Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/7RcKhCp3ZOcWzuIPXusJuOQTO8U.roa
File: 7RcKhCp3ZOcWzuIPXusJuOQTO8U.roa (raw, json)
Hash identifier: RaJe3hA5OyN5iW1nleE1Fb+gKu8+b263II/AmqXmNsQ=
Subject key identifier: ED:17:0A:84:2A:77:64:E7:16:CE:E2:0F:5E:EB:09:B8:E4:13:3B:C5
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019A489F7E2652A5526563E0EA512A43CC23
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/7RcKhCp3ZOcWzuIPXusJuOQTO8U.roa
Signing time: Mon 03 Nov 2025 07:30:03 +0000
ROA not before: Mon 03 Nov 2025 07:30:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206603
IP address blocks: 109.236.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:48:9f:7e:26:52:a5:52:65:63:e0:ea:51:2a:43:cc:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Nov 3 07:30:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed170a842a7764e716cee20f5eeb09b8e4133bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:dc:52:a5:e6:93:19:42:20:a0:ca:7e:cd:77:
15:07:3a:f2:56:2d:39:e2:84:ed:71:ba:8a:36:b0:
9a:af:f5:7f:63:ac:ed:68:5b:df:55:95:7c:c0:d4:
e3:57:57:c6:9b:85:25:b0:75:4c:d7:b3:ba:c4:c2:
21:4d:3a:ba:90:40:af:c8:5f:f7:24:da:b2:7c:06:
59:91:29:8e:3f:a3:b7:38:91:b0:f6:ad:f8:05:44:
93:22:43:13:4d:8a:1c:7a:1f:b1:54:7c:1e:39:0f:
d6:ae:81:3b:70:b3:90:fc:c5:ca:f4:8a:4f:76:dd:
9f:55:05:87:6a:05:61:e5:6b:07:23:b9:88:54:2b:
20:5f:24:7d:29:9b:73:ba:dd:57:54:d9:56:2f:a8:
bc:f4:64:bf:03:46:3b:df:11:36:f6:c7:19:06:6d:
11:8c:cf:7b:ba:21:2d:f5:cc:43:9d:28:2a:ed:11:
20:d4:92:d2:b4:6e:17:f4:cf:12:92:bd:a8:74:a3:
03:3f:6d:20:50:b6:7d:37:db:38:1a:0d:d7:46:06:
30:e3:cb:90:f1:bd:16:e6:14:40:13:61:ca:85:d5:
f7:5f:a7:33:52:6b:73:d7:03:84:1b:97:e8:d7:c1:
48:50:f6:d5:7a:f6:6a:5d:db:74:71:e9:36:ff:15:
44:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:17:0A:84:2A:77:64:E7:16:CE:E2:0F:5E:EB:09:B8:E4:13:3B:C5
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/7RcKhCp3ZOcWzuIPXusJuOQTO8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.50.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:56:a2:a2:f5:25:01:92:89:0d:cc:6f:f7:5f:31:62:18:17:
e5:71:e7:88:e1:9f:fe:49:4d:24:cd:b4:94:ac:35:f4:7b:0c:
b6:87:e6:db:3e:b2:c6:5b:40:a6:a7:95:88:da:26:96:db:0c:
b5:17:ee:2c:0d:59:dc:3a:4c:12:eb:ff:ee:95:b4:31:03:c7:
03:8a:b0:c8:bf:be:3b:72:53:54:74:f2:cb:29:20:d6:eb:2d:
e4:7e:13:87:c2:58:cd:c1:44:d3:d0:dd:e5:46:7d:38:af:58:
67:89:9d:52:7d:03:42:16:dc:dc:4a:46:7d:28:4c:f0:cd:2a:
9d:dd:f1:df:ff:48:3b:35:b2:25:6a:7d:12:a2:01:4c:e2:23:
e3:9c:58:ce:c7:5c:e0:70:c2:8b:35:03:8c:05:d3:83:f8:f7:
4e:8a:e4:cc:49:d2:f2:1a:27:ae:39:40:d7:16:60:46:0f:cd:
72:9b:1b:a0:b3:5f:a3:63:b0:0c:20:7e:71:e0:a3:9e:92:5d:
de:aa:9e:73:e6:b0:7c:7f:d8:bd:2a:f2:e8:45:54:1f:03:ea:
58:3f:8d:8a:7e:99:35:ea:d9:e0:c1:bb:36:d1:b4:52:90:9e:
7b:f6:79:b3:77:58:1f:54:5e:6d:66:fd:a1:52:5f:4b:d2:dd:
fc:ec:82:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:05:08 2025 by rpki-client