Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/tVdCCdEU3l5ck10T4yml0loy_Tk.roa
File: tVdCCdEU3l5ck10T4yml0loy_Tk.roa (raw, json)
Hash identifier: TPMYxPXKGw4cC+8aYDaQvMvT/cUGIMU4toFVtPWVXjI=
Subject key identifier: B5:57:42:09:D1:14:DE:5E:5C:93:5D:13:E3:29:A5:D2:5A:32:FD:39
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 019928FCDC86DDAF9F042968458DF869802E
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/tVdCCdEU3l5ck10T4yml0loy_Tk.roa
Signing time: Mon 08 Sep 2025 11:01:24 +0000
ROA not before: Mon 08 Sep 2025 11:01:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2856
IP address blocks: 91.108.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:fc:dc:86:dd:af:9f:04:29:68:45:8d:f8:69:80:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Sep 8 11:01:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5574209d114de5e5c935d13e329a5d25a32fd39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b8:1c:9b:0f:f1:0b:9b:b8:f2:89:27:76:23:
69:54:be:ff:e3:70:07:1f:db:be:9a:ef:b4:87:a7:
73:45:36:a7:5a:1e:56:cb:9d:97:92:ac:d9:72:3b:
ad:1f:0b:74:2c:30:ce:da:c3:26:b5:c8:6f:41:37:
80:0b:a2:e5:e7:a9:4e:26:6b:ae:d4:83:35:77:7b:
a5:5f:37:c0:d2:4a:c4:26:80:58:d1:0a:7c:fc:05:
20:b9:8e:6e:2e:c8:be:ce:6a:76:01:a4:70:fc:b2:
10:b8:b0:2c:07:9d:fb:69:42:5f:9a:1f:75:c1:1d:
f0:af:c0:b6:24:01:34:53:16:85:42:5e:28:be:51:
63:8e:34:0b:f3:27:14:ab:7e:7c:69:b7:f7:c8:97:
c7:e2:a9:77:e1:73:84:b3:00:4a:d5:ab:67:13:03:
b0:c8:b9:ef:81:d2:25:68:07:51:aa:4c:e2:07:f2:
7a:0e:d7:9d:69:cb:a8:a0:09:11:04:54:4d:a1:b2:
49:ae:74:ba:0b:45:7a:df:45:64:4c:72:80:84:0f:
c9:3d:b0:5d:67:85:6b:cf:a9:1d:2b:61:33:37:fe:
0c:64:c9:e4:4e:ae:34:57:76:5c:20:f2:00:de:10:
b4:96:5e:d8:d5:a6:77:46:13:20:be:64:0d:6b:99:
f3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:57:42:09:D1:14:DE:5E:5C:93:5D:13:E3:29:A5:D2:5A:32:FD:39
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/tVdCCdEU3l5ck10T4yml0loy_Tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.254.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:ac:b5:b4:68:8f:41:b6:2a:9e:ab:37:8f:03:34:90:a6:d3:
df:35:c6:6a:b0:17:18:2e:84:8d:01:69:89:39:33:b0:19:08:
e8:7a:44:f7:0d:0c:1c:f1:bc:7c:a9:19:4d:57:bd:ab:a1:f9:
fd:a2:48:47:24:80:0d:04:06:b4:70:ed:2e:ca:6c:f0:ce:cc:
f6:33:02:83:18:a0:e8:df:33:a0:51:30:59:b4:20:0a:13:80:
9a:3c:d5:46:e0:0c:20:ca:23:9a:de:e6:67:67:96:3e:16:05:
fb:52:39:33:dd:7c:52:f9:ef:c9:8f:44:5e:30:22:29:2d:5d:
51:5c:24:78:f5:e9:39:a1:90:1f:31:92:bc:07:6f:37:fd:c7:
a0:3c:6b:c2:a0:cb:8c:d8:a7:3d:cf:89:b6:3a:d7:d7:38:98:
2f:6c:84:ca:e5:92:2a:48:e6:31:d9:6b:3c:b2:1e:ee:a5:44:
05:c6:43:b7:c5:b8:a7:c0:06:f7:ee:a3:c0:be:d7:b4:37:87:
b1:59:83:1f:bb:21:80:27:92:f4:13:7f:83:ee:70:9c:f7:e4:
93:2f:a9:ab:33:bb:a3:1b:f9:4e:9c:22:aa:65:5e:09:4b:6d:
53:0c:82:b0:e4:62:73:ef:2f:ed:04:9b:59:6b:cc:c0:93:d7:
b0:49:52:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:09:13 2025 by rpki-client