Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/xIOo3rZx3f0vOIzSVMh1Ya9ClVc.roa
File: xIOo3rZx3f0vOIzSVMh1Ya9ClVc.roa (raw, json)
Hash identifier: 6N6kjKKhC2oSPTyjceZNAglAGE7L0pEAqJMjbpNF7V8=
Subject key identifier: C4:83:A8:DE:B6:71:DD:FD:2F:38:8C:D2:54:C8:75:61:AF:42:95:57
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 0199F3742492D793E2C18659A9E581E93FD1
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/xIOo3rZx3f0vOIzSVMh1Ya9ClVc.roa
Signing time: Fri 17 Oct 2025 18:34:58 +0000
ROA not before: Fri 17 Oct 2025 18:34:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44901
IP address blocks: 91.108.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f3:74:24:92:d7:93:e2:c1:86:59:a9:e5:81:e9:3f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Oct 17 18:34:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c483a8deb671ddfd2f388cd254c87561af429557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ad:54:00:a8:f8:c9:5a:b7:3b:a1:73:f6:a3:
95:fc:0a:0d:48:14:f5:f0:bb:af:a0:fd:37:57:ed:
f4:2e:62:c9:84:e7:69:52:1f:3a:48:d5:3d:53:f2:
72:02:16:eb:5e:a0:07:61:24:ef:05:b7:35:11:86:
de:ec:ea:72:52:0a:e9:e4:ed:b5:c2:88:94:03:1e:
ca:dc:fe:4b:f6:f2:dd:0e:0f:fa:3e:df:16:42:b7:
f7:bf:d2:a7:6e:84:32:27:b2:b8:7c:7a:91:0b:18:
59:4b:6d:cc:23:78:dd:f3:f5:a2:af:37:db:3a:7e:
e3:58:8c:0a:c2:18:e1:8b:69:a4:c0:75:d5:9a:af:
d5:ba:0c:06:43:89:09:01:e8:55:e8:9d:aa:32:55:
7d:db:84:a2:92:1c:29:d9:ea:0a:d5:48:2f:00:f0:
b7:49:cf:88:5f:75:a2:80:b7:20:48:58:2d:3d:0e:
88:6b:d8:8e:4b:50:f4:35:e1:aa:5e:62:c4:96:9b:
4d:e0:b5:cb:28:0f:ef:65:dc:3a:97:df:d8:70:e5:
d3:c3:93:f7:4b:bc:82:26:77:fb:d0:ee:84:f9:c6:
c3:53:18:17:38:b4:c8:48:21:7c:57:fa:68:15:ff:
17:e0:aa:5d:ed:33:a7:aa:d7:75:37:ad:7a:29:28:
5b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:83:A8:DE:B6:71:DD:FD:2F:38:8C:D2:54:C8:75:61:AF:42:95:57
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/xIOo3rZx3f0vOIzSVMh1Ya9ClVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.225.0/24
Signature Algorithm: sha256WithRSAEncryption
88:3c:63:c1:e0:ca:29:6f:11:9c:c7:26:36:30:1e:4f:56:fc:
ef:5f:1d:65:b9:8e:b4:58:40:0b:2b:2d:2e:69:c2:1c:17:c8:
86:1e:b7:47:86:24:13:2a:a7:c5:c5:b4:3f:a3:e3:f7:77:4a:
2e:d8:49:8c:31:28:07:4b:5b:63:63:63:51:56:37:45:18:de:
b8:49:3a:c2:44:14:c0:19:8e:10:e6:96:4d:20:ea:0f:8a:51:
ee:41:c1:9d:77:87:35:60:0f:10:ff:de:5f:7e:13:8d:b3:ef:
aa:92:33:40:f6:4c:f8:8d:59:27:d9:fd:12:a8:80:7f:7f:b8:
c0:be:7d:b6:4b:49:42:51:05:3e:a1:37:7e:d5:c3:40:92:12:
11:08:53:f3:85:5d:12:0b:a0:68:ed:83:bd:2f:17:36:b9:cf:
06:c0:c7:3a:c5:de:c8:0f:70:d1:92:61:81:80:e8:06:75:59:
70:f3:b5:13:7c:47:94:e0:fc:47:43:fb:07:8f:0e:86:29:67:
e1:e9:c8:ba:0c:95:cc:34:69:2c:a3:9a:50:ff:b1:61:0f:41:
24:04:02:03:8c:bb:45:4f:c5:c1:7b:91:1d:58:16:aa:f4:0c:
5d:f6:cc:94:6e:c9:57:d9:b4:ad:1f:12:e5:d5:30:7d:bd:b1:
17:d1:a6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:09:14 2025 by rpki-client