Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/6q7TVMacTBaYR4P4ix3oetf6VRE.roa
File: 6q7TVMacTBaYR4P4ix3oetf6VRE.roa (raw, json)
Hash identifier: uLRq0asuqIHTiwS92wqc71gnPUUH1B7QJ0+2fDVufHI=
Subject key identifier: EA:AE:D3:54:C6:9C:4C:16:98:47:83:F8:8B:1D:E8:7A:D7:FA:55:11
Certificate issuer: /CN=209faf93524bb80774ffce9341f495a8fb318f10
Certificate serial: 019876FB79ED79780E2D25F622632A11FCD3
Authority key identifier: 20:9F:AF:93:52:4B:B8:07:74:FF:CE:93:41:F4:95:A8:FB:31:8F:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/6q7TVMacTBaYR4P4ix3oetf6VRE.roa
Signing time: Mon 04 Aug 2025 21:27:28 +0000
ROA not before: Mon 04 Aug 2025 21:27:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202220
IP address blocks: 109.207.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:76:fb:79:ed:79:78:0e:2d:25:f6:22:63:2a:11:fc:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209faf93524bb80774ffce9341f495a8fb318f10
Validity
Not Before: Aug 4 21:27:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eaaed354c69c4c16984783f88b1de87ad7fa5511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:33:8e:92:8b:94:3a:0f:5c:d4:dd:39:ec:f1:
81:b9:64:2f:7e:6f:64:b0:ef:8b:29:cd:32:91:79:
f7:bc:cd:53:06:27:f1:45:c5:60:40:f6:1b:c8:2c:
fe:29:b3:39:d3:98:b9:bd:c5:27:4e:5b:de:ea:f6:
60:e0:b2:73:64:b3:45:12:d2:a1:df:0c:de:f6:5e:
b0:67:e1:dd:96:e2:59:43:b0:54:62:c4:5d:41:9a:
e0:25:4b:5d:b7:55:23:e0:88:e2:6f:0c:f9:17:ab:
c7:56:1d:79:72:2b:78:6f:95:d3:97:b9:aa:bb:f1:
77:20:c5:e8:28:90:27:d0:41:2c:2c:fb:36:d5:cd:
12:a6:d8:d4:33:a8:ed:a5:64:9c:65:1c:2f:51:b8:
fa:88:01:c4:d3:57:6f:31:81:b5:5b:e4:ee:58:f6:
2e:9f:de:4a:5a:a8:26:da:e5:8d:76:b2:83:94:a0:
ca:f0:d8:26:ea:c6:42:4c:82:e9:25:58:a5:b3:13:
4f:42:9f:e9:10:6d:49:0c:53:98:32:d1:eb:c7:64:
88:35:d2:ac:24:37:a9:f5:f8:f6:32:23:df:ca:67:
a6:3f:5e:bf:54:c8:9d:df:f0:7b:5c:6a:0f:19:65:
17:e9:9d:65:60:82:3a:b5:5e:ff:6b:60:be:23:14:
3e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AE:D3:54:C6:9C:4C:16:98:47:83:F8:8B:1D:E8:7A:D7:FA:55:11
X509v3 Authority Key Identifier:
keyid:20:9F:AF:93:52:4B:B8:07:74:FF:CE:93:41:F4:95:A8:FB:31:8F:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/6q7TVMacTBaYR4P4ix3oetf6VRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.207.101.0/24
Signature Algorithm: sha256WithRSAEncryption
21:f2:ba:cd:e2:9f:ef:a2:51:c6:dd:ef:fa:25:21:c2:4f:7a:
60:a6:7f:7b:7d:f2:e8:60:da:6f:b4:25:c6:aa:61:61:20:6c:
ab:3a:08:05:fd:87:d0:62:29:83:3b:d2:91:bf:d2:8a:f3:6d:
17:08:96:21:61:35:ec:27:a4:f3:bb:2b:90:d0:a5:10:ee:38:
f3:43:64:05:c9:72:f0:ce:53:d7:ce:41:28:77:dd:d7:f3:81:
cc:2e:e4:10:ee:02:90:c2:01:03:2b:a2:07:02:b9:41:1b:d0:
36:5c:03:e5:37:26:cd:d9:6b:42:9e:89:79:0b:1f:17:a9:15:
47:8e:db:74:8c:3f:4d:84:af:e6:b3:9f:fe:6f:b1:b0:a4:ee:
58:61:78:2c:59:73:c0:0c:b4:b2:c9:dc:c4:dc:74:37:55:d7:
f8:eb:46:92:ee:d9:ce:38:d5:38:87:5a:f7:35:93:23:92:b9:
78:87:11:fd:05:44:df:7c:53:e4:c6:34:1e:c6:c9:b4:e0:aa:
64:4c:7d:d1:08:26:aa:65:07:4d:d4:bf:1b:f4:71:e4:a8:5b:
b8:43:f3:9b:e8:47:5f:9a:84:e8:1d:d3:32:ba:c5:c7:60:ce:
d9:05:73:0e:4b:e4:4a:ca:46:40:3c:53:28:78:f0:51:69:9c:
33:c8:fd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:52:27 2025 by rpki-client