Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/7SeHePakv-49QV1iivppyY5FGGM.roa
File: 7SeHePakv-49QV1iivppyY5FGGM.roa (raw, json)
Hash identifier: LH5P1T9uSw4R9Uj7sF/hp+4LcLByZVEyPgzphgUmL6o=
Subject key identifier: ED:27:87:78:F6:A4:BF:EE:3D:41:5D:62:8A:FA:69:C9:8E:45:18:63
Certificate issuer: /CN=12e28039646dcc32eceb58428f97cc994b998577
Certificate serial: 019A4F38A316FC932B53014025A55D892B2B
Authority key identifier: 12:E2:80:39:64:6D:CC:32:EC:EB:58:42:8F:97:CC:99:4B:99:85:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EuKAOWRtzDLs61hCj5fMmUuZhXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/7SeHePakv-49QV1iivppyY5FGGM.roa
Signing time: Tue 04 Nov 2025 14:15:02 +0000
ROA not before: Tue 04 Nov 2025 14:15:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204282
IP address blocks: 217.117.96.0/24 maxlen: 24
217.117.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/EuKAOWRtzDLs61hCj5fMmUuZhXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:38:a3:16:fc:93:2b:53:01:40:25:a5:5d:89:2b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12e28039646dcc32eceb58428f97cc994b998577
Validity
Not Before: Nov 4 14:15:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed278778f6a4bfee3d415d628afa69c98e451863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ca:62:62:db:0b:7a:bf:b8:ac:a9:41:56:a5:
58:f4:e3:e3:89:e6:0e:3e:fb:5b:e9:dd:28:97:ab:
40:f7:03:02:fd:d7:a2:aa:5c:14:18:d1:78:00:99:
e2:54:93:4f:30:a7:6d:46:fc:1e:b1:0f:af:41:40:
3d:ec:b8:89:c4:a6:6f:21:ce:b3:db:dd:05:2a:6a:
f5:06:04:d4:50:e3:48:f6:fc:0e:0f:e8:e9:02:d1:
4f:a5:27:7c:db:16:1e:68:b0:31:4d:1b:00:f7:b8:
db:8b:d3:71:5a:f1:37:d3:5f:d1:4d:5c:87:54:35:
20:d2:64:b9:4a:a5:30:4b:d4:21:9b:74:9b:fe:d6:
2c:73:a8:93:2d:31:fd:a2:1a:99:61:a8:5d:89:0c:
e9:d0:bb:f4:1b:36:58:13:b5:66:c9:8e:cd:91:0b:
8a:7e:e0:ea:18:a3:d4:41:ec:7e:44:1e:c6:eb:59:
21:7a:d7:e0:b9:f2:e9:b5:ed:99:95:c8:18:3a:b1:
08:0b:d3:e2:2f:7a:53:d3:da:f0:a2:8d:a4:7c:e0:
0c:8d:7b:9a:91:04:dd:43:84:8d:8e:af:b6:31:52:
09:a8:1a:6e:05:3b:11:67:e5:4a:29:d9:8d:54:eb:
d8:4c:b7:70:d1:82:e4:2f:13:48:1b:73:b1:c5:b9:
13:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:27:87:78:F6:A4:BF:EE:3D:41:5D:62:8A:FA:69:C9:8E:45:18:63
X509v3 Authority Key Identifier:
keyid:12:E2:80:39:64:6D:CC:32:EC:EB:58:42:8F:97:CC:99:4B:99:85:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EuKAOWRtzDLs61hCj5fMmUuZhXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/7SeHePakv-49QV1iivppyY5FGGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4ab1e0-6d7d-44fd-8d20-36d91dbcfc41/1/EuKAOWRtzDLs61hCj5fMmUuZhXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.117.96.0/24
217.117.99.0/24
Signature Algorithm: sha256WithRSAEncryption
43:3d:ee:e5:7c:7e:1a:d0:bb:60:dd:0a:e2:9d:39:dd:ac:54:
55:e7:e4:09:65:99:10:98:90:54:80:10:ed:a4:1a:b1:71:eb:
ae:7a:fa:f7:75:5f:48:de:61:9b:1a:3c:ad:81:58:59:32:7d:
23:92:b8:d2:05:69:19:e1:ba:49:12:60:7d:24:01:fd:20:d7:
74:64:90:6c:02:9d:fd:f6:3a:f2:08:b4:30:ff:e6:4f:de:82:
41:92:6a:87:15:a0:57:42:c4:d1:83:70:74:1b:35:20:08:67:
42:49:83:7a:9a:eb:bb:c8:50:3f:91:db:58:79:8d:ef:0e:5a:
53:72:db:15:94:ed:23:ba:b8:d6:ad:0a:76:69:f9:13:2b:e9:
be:a4:ad:c2:b6:f7:dd:68:8d:96:17:44:3b:81:66:52:d7:20:
c2:74:b6:7d:84:f5:24:55:8b:63:b4:8d:67:8d:d7:71:27:ef:
20:b3:4d:96:2d:ee:b6:be:9b:12:ff:a2:74:91:8e:fa:9f:18:
58:81:4b:ca:be:f6:bf:1f:95:ea:59:be:5e:0e:ad:0d:c0:0c:
4d:9f:b7:fe:0e:7f:e6:ad:94:d3:eb:5e:52:2c:9b:20:10:f4:
4e:fc:0d:de:11:e0:af:ab:8c:cf:11:b5:ce:11:ea:42:91:87:
3b:55:09:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:08:44 2025 by rpki-client