Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/R7VtN8-uVpifoS1ZHp6A4SJbHE4.roa
File: R7VtN8-uVpifoS1ZHp6A4SJbHE4.roa (raw, json)
Hash identifier: /QyKClV19aObvbloepk7skk3Bcbw2QRLa00NIZIQTGw=
Subject key identifier: 47:B5:6D:37:CF:AE:56:98:9F:A1:2D:59:1E:9E:80:E1:22:5B:1C:4E
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019A0C3927173CBAB80E077ACF34C5150BB6
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/R7VtN8-uVpifoS1ZHp6A4SJbHE4.roa
Signing time: Wed 22 Oct 2025 14:01:03 +0000
ROA not before: Wed 22 Oct 2025 14:01:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51765
IP address blocks: 81.181.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:39:27:17:3c:ba:b8:0e:07:7a:cf:34:c5:15:0b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Oct 22 14:01:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47b56d37cfae56989fa12d591e9e80e1225b1c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:da:6a:95:fe:aa:cc:83:de:a2:5e:b5:2d:15:
86:77:29:c1:bf:e5:1a:6e:b2:68:f1:b1:ad:ac:c5:
b4:fa:33:98:46:99:bd:8f:53:18:81:75:54:23:12:
65:f4:ba:71:ad:fa:cd:68:b1:fc:8c:e0:67:95:ff:
ff:90:22:d5:40:da:76:a4:1c:c9:0a:d1:b9:37:d4:
3e:2e:85:20:94:c7:cc:2e:11:c2:8b:fd:1b:45:86:
d2:a8:bd:94:34:37:1a:43:30:0e:61:5d:3c:41:36:
4e:b4:cc:d8:26:ce:62:e9:d6:38:94:52:f3:a0:15:
1a:6f:66:b6:bd:03:59:3f:3e:2e:a3:eb:19:8c:45:
24:45:fa:98:d3:c0:0b:05:c1:20:2b:ff:cc:03:8a:
4d:be:ca:d1:d7:83:ad:d8:4c:c6:70:67:8d:fa:ba:
11:35:4a:a2:09:af:2d:ec:37:6c:c6:5d:f2:f9:3c:
f0:e3:88:e7:66:19:89:d0:35:73:68:37:89:75:90:
6a:a8:dd:e4:3f:9e:a0:5d:1a:d5:71:a9:6b:47:39:
ca:53:c2:f2:47:28:12:e3:89:74:b5:81:1d:74:1e:
4f:b6:88:06:ba:5e:53:91:09:43:40:43:6b:94:e7:
8a:e9:1b:a5:c8:f0:c7:ed:4c:28:3b:43:c0:17:7a:
cc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B5:6D:37:CF:AE:56:98:9F:A1:2D:59:1E:9E:80:E1:22:5B:1C:4E
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/R7VtN8-uVpifoS1ZHp6A4SJbHE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.173.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:37:69:24:50:ba:0f:fb:6d:d8:22:d6:18:5e:74:ec:3e:83:
1f:fd:45:50:cc:a5:32:04:86:7c:6a:68:bc:4d:61:b2:3c:8a:
4e:ba:84:22:51:8a:a1:d4:e8:d6:b6:d7:63:36:15:d3:82:7e:
1b:8d:d7:3d:a7:52:15:fc:5b:ee:eb:9d:3b:50:42:62:20:b9:
f0:44:d8:e7:05:4c:11:66:dc:68:62:9e:ca:1d:e2:4b:ff:26:
c1:57:53:29:08:b0:98:e8:88:65:55:45:5e:24:09:dc:98:74:
c4:50:9d:e6:25:b9:d5:01:43:35:ea:a5:2b:92:c9:99:f3:68:
a8:3c:f3:88:fa:8a:8d:0e:c6:5a:ef:1e:ed:93:b3:bd:9b:b3:
2c:d1:7d:5e:f4:68:0a:fb:f9:8b:8b:25:f7:4d:a4:c0:0f:d2:
66:76:e6:a4:e5:2c:7b:d6:bb:61:d3:f0:46:69:fc:3d:ca:1e:
ff:55:7e:48:a7:89:cc:ea:86:89:d1:02:b5:4a:55:1e:2c:ab:
9d:14:49:90:cd:01:ec:11:96:f6:0b:08:ba:d5:1d:57:03:1b:
eb:b5:c5:d2:1c:3d:ce:f3:a3:6f:9c:f7:2a:86:5c:c2:dc:98:
e3:17:3b:b7:39:f9:5a:3c:d1:8e:c2:36:d7:3e:8a:c6:77:1d:
d7:d3:7a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:34:55 2025 by rpki-client