Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/68q7-A89urBUWGG1aC6CDlwS3mM.roa
File: 68q7-A89urBUWGG1aC6CDlwS3mM.roa (raw, json)
Hash identifier: agbGq90atuQBWvGBXe6tSJLeM9dAZJKteJWVIDcdPHY=
Subject key identifier: EB:CA:BB:F8:0F:3D:BA:B0:54:58:61:B5:68:2E:82:0E:5C:12:DE:63
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 019A39359105C4D14F278D8F822075F1D045
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/68q7-A89urBUWGG1aC6CDlwS3mM.roa
Signing time: Fri 31 Oct 2025 07:40:03 +0000
ROA not before: Fri 31 Oct 2025 07:40:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 80.71.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:39:35:91:05:c4:d1:4f:27:8d:8f:82:20:75:f1:d0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Oct 31 07:40:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebcabbf80f3dbab0545861b5682e820e5c12de63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7c:34:a1:40:a3:3d:b4:73:21:df:0c:89:6b:
54:9d:2f:3d:fc:f1:b5:b4:93:b3:2d:e6:74:0b:8b:
6c:be:15:41:c4:86:c5:9c:08:fd:7e:27:40:f2:01:
fc:38:e4:5a:7f:5b:e8:39:7f:be:72:cf:b7:a2:68:
63:75:2a:05:3a:29:e4:9a:38:37:fa:0b:1a:5b:3f:
a9:97:1d:08:79:db:da:3a:79:f5:08:84:8b:5b:9a:
96:83:e2:79:0f:66:fb:0c:09:b7:57:de:3a:1e:d8:
46:b1:14:30:65:53:57:c4:2a:0d:cc:9a:d7:0e:36:
f0:13:cb:d0:05:c5:ba:1e:8a:f5:56:6b:52:19:70:
a2:b6:b7:59:10:30:e6:c9:48:23:b2:b2:99:ee:77:
ce:78:c1:41:61:37:2f:c4:7e:de:a2:22:f4:bd:3c:
38:aa:07:d2:f3:3b:70:98:ab:30:8c:03:34:5f:83:
03:60:1c:f8:c6:0f:ca:aa:98:8d:86:ed:d6:35:10:
a9:76:13:44:39:fd:c3:91:52:2d:95:bc:ac:bb:19:
4b:38:59:0b:ac:f6:88:38:4d:f8:14:5e:7e:82:c3:
f4:3f:72:5c:79:8e:2d:68:50:1a:d4:da:27:80:5b:
aa:01:19:98:5e:31:c6:57:93:87:ac:fa:af:85:30:
50:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CA:BB:F8:0F:3D:BA:B0:54:58:61:B5:68:2E:82:0E:5C:12:DE:63
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/68q7-A89urBUWGG1aC6CDlwS3mM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.231.0/24
Signature Algorithm: sha256WithRSAEncryption
02:0b:25:69:9b:e9:aa:d4:2e:bc:46:d2:1b:62:5f:6e:70:f8:
c6:36:56:f5:9e:80:d4:bd:3d:92:08:98:cc:aa:67:45:ec:c5:
d7:ee:09:88:94:83:94:97:7c:ca:35:2b:0d:8d:56:08:97:35:
57:2f:8d:1c:5e:77:a7:3b:cc:04:71:3b:1c:5e:2b:cf:7d:1b:
d4:82:b4:ac:77:97:17:8a:c3:08:fe:15:27:30:a6:32:c2:34:
7a:8e:5a:2a:83:74:97:53:b5:08:56:c5:e4:5a:fd:d7:ed:0e:
0a:c0:37:23:16:67:48:0b:83:d4:44:3d:01:3f:9a:78:60:51:
4c:9f:c3:c6:98:37:aa:44:51:eb:28:66:4b:f1:59:83:b6:1d:
58:80:70:94:ef:2f:e8:35:40:d4:90:61:43:3d:4c:45:f3:96:
c9:a9:ee:cf:4a:56:08:d6:15:51:59:f5:99:fb:bb:66:f7:83:
f3:9d:e1:b9:10:75:b0:78:d4:f1:bd:23:73:42:e7:e2:52:43:
d7:f8:c7:12:50:a3:bc:5a:04:ce:06:44:ba:e5:75:95:2d:67:
0f:de:c4:75:72:f3:be:12:7b:70:de:bb:af:13:38:e8:43:4a:
1f:93:1a:2c:b5:30:e4:2d:6e:3e:ed:0a:69:c9:ba:de:e0:ce:
81:06:18:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:34:14 2025 by rpki-client