Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/6w-yXh1-tMAIvo8oiWeiA5ImsoE.roa
File: 6w-yXh1-tMAIvo8oiWeiA5ImsoE.roa (raw, json)
Hash identifier: I2XmgPmlr8AeGcV748BNU3DKlg3Epa3bbBrXS+lzrBo=
Subject key identifier: EB:0F:B2:5E:1D:7E:B4:C0:08:BE:8F:28:89:67:A2:03:92:26:B2:81
Certificate issuer: /CN=64cf1ee90653b7b814d6b545949bd94dde0fc6a1
Certificate serial: 019787112991823CC96960BDC4951D672BB7
Authority key identifier: 64:CF:1E:E9:06:53:B7:B8:14:D6:B5:45:94:9B:D9:4D:DE:0F:C6:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/6w-yXh1-tMAIvo8oiWeiA5ImsoE.roa
Signing time: Thu 19 Jun 2025 07:22:18 +0000
ROA not before: Thu 19 Jun 2025 07:22:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201228
IP address blocks: 81.90.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:11:29:91:82:3c:c9:69:60:bd:c4:95:1d:67:2b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64cf1ee90653b7b814d6b545949bd94dde0fc6a1
Validity
Not Before: Jun 19 07:22:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb0fb25e1d7eb4c008be8f288967a2039226b281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b9:0b:90:77:dd:17:64:4e:d4:e3:49:4e:f9:
f4:7f:c9:23:ea:8d:1b:01:7c:51:0b:ee:f5:c7:a8:
2c:b0:88:03:86:0c:7c:9f:78:e0:d8:7c:ff:80:ce:
b6:d2:14:3c:d8:94:3c:77:67:f0:0d:73:11:64:19:
4c:8e:5e:e4:8c:33:2e:ae:4b:c7:82:2b:b2:b8:85:
34:c9:8f:04:4c:e7:17:7d:da:a4:b7:e0:21:db:9d:
e3:f2:d4:1f:26:a3:5e:c0:e4:7d:aa:3d:87:5b:34:
88:78:b8:67:50:87:16:87:fb:7c:a4:ef:58:fe:73:
79:43:88:61:08:fa:6f:d1:40:40:59:3c:af:d4:65:
69:9d:75:c0:20:95:b9:42:05:84:dc:46:fd:3c:ab:
3d:95:48:2c:29:b7:2a:20:40:26:52:31:2d:0b:cd:
48:7d:8f:98:2e:1a:36:f7:e1:44:b7:10:ed:3b:fa:
67:10:6c:3d:bb:9d:99:f5:fc:d1:48:41:7d:53:f4:
12:6f:8d:35:16:27:49:26:ae:4f:5c:54:1f:1d:f7:
f5:4f:45:dd:ac:72:f8:cb:cd:59:08:82:04:42:0c:
2b:fc:b6:62:3f:7d:8e:df:83:25:25:87:7e:fd:3c:
1a:ea:31:86:03:ae:f0:f1:7c:21:c5:bf:79:fe:d4:
52:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0F:B2:5E:1D:7E:B4:C0:08:BE:8F:28:89:67:A2:03:92:26:B2:81
X509v3 Authority Key Identifier:
keyid:64:CF:1E:E9:06:53:B7:B8:14:D6:B5:45:94:9B:D9:4D:DE:0F:C6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/6w-yXh1-tMAIvo8oiWeiA5ImsoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.90.186.0/24
Signature Algorithm: sha256WithRSAEncryption
39:51:b6:d3:21:ea:2e:50:ad:4c:f0:7a:cc:ae:5a:15:5b:6b:
bf:b0:b1:c2:69:d4:90:2d:b0:bf:0a:5e:59:01:fe:c0:28:25:
28:2f:b2:3a:ad:4c:86:65:4c:de:7b:06:a2:9b:65:61:a7:82:
6b:0a:e4:5e:e9:f1:be:82:55:7a:c0:65:c6:40:fc:c1:e7:1e:
cf:5e:6a:b7:26:36:41:03:9c:2d:04:be:c1:27:88:1b:9d:55:
e8:d9:cb:b7:19:bb:4f:d4:02:8c:8e:aa:f6:b3:7b:c6:c7:e5:
5f:cb:a5:a3:c5:55:52:c1:34:b8:e0:58:7c:ec:27:c3:a2:48:
fb:6c:d7:8a:2b:69:23:76:20:3e:6a:2f:d4:0e:9d:26:3a:9c:
de:48:72:31:85:35:89:b3:bf:5f:54:c3:ad:eb:d5:df:84:ad:
5f:ed:6a:55:16:22:00:5e:2c:6a:b8:98:f9:e4:42:5e:29:78:
a1:05:7f:81:a6:7b:ba:fa:44:aa:4b:c9:cf:13:8c:e9:30:49:
c0:0a:0b:c5:1b:7c:24:d6:b3:80:7b:ee:ec:57:f2:15:02:2a:
24:5e:cf:96:49:56:78:4a:46:32:8c:08:d9:30:aa:f9:a9:e7:
6e:24:93:7a:e7:e1:3e:a9:5f:4c:76:49:b1:3a:39:2f:7a:ec:
14:54:ad:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:37:12 2025 by rpki-client