47:4a:de:66:f7:ce:92:8f:1d:24:92:10:
ca:1f:df:da:29:55:b0:ba:fa:d5:91:76:59:da:15:7d:22:d5:
b2:c3:fe:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:53:50 2025 by rpki-client