Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/7hJdeuyT_mVaBrzgOtc1Dm30EFs.roa
File: 7hJdeuyT_mVaBrzgOtc1Dm30EFs.roa (raw, json)
Hash identifier: gtTNnhHiPTNXI1jOW6J+oRJeenTaQDAxDrLO1XtYBB4=
Subject key identifier: EE:12:5D:7A:EC:93:FE:65:5A:06:BC:E0:3A:D7:35:0E:6D:F4:10:5B
Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial: 019A19AA9D57720BDF7C61D76A8897AD6175
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/7hJdeuyT_mVaBrzgOtc1Dm30EFs.roa
Signing time: Sat 25 Oct 2025 04:40:03 +0000
ROA not before: Sat 25 Oct 2025 04:40:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24381
IP address blocks: 109.205.193.0/24 maxlen: 24
2a01:fb01::/32 maxlen: 32
2a01:fb02::/34 maxlen: 34
2a01:fb05:1000::/36 maxlen: 36
2a01:fb05:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:aa:9d:57:72:0b:df:7c:61:d7:6a:88:97:ad:61:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Validity
Not Before: Oct 25 04:40:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee125d7aec93fe655a06bce03ad7350e6df4105b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2e:97:0f:af:e5:a2:05:24:01:41:9e:64:e2:
3f:fe:3e:bb:77:be:13:4a:ae:82:8d:86:a8:2c:7b:
c6:33:46:eb:ef:e3:1c:af:e9:ce:30:38:0b:e3:c6:
c6:57:1e:51:78:81:a9:63:67:04:2b:bb:f9:15:6f:
ba:9f:50:9d:a4:de:52:2e:10:60:bf:78:f7:b7:29:
85:f4:c7:b2:b1:63:60:ee:d0:ea:2f:18:e5:f9:10:
93:13:0d:f5:ae:65:b8:3d:a4:92:08:07:ca:20:98:
49:50:81:84:06:a1:f7:ac:98:56:a3:d8:00:9e:d9:
c6:3b:6d:5a:fb:11:33:d1:ef:23:0a:1f:29:f3:d6:
2e:04:0c:6f:af:da:93:46:01:64:43:5a:9e:68:07:
8c:08:13:eb:1d:d7:c6:97:10:05:e7:3b:42:a4:c3:
bc:52:1a:6e:e0:36:56:8a:c8:7d:42:8a:6e:84:77:
52:b8:21:c8:32:14:c5:0e:cf:2f:45:8a:57:66:2d:
fe:1a:05:27:38:e5:e1:1e:12:1e:14:f1:05:d2:cc:
51:b3:a4:de:fb:2c:e7:06:8d:88:31:ad:54:f4:ca:
74:e5:4c:8c:7e:5f:7d:ca:6c:b2:5f:6c:34:51:cc:
70:dc:3c:d1:01:06:42:15:fe:ed:7b:05:03:09:33:
e0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:12:5D:7A:EC:93:FE:65:5A:06:BC:E0:3A:D7:35:0E:6D:F4:10:5B
X509v3 Authority Key Identifier:
keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/7hJdeuyT_mVaBrzgOtc1Dm30EFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.193.0/24
IPv6:
2a01:fb01::-2a01:fb02:3fff:ffff:ffff:ffff:ffff:ffff
2a01:fb05:1000::/36
2a01:fb05:8000::/36
Signature Algorithm: sha256WithRSAEncryption
1c:d2:87:f6:f6:2d:75:88:28:1f:65:9e:09:22:3c:6f:36:14:
53:86:81:48:69:ca:1c:d9:ca:70:0a:d3:8f:68:7a:88:8c:d6:
da:0b:c0:43:90:96:b1:84:43:2a:50:cb:fe:02:46:9b:0b:c0:
3c:9d:c0:1c:ee:b0:cd:84:5c:fc:6f:91:81:27:29:af:08:7a:
15:6c:7b:83:2b:91:f8:19:98:60:3b:bd:9b:e4:ee:d0:27:68:
b1:f7:de:e8:33:77:45:9c:41:32:a1:34:b9:01:b2:70:71:bb:
6e:27:8a:36:58:3b:28:c0:29:e2:52:f4:e3:91:ba:b1:f2:64:
2b:c8:bd:72:63:a0:80:0e:c6:ca:fe:41:25:d7:4b:d6:9c:1d:
d2:f4:b4:d6:44:78:d6:89:d4:fb:cf:81:42:7f:0d:6c:ab:46:
50:3e:2a:7a:de:f9:06:c8:9b:df:71:8f:a5:90:29:87:24:fa:
a7:a4:79:bf:7b:82:ca:85:0d:4c:bb:ce:ad:a0:c6:99:21:81:
d3:9f:f6:8d:49:4b:3e:bb:9c:8c:04:bf:4c:85:8f:e2:21:37:
5d:74:51:e2:3c:3f:3e:5e:d0:8e:b2:2e:0d:a0:cd:66:a9:5a:
82:71:14:40:80:54:0b:2b:32:03:93:dc:8b:3d:14:f6:f2:76:
99:0f:66:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:07:22 2025 by rpki-client