Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/7dm2l1emuaQpmK9Uo9mD1q_wbNs.roa
File: 7dm2l1emuaQpmK9Uo9mD1q_wbNs.roa (raw, json)
Hash identifier: j/PlTPWJXoAbzz7GDCcNEwPNZni/IbWZSAVFS2c7T/A=
Subject key identifier: ED:D9:B6:97:57:A6:B9:A4:29:98:AF:54:A3:D9:83:D6:AF:F0:6C:DB
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 01987A813417DF737B56A17DE5E90225CDE4
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/7dm2l1emuaQpmK9Uo9mD1q_wbNs.roa
Signing time: Tue 05 Aug 2025 13:52:24 +0000
ROA not before: Tue 05 Aug 2025 13:52:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 92.63.225.0/24 maxlen: 24
2a02:c6c1:f::/48 maxlen: 48
2a0f:4b41::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:81:34:17:df:73:7b:56:a1:7d:e5:e9:02:25:cd:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Aug 5 13:52:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edd9b69757a6b9a42998af54a3d983d6aff06cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f6:26:8c:47:89:b5:4a:ff:d5:f2:bc:28:3a:
d6:bd:0b:94:51:6a:e7:aa:60:85:30:8a:3f:e3:6e:
33:37:eb:50:5b:b8:b0:ee:66:01:8c:85:91:a8:10:
25:8a:ad:c8:7d:0e:83:2d:7c:f8:c1:fb:b1:f5:3e:
8f:78:59:3f:90:d1:a6:01:0f:c7:ca:f9:e2:6a:ea:
be:21:e8:1f:d8:4f:76:c5:af:5e:0c:94:c9:b5:81:
a1:1f:f5:14:c5:72:5e:2c:58:4a:8d:88:c6:4b:ea:
3b:e8:74:8a:be:5e:c3:33:13:18:c1:a4:3a:28:97:
9f:df:0f:6d:86:a2:41:70:c1:4a:ee:25:ee:66:32:
9f:47:40:f3:41:48:dc:72:a8:5d:3d:04:2f:60:6f:
c8:97:4c:49:f9:b0:93:af:99:e6:2f:54:56:cc:11:
91:22:48:a4:ab:89:53:bf:99:56:a4:4b:12:64:a0:
c0:76:11:e7:e6:18:a5:66:a8:b1:3c:3a:d5:3c:cd:
90:d7:3c:1e:b7:9a:16:ef:7d:ba:ea:ad:04:68:61:
6c:eb:08:01:7c:3a:bd:d0:bc:9c:24:90:3c:b2:ca:
22:28:3f:98:d9:5f:b8:eb:e3:aa:30:d0:7d:6a:b0:
ef:f7:52:29:58:b1:c0:b9:77:64:87:9a:aa:13:ff:
cd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D9:B6:97:57:A6:B9:A4:29:98:AF:54:A3:D9:83:D6:AF:F0:6C:DB
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/7dm2l1emuaQpmK9Uo9mD1q_wbNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.225.0/24
IPv6:
2a02:c6c1:f::/48
2a0f:4b41::/32
Signature Algorithm: sha256WithRSAEncryption
6d:d8:25:ec:c2:11:ae:e2:c2:7e:e2:71:ae:63:86:5c:cb:d5:
72:df:20:1a:54:2d:f3:2f:5d:26:58:f5:25:cd:67:89:5a:ac:
0e:43:bd:88:8f:a4:c7:93:84:5e:e6:7a:cb:7a:8b:b8:d4:9d:
25:2d:0d:70:bd:a8:99:b7:25:e8:cd:d7:9a:a1:7e:a1:1a:c3:
67:f5:b7:98:52:19:c3:77:ba:11:d2:53:53:f4:65:73:be:ae:
a1:e1:d8:8d:e4:d5:76:a9:01:e5:ac:b9:88:df:af:8d:16:b9:
71:de:af:9d:94:b9:d2:85:0f:ef:38:1a:e1:5b:5a:7c:c5:ff:
7d:98:49:e5:38:29:86:6e:54:83:a9:8c:01:09:c4:36:73:0c:
58:3c:d8:5b:ae:9b:c7:41:bf:02:57:67:f6:b0:97:c0:34:79:
1c:0d:c1:b1:c8:49:56:a7:e6:77:ee:e6:9d:fa:42:39:b4:06:
dc:ac:63:49:00:4b:2d:15:5a:5d:6b:31:7e:fd:c0:07:05:16:
06:a6:a5:e1:26:0a:ff:28:10:c4:20:d4:a6:3b:07:ea:16:59:
69:df:7f:01:74:82:89:9e:b5:c2:4d:ac:81:1d:06:2d:21:48:
de:30:3b:ce:49:cc:89:51:19:65:e1:d6:54:c1:78:f0:2b:b0:
6f:84:6c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:14:37 2025 by rpki-client