Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/7-WiWodRJs8Bs1mQK3Uza98WY7E.roa
File: 7-WiWodRJs8Bs1mQK3Uza98WY7E.roa (raw, json)
Hash identifier: 85XLbymQWYall2AaXilmgAPdm2j1Q/Dv2TPBM+pEJdw=
Subject key identifier: EF:E5:A2:5A:87:51:26:CF:01:B3:59:90:2B:75:33:6B:DF:16:63:B1
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 0197607373FE882A95AD6F5D187203AAC7B7
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/7-WiWodRJs8Bs1mQK3Uza98WY7E.roa
Signing time: Wed 11 Jun 2025 19:24:28 +0000
ROA not before: Wed 11 Jun 2025 19:24:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 85.239.148.0/24 maxlen: 24
185.95.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:73:73:fe:88:2a:95:ad:6f:5d:18:72:03:aa:c7:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Jun 11 19:24:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efe5a25a875126cf01b359902b75336bdf1663b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:91:15:58:14:d8:19:4f:e5:ed:f2:a7:06:49:
70:d4:a2:5c:3f:dc:7f:6a:05:ce:f3:06:e2:79:c6:
ab:6e:44:9c:65:76:f3:43:61:08:1b:65:e4:a8:fb:
10:8d:cf:10:bd:f5:f6:7f:3e:ad:6e:cf:c1:d2:25:
04:09:1f:f9:62:a3:db:f1:c4:af:17:35:93:6c:99:
03:d7:04:93:c3:00:11:c7:58:cc:28:4b:c9:a9:ef:
78:07:eb:1e:00:2a:0d:0b:b7:2d:b7:6d:c5:ec:59:
1e:a0:4b:6e:74:7e:0b:e9:8b:85:34:b6:59:72:83:
6e:90:33:5c:b6:99:44:c7:1c:7f:47:8d:06:ce:55:
de:e8:f9:20:27:6e:55:b7:e8:54:f5:eb:39:de:68:
26:8d:cd:de:6c:65:d8:a8:cc:a4:e0:f9:b1:ea:ff:
a5:d5:75:17:77:39:88:61:fe:e2:ca:57:c2:40:bd:
d3:63:08:e1:f7:9c:b1:e6:d1:b7:2d:32:01:83:07:
bb:a1:36:3c:01:0c:11:1e:41:10:a0:3f:86:c1:10:
4a:7c:6c:4a:b6:2e:6e:4e:51:ce:22:82:61:f8:00:
7a:6c:62:8f:ba:89:40:cc:4e:70:c2:cb:c8:3a:d1:
19:42:2b:06:b9:05:ac:26:6d:e9:5b:3c:8a:a5:63:
5d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E5:A2:5A:87:51:26:CF:01:B3:59:90:2B:75:33:6B:DF:16:63:B1
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/7-WiWodRJs8Bs1mQK3Uza98WY7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.148.0/24
185.95.157.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:8f:52:83:9d:8e:6e:0c:ff:87:3f:9f:35:18:17:6a:ba:9d:
e5:08:25:3d:60:70:69:91:bd:cd:d1:aa:d2:6a:48:5e:2f:ba:
13:93:47:b0:7c:d6:64:e9:47:a1:cc:01:f4:82:46:9d:4a:1c:
98:74:3d:9a:c6:63:6d:3c:43:35:29:5b:39:99:12:15:95:61:
47:70:52:52:97:1f:7e:da:f5:b6:c9:75:ae:a7:19:ec:ac:0c:
41:ff:52:65:06:ae:ba:b8:33:b4:7e:d6:7c:1a:29:29:ca:94:
fe:09:bc:d8:90:8d:26:93:64:ad:eb:1f:0a:55:da:e2:be:2e:
a3:74:26:98:3a:f8:d7:e0:7e:99:60:6b:8e:5c:56:86:a0:ac:
de:82:e6:2f:47:a0:75:a8:3a:98:f7:8c:1e:66:96:e1:9c:c3:
03:96:90:d7:cf:f6:4a:50:6e:3d:6f:a6:81:e4:dd:5a:a7:a5:
62:fd:ab:40:99:cc:27:68:04:75:b4:2c:2e:58:0f:3f:af:c4:
87:6e:ae:82:fb:e1:12:15:c9:3b:68:01:06:3f:3a:f0:d3:d5:
bc:b0:27:c9:5f:1b:4e:b4:da:0d:2d:ad:d4:73:cd:b4:ba:ff:
9e:b6:05:b7:5c:0e:d4:9e:61:55:58:4a:32:28:8f:de:38:bd:
e5:36:6c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:10:19 2025 by rpki-client