Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/w3oVmuw8ayCWipsjf7Gj9_wvooQ.roa
File: w3oVmuw8ayCWipsjf7Gj9_wvooQ.roa (raw, json)
Hash identifier: PQa7Ps6DrpkpjdthG8dfoc8AVs7mJPa76WRf2LVd8gs=
Subject key identifier: C3:7A:15:9A:EC:3C:6B:20:96:8A:9B:23:7F:B1:A3:F7:FC:2F:A2:84
Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Certificate serial: 0199E05654EDEB0001E74F32F2403E4B6786
Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/w3oVmuw8ayCWipsjf7Gj9_wvooQ.roa
Signing time: Tue 14 Oct 2025 01:29:38 +0000
ROA not before: Tue 14 Oct 2025 01:29:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 91.200.136.0/22 maxlen: 22
91.202.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e0:56:54:ed:eb:00:01:e7:4f:32:f2:40:3e:4b:67:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Validity
Not Before: Oct 14 01:29:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c37a159aec3c6b20968a9b237fb1a3f7fc2fa284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:62:af:db:bf:05:a6:00:01:b7:96:72:25:46:
1b:0f:93:e1:74:e8:b8:14:45:ae:98:39:42:c9:43:
e5:5d:04:08:c3:1e:bd:a0:1f:1f:35:26:0a:76:db:
e5:54:6d:dd:87:84:7f:1b:a1:fa:4f:03:12:11:19:
9e:03:37:ac:b0:c9:a3:8a:4d:64:c9:c3:c8:7b:82:
b4:9c:b7:af:80:48:48:41:3e:b0:44:44:8c:88:07:
a6:2c:7f:fc:c4:7a:91:87:ee:45:e9:eb:84:d0:99:
4e:46:3e:81:fe:66:7b:31:6a:89:72:50:03:b5:ef:
cf:06:90:1c:39:9b:10:68:09:5a:ad:71:90:1d:a5:
30:d4:28:b2:e5:e5:6a:70:d2:dd:0e:2f:b1:cc:90:
b7:27:d7:8b:87:83:be:29:10:2c:1b:8b:af:18:69:
18:00:79:d6:93:5f:a5:e3:a2:09:55:83:43:fb:63:
bc:0e:d6:de:f1:fb:6b:14:dc:24:9a:4e:67:4d:67:
aa:c0:d1:70:dd:1d:c9:c6:b2:f4:2e:d8:30:0b:35:
f5:e1:04:e5:ba:7f:df:e1:46:48:5e:fe:ab:f4:ed:
58:5d:e8:5f:c3:32:b7:2c:fc:5b:d9:9d:e5:45:f9:
bb:56:32:a6:51:32:eb:e1:d1:7c:ea:98:77:e5:53:
a0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7A:15:9A:EC:3C:6B:20:96:8A:9B:23:7F:B1:A3:F7:FC:2F:A2:84
X509v3 Authority Key Identifier:
keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/w3oVmuw8ayCWipsjf7Gj9_wvooQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.136.0/22
91.202.56.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:88:6b:34:fc:cd:ea:ce:6d:10:61:91:fd:f1:5a:e6:56:3d:
ad:8e:b2:77:4f:b2:95:a7:73:f0:cc:db:73:de:fa:c5:b4:3e:
13:ef:79:ff:9e:73:7e:55:9b:95:c4:21:e1:1a:fa:3c:73:03:
f6:4d:66:2d:ff:c1:b2:5d:8d:c0:a9:1c:e2:9b:69:b7:c0:85:
66:12:4a:1b:3b:52:a4:9b:dc:7f:0a:e6:ef:be:94:6e:f2:c7:
1d:8a:c4:85:f2:15:7b:4e:0b:70:f1:a0:80:00:c9:08:9b:ce:
eb:f4:5f:18:65:97:13:e1:df:23:bd:6c:89:4e:92:a2:ab:81:
ed:83:d7:46:5d:22:37:95:36:8c:27:43:3c:de:9b:32:19:d7:
e6:42:a6:4e:38:7f:90:0c:7c:25:13:38:9e:ea:4f:a2:6f:0f:
e9:a7:f8:01:c3:4a:f4:d5:9b:71:55:49:63:01:51:3c:0c:70:
5a:3a:4e:74:95:f3:5e:8b:6e:04:a5:fc:10:b1:3d:04:40:8d:
0c:9e:2f:b6:06:71:bc:ad:2e:78:24:25:f9:ae:49:50:67:8b:
0d:c3:4d:a0:26:04:ae:3e:d6:93:a7:a3:2e:17:59:08:f0:2b:
54:da:fa:e1:3a:d4:53:bd:94:af:23:d8:ae:7b:9e:5a:33:50:
ba:f1:64:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:00 2025 by rpki-client