Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/7Qai7_3OG9tOZhZIU3UmjJ8mcfE.roa
File: 7Qai7_3OG9tOZhZIU3UmjJ8mcfE.roa (raw, json)
Hash identifier: l40PCQmVBuUDSbMih4mk4bv9fMlho26r3dPLXTZdNaw=
Subject key identifier: ED:06:A2:EF:FD:CE:1B:DB:4E:66:16:48:53:75:26:8C:9F:26:71:F1
Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial: 019A2625CE95F19CE536A44A46091F78E28C
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/7Qai7_3OG9tOZhZIU3UmjJ8mcfE.roa
Signing time: Mon 27 Oct 2025 14:50:03 +0000
ROA not before: Mon 27 Oct 2025 14:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211577
IP address blocks: 82.129.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:25:ce:95:f1:9c:e5:36:a4:4a:46:09:1f:78:e2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
Validity
Not Before: Oct 27 14:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed06a2effdce1bdb4e6616485375268c9f2671f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:93:e2:0a:bb:3d:7d:b0:d2:60:14:bf:7e:5a:
96:8b:22:3f:91:84:81:ec:2b:21:15:42:20:44:d7:
e0:42:1f:cb:43:d3:24:4f:f6:4f:30:b3:2b:99:7d:
99:79:7c:8a:33:cd:c5:f2:99:a6:65:3b:91:6c:08:
af:8e:37:94:29:49:58:57:d7:92:31:40:3e:18:53:
4f:9b:ec:32:ac:41:9f:d4:a9:e2:16:13:c9:8e:a4:
c1:a3:4b:b5:81:b4:28:6f:58:df:42:77:cb:83:b2:
2c:81:9a:7b:e6:d0:c0:57:ee:41:6a:10:65:ff:35:
2d:a6:57:e5:49:a0:f8:71:19:5c:49:86:34:10:52:
8e:46:4b:21:a0:f9:76:fc:5a:bc:d3:f3:98:e3:6e:
58:31:aa:64:3f:6a:72:f0:53:cf:dc:38:7c:49:cb:
1e:0c:d2:da:54:e2:d9:2a:a1:95:8c:dd:8d:0c:10:
c6:0e:4c:cb:43:14:b4:88:28:ef:59:9d:10:53:a8:
7a:7f:62:fe:62:21:56:bb:61:ab:7d:f7:63:a4:0a:
7c:07:bd:1f:af:df:e8:e0:58:75:60:22:de:5a:77:
84:ec:da:7e:16:f7:ab:72:cf:50:73:7e:f4:65:89:
5a:e8:4b:24:42:6e:7a:e1:a3:e5:9c:b7:e3:6c:b3:
f6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:06:A2:EF:FD:CE:1B:DB:4E:66:16:48:53:75:26:8C:9F:26:71:F1
X509v3 Authority Key Identifier:
keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/7Qai7_3OG9tOZhZIU3UmjJ8mcfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.129.4.0/24
Signature Algorithm: sha256WithRSAEncryption
06:32:3c:84:3f:0e:b3:6e:09:60:f1:52:1d:a7:e8:d1:60:08:
0e:49:96:45:d8:8c:cf:da:5e:c1:21:da:b9:34:ad:d1:5e:57:
df:c5:b2:dc:e0:76:d4:1b:91:96:21:dd:ec:4d:6e:4a:29:c1:
70:09:8b:20:6a:2e:dd:9f:e9:50:73:43:74:14:52:79:af:50:
d8:65:fb:4d:db:39:b5:da:85:67:9c:93:e0:61:e1:df:e1:40:
89:e6:28:bc:44:7b:d9:d8:c4:a5:cd:39:53:1e:99:7a:75:7d:
29:23:b7:f5:a2:f1:33:60:60:d2:29:8a:dc:b9:0b:fd:4b:85:
f6:6e:1d:35:cf:54:d4:df:12:84:0a:67:24:3a:7a:5b:5e:f2:
bc:58:15:c4:2a:27:7e:27:db:41:b5:1b:b2:bf:0f:b8:c6:a8:
23:be:73:44:88:30:4e:56:66:e6:20:96:e1:85:a2:d0:5e:cc:
05:d9:e2:b1:d0:1a:12:8b:80:67:8d:de:e8:0e:e4:f4:8b:ca:
d0:05:c9:a5:e2:7d:9b:06:19:e4:cb:91:1a:81:c1:83:e2:ad:
3e:c1:77:f8:95:09:f8:db:3c:ee:45:3b:ec:e8:73:78:f0:50:
9a:9e:7e:20:f8:69:2a:f7:c0:c1:1f:3f:64:63:df:72:fe:ed:
70:c7:99:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:04:50 2025 by rpki-client