Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/on7L1BUlp_1JjdKW00LaV2wAr4c.roa
File: on7L1BUlp_1JjdKW00LaV2wAr4c.roa (raw, json)
Hash identifier: /ZAf5i9rXxWp+UnbIRsFQsVgxYBR2yaSBPDfzOcXLU4=
Subject key identifier: A2:7E:CB:D4:15:25:A7:FD:49:8D:D2:96:D3:42:DA:57:6C:00:AF:87
Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Certificate serial: 019759974F0E06A58BF10637392A34069D2C
Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/on7L1BUlp_1JjdKW00LaV2wAr4c.roa
Signing time: Tue 10 Jun 2025 11:26:17 +0000
ROA not before: Tue 10 Jun 2025 11:26:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202678
IP address blocks: 46.31.78.0/24 maxlen: 24
46.31.79.0/24 maxlen: 24
185.73.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:97:4f:0e:06:a5:8b:f1:06:37:39:2a:34:06:9d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Validity
Not Before: Jun 10 11:26:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a27ecbd41525a7fd498dd296d342da576c00af87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c5:f9:47:7c:f3:65:47:10:ad:15:cb:ef:a1:
43:83:af:f8:20:51:74:60:40:27:19:d8:38:d7:78:
aa:51:02:ed:3f:0b:c7:72:a0:3b:05:40:03:1c:e7:
82:ab:03:fc:8d:ae:6f:38:0a:97:b8:fd:72:c9:bc:
76:60:42:e8:06:bd:7c:30:b0:52:07:0c:81:20:8a:
98:ce:23:96:3c:3c:16:d3:ed:1d:a1:ac:57:96:80:
87:74:00:8c:7b:2c:cf:2c:0a:6a:4c:df:4c:cd:43:
e7:fb:78:64:f6:66:27:8c:c9:6a:f8:53:25:e5:5a:
d6:67:6c:d8:a9:b6:5d:ee:8c:1e:6f:13:65:21:3e:
82:23:cf:00:83:71:60:52:6d:9e:c8:90:ef:f3:08:
e6:55:c2:f9:7c:fc:2e:d2:03:64:e0:d1:d0:3b:36:
b2:32:2a:85:91:49:50:37:75:c9:81:87:0c:5a:ba:
ef:0c:99:7e:af:e3:ae:7e:7b:87:40:67:00:26:4a:
4a:88:66:44:95:0f:e0:2f:e0:9f:25:6b:fc:4f:e9:
38:41:73:8c:02:38:57:b2:a9:7d:8a:da:8d:9e:47:
c1:8b:f3:4b:70:f9:b7:76:dd:4d:9e:1b:c4:28:31:
2a:eb:e2:56:95:7b:c9:a2:ef:9b:60:d7:15:66:32:
48:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:7E:CB:D4:15:25:A7:FD:49:8D:D2:96:D3:42:DA:57:6C:00:AF:87
X509v3 Authority Key Identifier:
keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/on7L1BUlp_1JjdKW00LaV2wAr4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.78.0/23
185.73.203.0/24
Signature Algorithm: sha256WithRSAEncryption
38:32:5d:a1:c8:d8:ce:35:c0:8c:7d:a3:33:1a:a7:ab:24:00:
f9:da:6d:9b:b6:bc:0f:e6:15:74:45:f4:60:8e:ee:fa:c8:8a:
dc:d2:73:8d:d1:93:d7:14:e4:1d:85:77:95:a8:7b:53:17:9e:
bc:36:05:0f:75:b3:dd:c1:56:7d:43:d0:6f:60:73:4c:d0:f3:
81:77:c9:d6:7b:70:c1:4d:e1:66:0c:cb:1d:a1:2c:3a:e0:a6:
4b:be:fd:ad:38:22:3e:5e:d2:07:4a:e2:73:98:16:9f:08:c6:
eb:88:37:8f:85:0f:1b:1d:59:d1:8a:41:28:19:a1:84:f7:60:
11:32:20:b4:4a:a2:34:e1:8b:e9:28:1e:bd:f3:d6:3d:6a:e7:
ed:d8:b9:ba:a4:44:46:bf:ba:31:25:42:c3:e0:2e:a4:d6:74:
85:da:aa:01:a4:09:18:20:71:59:32:0a:85:ec:0d:66:0e:6a:
bb:7f:67:35:ea:8b:1a:dc:c6:d0:24:de:d0:71:cb:45:f9:60:
76:07:35:9d:14:2b:ef:42:cf:74:03:77:18:86:bd:41:b6:2c:
6c:d3:fa:2d:c1:5e:d9:78:e4:f0:88:76:7b:4e:3e:8c:7a:ec:
00:91:36:35:c5:ba:93:28:4b:83:c9:28:17:ae:7e:8a:34:b7:
35:aa:49:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:59:00 2025 by rpki-client