Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/3NvNrWEVmChu4DMSl71yUBOUL1E.roa
File: 3NvNrWEVmChu4DMSl71yUBOUL1E.roa (raw, json)
Hash identifier: GasLqu+d7ICCgXWrZURm0ppqSwFCpgX0/TSR8hCVtjo=
Subject key identifier: DC:DB:CD:AD:61:15:98:28:6E:E0:33:12:97:BD:72:50:13:94:2F:51
Certificate issuer: /CN=b63a3094439cac0f555701286cd54373bce6cb50
Certificate serial: 0198F0DDD51CCBD5052F8F2B81239C30FA5D
Authority key identifier: B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/3NvNrWEVmChu4DMSl71yUBOUL1E.roa
Signing time: Thu 28 Aug 2025 13:28:46 +0000
ROA not before: Thu 28 Aug 2025 13:28:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211995
IP address blocks: 91.191.194.0/24 maxlen: 24
91.191.195.0/24 maxlen: 24
91.191.196.0/24 maxlen: 24
91.191.197.0/24 maxlen: 24
91.191.198.0/24 maxlen: 24
91.191.199.0/24 maxlen: 24
91.191.200.0/24 maxlen: 24
91.191.201.0/24 maxlen: 24
91.191.202.0/24 maxlen: 24
91.191.203.0/24 maxlen: 24
91.191.204.0/24 maxlen: 24
91.191.205.0/24 maxlen: 24
130.0.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 01:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f0:dd:d5:1c:cb:d5:05:2f:8f:2b:81:23:9c:30:fa:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63a3094439cac0f555701286cd54373bce6cb50
Validity
Not Before: Aug 28 13:28:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcdbcdad611598286ee0331297bd725013942f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a6:79:45:92:1e:24:ac:c4:ff:92:e1:9b:fe:
b6:64:8b:ad:de:f6:a9:a7:27:7c:de:23:e5:ea:7f:
7a:2c:ec:ec:89:8f:15:a7:1f:d2:97:64:c3:72:21:
6d:a3:c8:4b:22:90:aa:eb:bd:b8:43:7e:8a:4b:30:
4f:f2:3e:33:cf:fa:bb:12:ea:87:a0:ab:c6:fc:71:
2f:d1:93:c1:99:92:cb:86:75:a2:f2:61:35:29:c5:
87:93:e7:e9:4b:4d:f0:a1:0e:b4:a0:e3:55:2f:26:
89:de:af:2d:59:1f:6b:7f:10:ff:fd:0b:7e:06:0b:
4a:9e:18:ad:b8:0c:be:6e:2f:a5:b4:25:d5:a0:b9:
a6:8e:b3:9b:12:fc:b2:bf:fb:cc:e0:5d:6c:c0:66:
c0:7d:ec:c6:82:09:6c:8c:d9:ac:31:62:91:77:20:
6d:70:22:de:33:f4:ec:da:af:f0:ca:ed:4b:f6:f5:
cc:2b:2f:4b:ee:02:08:37:d6:5f:a4:14:e7:e3:b0:
56:95:de:a2:87:2f:81:eb:f1:56:42:a4:8d:26:fc:
05:ed:65:81:00:d4:69:48:a3:c8:90:57:1e:66:3e:
7a:8b:d3:8a:39:8d:4c:24:ff:67:81:a8:c0:d7:2d:
1d:26:8e:3a:3b:5c:a2:82:8b:fa:6f:90:d3:78:f0:
c0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DB:CD:AD:61:15:98:28:6E:E0:33:12:97:BD:72:50:13:94:2F:51
X509v3 Authority Key Identifier:
keyid:B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/3NvNrWEVmChu4DMSl71yUBOUL1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.191.194.0-91.191.205.255
130.0.11.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:11:20:24:c8:11:b4:79:07:75:a5:42:b0:49:b1:e2:4d:b4:
5c:a5:a1:36:b1:e7:70:63:38:96:33:09:1e:16:27:66:9f:b9:
01:6e:a4:5e:95:bf:53:48:43:f4:e0:bd:8a:a1:31:5f:75:e1:
52:29:45:84:23:fe:8c:2e:fc:bb:9b:f8:06:7b:53:04:93:e7:
42:78:f0:53:06:0f:a6:db:6b:f5:07:c8:6e:4b:f3:af:33:33:
14:94:2f:56:4c:b2:3a:a9:26:7e:80:cf:3e:5c:0d:4b:a4:82:
35:69:da:70:20:68:d4:2e:9c:a9:b0:48:39:b9:cf:51:16:d0:
d5:2d:dc:bb:09:65:c0:38:80:84:a6:29:55:84:26:3d:b1:f9:
53:ee:a2:ab:64:85:37:50:5e:cd:3f:c1:6d:b6:fe:a0:a1:b9:
cc:b9:bd:c2:d5:12:73:5a:f5:b0:19:2d:2d:e3:b3:1c:0a:06:
ca:9d:01:ef:43:7a:ca:0e:c9:9e:79:d2:0d:db:f9:c0:36:d4:
02:af:cf:ad:a7:a7:99:10:69:8c:13:a2:8f:29:79:08:01:22:
b0:a4:d8:08:c0:e0:41:91:4e:e2:a1:10:19:08:ea:ab:be:94:
c9:8b:69:50:50:23:86:c0:99:22:6f:2e:4d:9a:c7:bc:cd:1c:
0f:12:1c:8c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:34:27 2025 by rpki-client