Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/aWHN7cid-zTZ52WnzGCmExJ4Zdg.roa
File: aWHN7cid-zTZ52WnzGCmExJ4Zdg.roa (raw, json)
Hash identifier: MGV2Z9M1at0wNrbd7sJUTfzjsFPuLQEHyaT+MULw+wQ=
Subject key identifier: 69:61:CD:ED:C8:9D:FB:34:D9:E7:65:A7:CC:60:A6:13:12:78:65:D8
Certificate issuer: /CN=1752391e0ad2e644cfe2dad762111d757f585f68
Certificate serial: 01996AB75458EDCB2357DFC8A73C7FE1EDAC
Authority key identifier: 17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/aWHN7cid-zTZ52WnzGCmExJ4Zdg.roa
Signing time: Sun 21 Sep 2025 05:20:23 +0000
ROA not before: Sun 21 Sep 2025 05:20:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56418
IP address blocks: 91.208.6.0/24 maxlen: 24
2a04:f6c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:6a:b7:54:58:ed:cb:23:57:df:c8:a7:3c:7f:e1:ed:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1752391e0ad2e644cfe2dad762111d757f585f68
Validity
Not Before: Sep 21 05:20:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6961cdedc89dfb34d9e765a7cc60a613127865d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ac:e3:33:69:47:98:58:e0:6f:b1:15:27:c9:
87:71:5d:4f:9b:1a:85:4e:4d:57:28:70:7e:15:6f:
00:b0:6a:3c:dc:ba:82:3a:1f:43:94:ff:a7:4e:b4:
14:6a:f2:9c:dc:e2:b4:22:70:3f:07:10:e4:21:b4:
37:e0:74:f6:e4:40:28:48:63:de:f6:f6:ea:4f:99:
6f:df:48:2f:9a:0b:2d:85:ed:cb:49:65:02:67:82:
d8:45:c6:cf:1b:60:6c:79:3c:69:d9:e3:56:56:3c:
4a:d0:1f:ab:e1:73:71:59:f7:85:22:94:08:d1:8a:
b1:30:7e:93:3a:d2:c8:b7:41:e4:00:f0:78:85:14:
90:10:bb:55:40:2c:1a:1d:ba:44:4c:0c:fb:18:67:
d2:38:90:0e:5e:77:6b:52:00:59:b2:e2:3f:7f:9e:
66:c6:05:d8:6f:8d:fd:c2:bb:d4:0b:ee:ce:66:28:
81:74:57:ca:a8:4c:5b:9d:30:ca:2f:19:2f:1a:c4:
50:69:24:62:84:0d:9f:a7:64:0c:3f:97:61:34:77:
90:41:7e:9f:08:95:dc:38:36:74:b7:e2:93:01:ec:
d4:7d:b4:ea:20:a3:3a:4d:83:37:f3:4c:b8:a6:cf:
35:0e:58:0f:be:c9:d9:16:41:a4:52:d0:2f:b7:b5:
3a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:61:CD:ED:C8:9D:FB:34:D9:E7:65:A7:CC:60:A6:13:12:78:65:D8
X509v3 Authority Key Identifier:
keyid:17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/aWHN7cid-zTZ52WnzGCmExJ4Zdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.6.0/24
IPv6:
2a04:f6c0::/29
Signature Algorithm: sha256WithRSAEncryption
40:04:74:a2:95:a3:ab:d1:8b:33:88:51:45:37:21:02:46:de:
f2:76:e0:ee:53:ed:96:a8:c9:6c:f8:94:d9:62:ef:c0:ae:36:
54:ae:7a:eb:ce:37:34:fd:c9:99:dc:68:89:cc:6d:fe:0e:25:
69:27:ca:6d:3f:91:66:dd:98:38:7a:b1:eb:5f:a3:fc:a1:d7:
b1:96:af:62:e8:1f:68:ed:f4:f2:82:47:ec:0e:5e:3a:39:c0:
a3:21:e4:1c:c2:a0:c8:1a:b8:3c:d7:5a:0a:3e:d1:64:9d:b6:
c2:cc:09:ce:80:81:7e:66:3c:4f:d4:34:1b:77:53:e0:e0:ff:
10:17:a1:ac:75:9a:f9:ca:d4:b4:3f:bf:27:cc:5d:e5:78:da:
93:c2:13:5a:d8:eb:29:ac:2e:96:1e:09:80:99:25:28:3a:f4:
25:58:b5:9a:37:07:ab:8c:78:d0:22:74:34:c8:74:1b:5c:70:
81:8e:fa:d6:ea:11:1d:ba:c3:66:ba:45:08:f1:c0:7b:3f:5f:
b8:5a:45:85:e8:50:f6:2d:d4:a5:8b:76:3d:0c:87:ac:fd:06:
9b:4e:19:66:56:6e:24:bf:64:2b:d3:3a:51:78:77:dc:b9:9b:
f6:6e:0c:a9:29:64:f0:79:d6:5a:8b:83:39:aa:82:9f:11:58:
cb:12:03:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:24:35 2025 by rpki-client