Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/DZ7CJf67hGVU6j9XJF87IOB4K5U.roa
File: DZ7CJf67hGVU6j9XJF87IOB4K5U.roa (raw, json)
Hash identifier: F1Urbjf7mEFY6gv1mxhS93UPK9Go0cuJ3qOwMZZnoNY=
Subject key identifier: 0D:9E:C2:25:FE:BB:84:65:54:EA:3F:57:24:5F:3B:20:E0:78:2B:95
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019845FC6460BB739978CA19DB07D8DAEFA1
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/DZ7CJf67hGVU6j9XJF87IOB4K5U.roa
Signing time: Sat 26 Jul 2025 09:07:05 +0000
ROA not before: Sat 26 Jul 2025 09:07:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398343
IP address blocks: 91.216.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:fc:64:60:bb:73:99:78:ca:19:db:07:d8:da:ef:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 26 09:07:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d9ec225febb846554ea3f57245f3b20e0782b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5c:3c:9c:89:ca:04:11:0e:33:e5:25:35:ad:
45:6f:b6:63:b6:0a:0f:f0:4e:91:73:a2:c4:e1:7c:
68:a9:8b:26:95:40:ff:a7:f7:cb:a9:fc:c7:3a:4e:
98:1d:74:3b:92:60:d2:82:b2:f1:6b:c4:45:51:81:
8d:19:76:b0:7c:d4:3b:a8:0d:3d:56:30:bc:4d:db:
92:fb:9e:4c:7d:f0:76:f2:c9:7c:54:a2:33:52:0c:
43:67:75:29:ae:de:c4:e4:ea:58:14:6f:11:56:16:
b2:67:2f:3b:2b:f6:16:e8:77:86:05:62:4b:b5:aa:
f6:c1:b9:d8:30:00:98:5b:4c:c3:2b:9b:9c:b0:81:
ce:ec:cd:30:70:f0:16:d8:ac:5e:87:2e:1c:42:65:
37:e4:16:a5:2b:f1:5a:48:74:a4:88:cd:14:17:80:
9a:ff:1d:41:14:50:47:b3:19:da:ea:b0:60:10:41:
67:4d:3f:73:fb:37:b2:3e:1d:de:5d:2f:08:22:d1:
33:0e:3c:64:cd:99:21:97:e3:ed:79:84:58:aa:9d:
90:94:29:50:23:1b:b2:fb:92:e3:0e:84:8d:00:54:
83:e7:d2:87:31:99:f5:8c:81:5f:d5:20:b7:7e:43:
11:6b:02:61:9a:23:70:36:bf:e3:0b:7e:02:e4:55:
b2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9E:C2:25:FE:BB:84:65:54:EA:3F:57:24:5F:3B:20:E0:78:2B:95
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/DZ7CJf67hGVU6j9XJF87IOB4K5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.185.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:43:c7:7d:9a:20:84:b3:9c:46:71:3e:83:8a:ce:f8:a3:dc:
92:e1:44:7d:ba:09:36:36:a3:79:35:82:fb:16:8e:c9:60:1a:
2c:77:4a:4a:79:b7:fe:93:f0:be:aa:9d:4f:53:a9:fd:ed:67:
60:4a:39:15:f9:8b:27:02:88:27:b3:f4:41:4a:2c:a1:ce:d9:
6c:35:17:51:0b:37:0a:ac:1f:b7:d8:ee:07:cb:83:fb:58:e2:
de:69:f4:8c:41:3d:64:c9:57:b4:8b:4c:5e:21:bb:c6:23:08:
2e:ea:72:c0:76:03:dd:60:14:d3:45:b5:be:1a:7e:a4:c6:dd:
a3:36:22:c5:68:af:ec:e3:9a:2c:13:20:c1:db:81:34:a4:3c:
8f:ad:48:85:ac:d1:48:9a:c5:d8:b9:4f:5b:91:2f:d2:43:39:
0c:ac:e7:f3:d8:4b:0f:13:6f:52:06:ad:98:02:23:5c:db:39:
fc:8d:f7:ac:55:11:c0:b0:15:65:0f:e9:7f:de:a9:63:71:4b:
34:4a:ba:13:b6:ab:c4:f8:41:1f:a8:ae:a2:bd:01:47:f1:43:
64:7b:43:22:b9:b2:d2:d3:0b:29:d8:3c:3f:02:ea:b4:f4:b9:
a3:bf:00:9b:2a:87:6d:63:e9:a4:b6:1b:dd:83:cb:a8:27:52:
b0:26:6d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:45:10 2025 by rpki-client