Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7OSSgndT-wBLhBi604C-pcuQeYU.roa
File: 7OSSgndT-wBLhBi604C-pcuQeYU.roa (raw, json)
Hash identifier: Yc0go01phrzifJHTFGy1MIeUq8bO7KOLoIvV7ve45VA=
Subject key identifier: EC:E4:92:82:77:53:FB:00:4B:84:18:BA:D3:80:BE:A5:CB:90:79:85
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019856653316A88181C4FE6EA8062CE59225
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7OSSgndT-wBLhBi604C-pcuQeYU.roa
Signing time: Tue 29 Jul 2025 13:35:29 +0000
ROA not before: Tue 29 Jul 2025 13:35:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197998
IP address blocks: 45.134.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 Aug 2025 23:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:65:33:16:a8:81:81:c4:fe:6e:a8:06:2c:e5:92:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 29 13:35:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ece492827753fb004b8418bad380bea5cb907985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5c:45:67:bd:81:32:c9:74:0b:b9:12:c9:bf:
d6:cd:63:07:70:23:6c:8e:e4:a9:5b:25:6d:06:cc:
ff:73:e1:1f:0c:1f:ff:de:39:82:0b:32:92:13:3d:
e3:9a:36:a6:9f:74:cf:f6:ad:cb:4b:be:de:f2:1d:
9f:fa:70:98:9a:91:08:af:cd:06:29:36:a5:bb:12:
4b:1f:d4:88:b4:b1:f5:aa:2b:10:19:f6:c9:a9:3d:
44:8f:68:35:d1:cc:4d:26:cc:01:3f:cd:b2:5f:a3:
31:b0:40:9e:b0:c6:e6:20:2e:0d:7f:5c:e8:96:1b:
90:8a:f2:a2:9b:0c:29:99:24:a4:8a:90:cc:15:89:
90:82:87:b5:76:93:41:0c:03:a1:51:6e:f8:b7:95:
10:66:4a:3e:e6:11:c6:3a:07:92:d8:dd:59:9a:e2:
2e:8c:cd:b0:00:65:50:21:2e:3f:11:f0:7a:d7:25:
cb:c9:02:11:6a:7c:ab:96:68:2d:d7:50:d5:1b:3d:
da:bb:2a:24:24:db:af:c6:e4:79:6d:73:12:f4:a7:
72:39:e6:95:a3:ac:21:ef:65:af:94:18:cf:2f:8e:
86:e0:e3:c2:b7:a3:41:96:4d:eb:68:4e:96:3a:4b:
c6:0f:32:c5:07:83:a3:20:f6:61:1c:bf:c5:7b:a6:
50:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E4:92:82:77:53:FB:00:4B:84:18:BA:D3:80:BE:A5:CB:90:79:85
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7OSSgndT-wBLhBi604C-pcuQeYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.187.0/24
Signature Algorithm: sha256WithRSAEncryption
61:82:14:77:d7:2f:3c:f6:b1:ed:ba:5b:89:d4:b6:aa:79:e8:
46:5d:50:cd:f9:23:7a:d2:7d:7d:2a:ec:4b:96:47:1e:ae:85:
19:43:b1:1f:01:b1:fe:c2:02:ad:42:c6:d9:0e:78:7b:77:6e:
6e:ba:39:bb:76:98:49:48:45:3f:b4:5f:d3:c6:84:65:53:1e:
f9:ea:f7:87:36:df:f4:35:57:fb:0b:3d:7d:4a:bf:66:44:75:
c5:08:34:89:ac:12:56:d6:a9:5e:c0:9b:37:38:e4:5a:84:5a:
ed:fd:71:1c:3d:2d:ec:69:a5:c7:a4:b0:2b:e4:5f:85:2e:4d:
c5:b4:a1:9c:d7:1d:fc:24:ba:3c:35:2c:50:22:31:28:e5:d2:
b1:d1:ab:75:c5:2d:ef:19:5a:fb:8b:22:30:c9:f0:41:fd:73:
7d:4a:79:c0:cb:9e:d6:1c:07:62:19:10:f9:6d:00:43:78:e7:
0d:f9:6e:4d:01:c5:85:95:a9:33:dd:c8:98:37:85:42:7c:8e:
be:24:ea:56:1b:2f:63:46:c4:4a:36:23:a5:f0:24:32:4b:3f:
fb:95:ba:00:7d:f3:96:3b:78:a6:34:d9:df:f6:80:64:35:1e:
28:22:90:c7:bc:95:43:65:26:66:c3:c2:77:7e:44:31:54:be:
2a:b3:b7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:54:12 2025 by rpki-client