Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/44H6reyMjlJh9wXB8StInUQIzhY.roa
File: 44H6reyMjlJh9wXB8StInUQIzhY.roa (raw, json)
Hash identifier: e3J3/VTcHLBMV6AYTwkdZ91YDCZIqBcqVKzRD5SgwbA=
Subject key identifier: E3:81:FA:AD:EC:8C:8E:52:61:F7:05:C1:F1:2B:48:9D:44:08:CE:16
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 0199CA5052C1F81F7F1F92CFA9EC3EBF29B6
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/44H6reyMjlJh9wXB8StInUQIzhY.roa
Signing time: Thu 09 Oct 2025 18:51:25 +0000
ROA not before: Thu 09 Oct 2025 18:51:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8274
IP address blocks: 91.203.232.0/23 maxlen: 23
91.203.232.0/24 maxlen: 24
91.203.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ca:50:52:c1:f8:1f:7f:1f:92:cf:a9:ec:3e:bf:29:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Oct 9 18:51:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e381faadec8c8e5261f705c1f12b489d4408ce16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9b:1b:8c:68:f8:1a:16:67:18:4e:d0:0e:22:
89:76:74:76:16:6a:f7:db:a2:6d:20:99:92:33:a4:
ca:7b:5a:5a:17:d6:d1:6b:f9:61:f5:3f:2b:e9:8b:
c3:07:b0:4e:4b:a1:e2:91:55:61:26:b6:08:ba:b3:
97:75:85:8b:c9:d5:f2:da:dd:c9:f1:37:1d:4e:c0:
5c:0a:60:17:47:08:65:d8:21:73:2d:bd:14:16:e3:
fd:b5:a8:98:25:8e:6b:27:1d:72:77:b5:8e:39:20:
0e:c4:44:cc:76:99:4d:53:52:2c:c6:a7:20:5f:bc:
18:2d:30:28:93:68:1c:25:85:34:98:5f:79:b1:45:
df:7a:ab:2c:9c:38:a1:41:43:96:f3:c6:b2:d4:03:
54:36:f3:55:c8:aa:b6:eb:5c:47:81:8e:0c:30:8d:
fb:70:79:e8:c6:45:c8:56:91:e5:32:c5:53:0f:1f:
95:17:60:a6:28:f4:06:4b:21:6f:99:56:85:0c:ba:
6e:fa:3e:4c:95:29:5f:78:42:c2:41:10:29:43:4d:
6c:89:62:2c:e0:ef:74:c0:78:ab:0d:02:52:c9:98:
0d:fd:24:d3:ce:3c:e9:a7:34:47:17:0f:b9:6c:42:
eb:2a:da:5c:57:07:fe:05:b2:ff:93:b9:b5:7f:1d:
0e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:81:FA:AD:EC:8C:8E:52:61:F7:05:C1:F1:2B:48:9D:44:08:CE:16
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/44H6reyMjlJh9wXB8StInUQIzhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.232.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:b4:a2:f5:6d:27:04:97:f2:52:11:15:7c:32:13:93:61:06:
c1:0e:0b:66:ce:51:99:30:ee:32:9a:7a:d8:39:03:4a:49:1e:
53:3a:bd:42:79:37:77:a8:32:8b:04:92:6a:96:5f:85:bb:21:
cc:9a:68:35:19:61:5b:be:9b:8e:d7:4c:d3:47:f4:76:38:40:
d6:c0:8c:e0:a9:4d:75:18:49:2a:94:66:18:7f:3a:55:bd:7c:
4c:d5:31:76:53:c9:cf:dc:3d:23:e6:88:ad:13:18:ea:63:b1:
72:a0:2a:4c:fe:da:27:28:75:b5:fa:f1:51:18:be:ef:3a:3f:
c8:7a:ef:9d:ee:f6:8a:dd:20:69:c1:79:a5:a1:2c:3c:06:75:
5a:b6:55:95:30:07:b7:97:2d:4f:16:8d:c2:e2:51:87:ea:9d:
d2:ef:01:ff:e4:5a:22:f9:49:47:e1:5c:3e:69:a9:0e:a7:8a:
d2:df:a5:06:69:0d:11:4c:47:fd:c3:50:03:71:63:72:ea:94:
0b:87:4a:6c:5e:87:46:81:29:60:b5:59:a0:f5:92:fd:2c:f1:
0a:1a:14:c9:9e:3f:dd:c8:91:67:b1:d3:1d:a7:11:12:48:9f:
f6:f5:c6:35:9b:aa:91:76:a4:40:fb:d9:a0:6b:53:ea:81:82:
23:60:10:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:32:20 2025 by rpki-client