Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/7Nbs6vAwGjRYfb95oFiiDADQcrM.roa
File: 7Nbs6vAwGjRYfb95oFiiDADQcrM.roa (raw, json)
Hash identifier: GR8Z9q2P761SmsIj41rSN1Vn2COrf533CO+ZGK2U82M=
Subject key identifier: EC:D6:EC:EA:F0:30:1A:34:58:7D:BF:79:A0:58:A2:0C:00:D0:72:B3
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019A2AC016DD9712FC0975EB91064AD1BCDC
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/7Nbs6vAwGjRYfb95oFiiDADQcrM.roa
Signing time: Tue 28 Oct 2025 12:17:03 +0000
ROA not before: Tue 28 Oct 2025 12:17:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59729
IP address blocks: 217.8.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:c0:16:dd:97:12:fc:09:75:eb:91:06:4a:d1:bc:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 28 12:17:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecd6eceaf0301a34587dbf79a058a20c00d072b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:01:f8:53:ab:ce:6d:d1:1b:b9:db:89:76:f1:
3e:94:ef:25:38:de:87:d1:24:81:3b:51:8e:3a:7b:
ad:a1:20:ea:8c:1f:e2:fb:84:8b:16:1d:ec:65:f3:
5b:2b:73:ba:13:d3:88:45:a6:f1:75:0f:79:b5:90:
67:42:d3:07:82:0e:51:16:60:cd:0c:21:dc:30:c7:
1e:2b:06:45:90:5d:41:11:f6:82:e7:6f:39:40:3a:
3e:7a:36:84:c6:08:0e:b9:44:78:15:27:ed:57:bf:
f2:7b:f4:08:9b:f8:d1:4c:35:04:8f:79:cf:7a:5a:
a3:57:4e:06:00:32:8a:ae:16:46:76:cc:4c:bc:e1:
98:df:9a:f8:68:19:25:b8:76:33:cd:60:14:01:5d:
83:4f:17:10:08:0e:b4:c0:25:50:bb:aa:4e:95:3f:
06:59:0f:3a:10:f0:ae:7a:18:a7:dc:d9:d2:19:fa:
42:12:05:30:4d:03:50:cf:67:da:c1:25:47:35:85:
62:48:0a:7c:d0:09:73:93:d9:4b:dc:9f:3c:22:2e:
d5:6e:a5:ee:8f:7b:05:7e:ff:ab:67:3c:66:60:1a:
de:fc:b6:fa:24:ea:6d:da:10:04:23:cb:65:9b:9a:
93:6d:1c:a0:89:79:14:b0:ae:d2:fa:46:01:1d:32:
94:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D6:EC:EA:F0:30:1A:34:58:7D:BF:79:A0:58:A2:0C:00:D0:72:B3
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/7Nbs6vAwGjRYfb95oFiiDADQcrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.8.216.0/24
Signature Algorithm: sha256WithRSAEncryption
be:a9:0c:2e:54:09:1c:97:80:ec:d6:8c:ed:10:e0:ba:28:ce:
63:62:61:83:81:b0:b9:7b:ba:d4:a8:b8:a7:8a:41:96:d8:81:
e5:eb:dc:07:b9:a4:e5:73:3c:62:53:53:48:b9:62:cd:b5:c2:
34:87:54:6c:5e:18:93:38:9d:ba:06:48:ac:51:17:12:4d:37:
eb:6f:f1:a3:b2:f2:28:2d:05:0b:7c:1d:eb:06:1b:26:b7:a0:
c4:f0:03:5b:b7:3b:f0:2b:be:f8:dc:68:12:7b:e1:30:1a:be:
7c:83:2f:0a:4c:88:56:f3:80:ae:bf:64:0c:26:b6:ec:53:97:
4a:f2:40:a6:ab:ab:05:a5:1f:00:db:d6:de:c2:ee:a3:ef:c0:
2a:e9:f3:94:ef:b4:68:b3:21:97:e4:5b:16:92:7e:e9:9a:db:
9b:34:7d:fb:7b:60:99:02:64:03:12:27:b2:ba:48:4a:12:0a:
cf:03:d7:6a:aa:2b:7c:f1:36:0a:32:5a:e7:33:c0:64:8d:3c:
68:c2:42:d4:eb:99:85:4b:3c:cc:0b:ca:26:ad:96:f8:8a:52:
7c:60:b7:30:91:57:ac:c2:7f:83:ad:f1:45:98:53:c0:9c:22:
8a:a8:c1:cc:dd:0b:f6:f9:56:ac:0a:7c:8c:b0:db:b9:d5:17:
10:08:ac:1c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZoqwBbdlxL8CXXrkQZK0bzcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjUxMDI4MTIxNzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2Q2ZWNlYWYwMzAxYTM0NTg3ZGJmNzlhMDU4YTIwYzAwZDA3MmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgH4U6vObdEbuduJdvE+lO8lON6H
0SSBO1GOOnutoSDqjB/i+4SLFh3sZfNbK3O6E9OIRabxdQ95tZBnQtMHgg5RFmDN
DCHcMMceKwZFkF1BEfaC5285QDo+ejaExggOuUR4FSftV7/ye/QIm/jRTDUEj3nP
elqjV04GADKKrhZGdsxMvOGY35r4aBkluHYzzWAUAV2DTxcQCA60wCVQu6pOlT8G
WQ86EPCuehin3NnSGfpCEgUwTQNQz2fawSVHNYViSAp80Alzk9lL3J88Ii7VbqXu
j3sFfv+rZzxmYBre/Lb6JOpt2hAEI8tlm5qTbRygiXkUsK7S+kYBHTKU+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOzW7OrwMBo0WH2/eaBYogwA0HKzMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvN05iczZ2QXdHalJZZmI5NW9GaWlEQURRY3JNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2QjYMA0G
CSqGSIb3DQEBCwUAA4IBAQC+qQwuVAkcl4Ds1oztEOC6KM5jYmGDgbC5e7rUqLin
ikGW2IHl69wHuaTlczxiU1NIuWLNtcI0h1RsXhiTOJ26BkisURcSTTfrb/GjsvIo
LQULfB3rBhsmt6DE8ANbtzvwK7743GgSe+EwGr58gy8KTIhW84Cuv2QMJrbsU5dK
8kCmq6sFpR8A29bewu6j78Aq6fOU77RosyGX5FsWkn7pmtubNH37e2CZAmQDEiey
ukhKEgrPA9dqqit88TYKMlrnM8BkjTxowkLU65mFSzzMC8omrZb4ilJ8YLcwkVes
wn+DrfFFmFPAnCKKqMHM3Qv2+VasCnyMsNu51RcQCKwc
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:22:15 2025 by rpki-client