Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/7F1fGgeaeQSGNxeZxHKehoCFDbE.roa
File: 7F1fGgeaeQSGNxeZxHKehoCFDbE.roa (raw, json)
Hash identifier: G34mOFPeKp5+zztRKCCmLxDUMfqD5XJqmdch8xEkSoY=
Subject key identifier: EC:5D:5F:1A:07:9A:79:04:86:37:17:99:C4:72:9E:86:80:85:0D:B1
Certificate issuer: /CN=a1d71853324eb060fbafc988233860499c96c53a
Certificate serial: 01985D086A26177EDFFEC44E08C35A834DD6
Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/7F1fGgeaeQSGNxeZxHKehoCFDbE.roa
Signing time: Wed 30 Jul 2025 20:31:29 +0000
ROA not before: Wed 30 Jul 2025 20:31:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 45.148.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5d:08:6a:26:17:7e:df:fe:c4:4e:08:c3:5a:83:4d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a
Validity
Not Before: Jul 30 20:31:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec5d5f1a079a790486371799c4729e8680850db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a3:4d:3c:86:c3:c0:de:70:16:1d:ae:ec:8b:
c3:c4:54:3c:bc:a0:a5:7c:bc:ae:d0:0a:33:94:5b:
e0:c1:b1:96:45:16:18:24:11:c8:3c:8d:83:55:a1:
b1:cc:f4:d7:56:2f:be:6d:5b:82:f0:a6:51:71:df:
12:6a:1e:5b:79:7f:35:ef:47:bc:d2:33:eb:e5:d8:
be:78:81:b6:3d:4f:c7:b7:13:5f:8a:ee:b0:fc:6d:
50:26:a6:d7:b5:63:5d:ad:07:1f:c6:b6:ca:29:38:
08:69:7e:14:ea:21:a0:b4:32:e6:4c:52:ae:0b:bd:
a0:80:21:80:83:98:26:58:7b:1a:0d:06:c6:6c:a2:
05:bd:81:7a:fd:d1:40:7f:3b:21:4d:e5:90:11:7e:
6e:71:53:d7:20:4c:b5:cf:fd:eb:da:63:e3:35:37:
c3:2c:24:45:d1:8a:27:ac:03:44:c6:5b:67:51:81:
29:b6:69:61:32:c3:52:4a:d0:d5:7e:a4:d1:cb:e7:
ef:e0:d8:ae:13:70:0b:4e:d0:bc:34:c8:7d:34:2c:
9e:94:1f:8a:bc:c4:40:fe:c2:01:a4:ae:35:c5:54:
e6:d8:77:d0:56:48:f0:af:55:42:bc:70:6f:37:30:
0b:ca:4c:27:b6:37:d2:be:3d:64:a9:a6:a2:c0:05:
2a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5D:5F:1A:07:9A:79:04:86:37:17:99:C4:72:9E:86:80:85:0D:B1
X509v3 Authority Key Identifier:
keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/7F1fGgeaeQSGNxeZxHKehoCFDbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.134.0/24
Signature Algorithm: sha256WithRSAEncryption
09:93:7e:6b:ff:be:71:11:fb:07:ae:56:f8:b1:df:84:cf:f6:
8b:31:e7:d2:3e:cf:70:04:f0:e5:16:6a:fc:83:af:a7:0f:81:
65:6c:d5:d2:0c:e2:d0:29:1f:fd:7d:12:1a:0e:fd:ad:bb:4c:
ab:5c:d1:ba:43:e9:c1:04:a7:fe:d5:0a:50:3b:6b:1d:26:83:
36:49:3d:b7:54:5c:1f:03:a7:be:e8:24:0e:27:3d:a7:9a:cb:
5b:11:85:08:1f:be:46:35:bd:84:bc:19:e6:0a:c8:96:56:a4:
7a:6d:1f:21:e8:42:07:91:7d:ae:7d:25:a2:18:2c:e2:0f:2d:
0d:95:1a:67:b6:1b:da:df:56:6b:11:00:3c:c1:d4:6d:a9:e0:
0d:26:78:87:bd:f6:65:8c:13:30:72:4b:99:e9:18:ad:6d:bb:
2f:90:b2:0a:af:16:6f:70:10:b2:5c:2b:9c:ca:08:e5:77:20:
61:02:d2:db:5c:e6:88:f0:2c:2f:ed:30:36:a6:2b:f2:08:0b:
6d:0f:48:93:62:ee:e1:6f:33:bb:75:9d:50:05:bc:99:88:bb:
09:cc:48:9b:00:53:fb:cf:3f:f0:45:68:af:01:43:9e:8e:22:
10:ab:5d:44:2e:f1:c8:b6:12:0c:da:23:71:4e:78:f5:eb:ae:
8d:ad:0b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:27:41 2025 by rpki-client