Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/85b043-36d8-4136-9835-8d477259839b/1/7G9OAa8ebUxYvLbiABAZAGXs6yI.roa
File: 7G9OAa8ebUxYvLbiABAZAGXs6yI.roa (raw, json)
Hash identifier: Q8FJVCv7ZP8KepVRkOgfjY1xOHET+UVMaI0qQvaXpcQ=
Subject key identifier: EC:6F:4E:01:AF:1E:6D:4C:58:BC:B6:E2:00:10:19:00:65:EC:EB:22
Certificate issuer: /CN=827313247c486fe434833c09087a00a900301840
Certificate serial: 0196ED9AD8B2A3FE48562468CDBD06C468EC
Authority key identifier: 82:73:13:24:7C:48:6F:E4:34:83:3C:09:08:7A:00:A9:00:30:18:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/85b043-36d8-4136-9835-8d477259839b/1/7G9OAa8ebUxYvLbiABAZAGXs6yI.roa
Signing time: Tue 20 May 2025 12:11:10 +0000
ROA not before: Tue 20 May 2025 12:11:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198040
IP address blocks: 91.233.204.0/23 maxlen: 23
176.103.160.0/21 maxlen: 21
2001:678:e1c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/85b043-36d8-4136-9835-8d477259839b/1/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/85b043-36d8-4136-9835-8d477259839b/1/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 18:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:9a:d8:b2:a3:fe:48:56:24:68:cd:bd:06:c4:68:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827313247c486fe434833c09087a00a900301840
Validity
Not Before: May 20 12:11:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec6f4e01af1e6d4c58bcb6e20010190065eceb22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b3:1a:42:ba:0e:87:d6:22:79:db:cb:34:42:
e8:a6:99:04:79:0c:2b:e5:68:79:c2:72:5d:7b:4e:
a3:1e:99:18:a0:54:06:99:e6:1c:d0:98:f7:6c:c2:
58:55:31:45:2f:1e:53:92:88:fa:c3:21:2d:6d:7a:
04:ca:d6:60:12:32:79:0f:47:0a:19:11:19:73:26:
84:63:8f:b6:9f:61:14:bd:fc:a6:ed:ca:bb:c7:a8:
c2:69:6b:43:ae:22:97:cd:9d:22:90:1d:7d:e3:86:
b1:c2:74:5e:76:42:d3:66:33:85:3d:15:33:34:50:
e9:4a:e0:f9:e7:7c:46:08:9d:f3:3e:5d:36:26:9a:
c7:1b:04:70:6b:6a:63:aa:92:fd:46:a1:2a:00:a6:
e2:71:8a:6c:6e:33:0e:d4:bb:c1:e7:e5:e5:9a:18:
95:3e:2a:ff:57:ee:8e:0b:17:f8:38:17:ba:8f:fe:
1c:f7:ca:71:58:2e:7d:86:4d:46:c3:f2:4a:19:9f:
25:e1:6d:01:6b:1b:ba:4d:ff:df:13:f9:0e:45:47:
4e:22:81:d8:4e:95:ad:55:f2:4c:7c:ce:b4:40:51:
3e:97:e7:2a:05:90:a8:12:59:26:d5:2f:9f:84:b8:
08:28:85:f2:fd:c3:3f:62:eb:30:52:b5:47:89:0b:
f3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6F:4E:01:AF:1E:6D:4C:58:BC:B6:E2:00:10:19:00:65:EC:EB:22
X509v3 Authority Key Identifier:
keyid:82:73:13:24:7C:48:6F:E4:34:83:3C:09:08:7A:00:A9:00:30:18:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/85b043-36d8-4136-9835-8d477259839b/1/7G9OAa8ebUxYvLbiABAZAGXs6yI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/85b043-36d8-4136-9835-8d477259839b/1/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.204.0/23
176.103.160.0/21
IPv6:
2001:678:e1c::/48
Signature Algorithm: sha256WithRSAEncryption
16:83:ca:3d:67:c1:17:6d:ba:94:a2:a3:5c:de:d5:76:d6:19:
ac:88:8f:c6:e2:ea:71:cb:c3:0c:86:34:3d:81:2c:2a:32:87:
b0:57:5b:2b:2b:92:5b:4f:b7:e9:f2:de:3d:45:e6:db:43:c6:
f1:e7:66:ba:ba:ea:4c:1c:e0:a9:b0:bb:8c:56:8e:bb:36:08:
78:fa:96:d9:d5:86:35:1c:12:00:99:4a:9a:00:f7:bf:2e:42:
3d:f3:65:12:59:67:fd:88:3c:a6:da:a5:1e:5e:c7:6c:d8:b3:
26:fc:35:0c:87:98:e4:77:a9:48:a1:d0:01:c4:b3:7f:99:c0:
49:37:aa:c0:7b:83:54:e5:04:97:2e:da:3e:1c:c2:4a:78:c0:
61:bc:a3:cd:62:67:2a:99:2e:97:95:09:53:f8:46:9f:76:54:
52:b0:58:39:0f:4e:98:01:36:2c:ed:03:3e:ec:97:a3:84:cc:
6a:d4:ab:ef:e3:9a:db:b0:e0:b6:14:37:01:75:70:ca:ff:b4:
ed:84:7c:fe:87:d9:61:ee:3f:31:d2:f2:5b:85:ac:b6:b8:d1:
19:03:22:df:23:df:aa:17:84:5a:56:77:84:d8:1f:25:51:a5:
95:94:60:e4:44:e5:11:2b:34:9b:36:9d:2e:0f:3c:48:7d:eb:
8f:81:66:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 04:43:16 2025 by rpki-client