
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/cOvqfWc0KSjggAuY6_9kDhPxPi4.roa
File: cOvqfWc0KSjggAuY6_9kDhPxPi4.roa (raw, json)
Hash identifier: qOhF3wsSLpYe0ueqSqnl30WHCmyv59VHWzhvhRJuKFs=
Subject key identifier: 70:EB:EA:7D:67:34:29:28:E0:80:0B:98:EB:FF:64:0E:13:F1:3E:2E
Certificate issuer: /CN=eec23b0e7820bc3ecd4f8708e7b990edd6920d5d
Certificate serial: 01988B5ED59599D296975F03FE8A485BED30
Authority key identifier: EE:C2:3B:0E:78:20:BC:3E:CD:4F:87:08:E7:B9:90:ED:D6:92:0D:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7sI7DnggvD7NT4cI57mQ7daSDV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/cOvqfWc0KSjggAuY6_9kDhPxPi4.roa
Signing time: Fri 08 Aug 2025 20:28:24 +0000
ROA not before: Fri 08 Aug 2025 20:28:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213627
IP address blocks: 195.8.202.0/24 maxlen: 24
2a0e:db40::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7sI7DnggvD7NT4cI57mQ7daSDV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:5e:d5:95:99:d2:96:97:5f:03:fe:8a:48:5b:ed:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eec23b0e7820bc3ecd4f8708e7b990edd6920d5d
Validity
Not Before: Aug 8 20:28:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70ebea7d67342928e0800b98ebff640e13f13e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:39:7d:c0:83:e0:76:23:20:8e:2c:21:8e:14:
26:28:16:d1:d1:61:17:6d:00:12:67:b3:dd:38:56:
da:93:e0:47:83:eb:74:a1:47:32:7f:1e:49:43:2e:
3f:5e:e3:a4:7b:0d:b4:38:09:bb:7f:89:92:a0:55:
ba:c3:79:d5:14:e9:de:a2:e4:7b:65:1f:c2:9f:56:
c1:f3:8c:25:de:66:fa:01:d2:52:83:19:12:25:04:
89:7d:cb:b4:d3:39:fe:f3:a3:35:c3:c5:21:39:44:
7b:13:66:d8:97:b5:d7:6f:2c:87:b8:df:6b:cf:f7:
cc:87:95:86:4d:83:72:ef:e3:ee:44:fd:56:29:2c:
2e:87:77:aa:a0:f6:98:bf:d9:da:e4:4f:bd:d8:88:
d4:44:d9:56:c5:45:3c:7d:e2:68:93:29:c1:6d:ce:
a8:0b:68:26:9e:9a:8f:4b:57:34:11:b6:2c:1b:07:
e2:01:df:78:34:64:cb:9d:cf:cf:95:16:b1:48:ca:
95:19:38:04:1f:d2:67:87:70:0a:4a:e5:e6:b2:7d:
6a:e8:d2:87:56:52:70:2b:25:2c:4d:51:f5:c6:90:
b6:a8:5f:23:6c:8d:7c:59:9a:1c:4b:a6:4c:3e:3d:
b0:96:4e:05:47:b5:fd:b1:c6:49:88:d7:15:b8:35:
35:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EB:EA:7D:67:34:29:28:E0:80:0B:98:EB:FF:64:0E:13:F1:3E:2E
X509v3 Authority Key Identifier:
keyid:EE:C2:3B:0E:78:20:BC:3E:CD:4F:87:08:E7:B9:90:ED:D6:92:0D:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sI7DnggvD7NT4cI57mQ7daSDV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/cOvqfWc0KSjggAuY6_9kDhPxPi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.202.0/24
IPv6:
2a0e:db40::/29
Signature Algorithm: sha256WithRSAEncryption
8f:f7:79:63:9d:a3:2c:9b:4e:7d:e1:e4:f9:17:9f:86:a2:36:
05:ee:61:8f:4a:a5:1c:33:02:2f:c0:79:51:db:f7:65:b3:aa:
f7:26:41:86:4b:ae:08:aa:22:6b:5e:2c:18:ad:c9:96:60:e8:
d9:a5:26:e6:0c:ef:84:ef:6a:70:89:dc:2d:0c:b5:85:22:da:
e4:88:06:30:37:a6:22:30:7e:8f:b0:c8:b5:96:38:02:30:ac:
4c:c6:76:88:10:6c:87:96:d7:71:cc:aa:42:bb:56:f1:00:af:
96:32:23:50:ab:d1:da:4b:14:00:68:35:54:67:e4:ae:cc:be:
16:0d:d8:f3:df:de:7b:91:ba:b0:0f:3c:7f:0e:99:cb:eb:1b:
78:68:35:bf:55:f5:cf:35:1a:d2:66:b6:88:76:3c:ef:17:d6:
31:3b:92:07:35:5b:d0:b2:79:e3:fa:fd:d3:40:56:16:40:81:
1f:b3:4e:86:c3:be:5c:23:df:ff:02:2c:24:70:ff:fc:bc:4c:
46:ae:78:44:87:e2:6d:e3:ca:a9:b6:4c:5b:f7:31:88:77:de:
d4:ea:f6:4c:55:07:10:10:93:08:90:e1:ad:92:65:14:ef:47:
f5:4b:80:02:33:3e:2d:bf:75:d8:f5:b7:7c:4a:48:0a:01:0b:
5d:59:ff:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:53:22 2025 by rpki-client