Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/f7Zg_MmXx6IJnLloz3q786pe2i4.roa
File: f7Zg_MmXx6IJnLloz3q786pe2i4.roa (raw, json)
Hash identifier: mDHnzXpmbP7OAduSpZ+5VZ3yHq/l9M3cROQgCCtCtyw=
Subject key identifier: 7F:B6:60:FC:C9:97:C7:A2:09:9C:B9:68:CF:7A:BB:F3:AA:5E:DA:2E
Certificate issuer: /CN=c2ce0814167eaa8189fd84d390270eadf29482cb
Certificate serial: 01987957B9E70CA7A166D23F1A95EB57CC9D
Authority key identifier: C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/f7Zg_MmXx6IJnLloz3q786pe2i4.roa
Signing time: Tue 05 Aug 2025 08:27:28 +0000
ROA not before: Tue 05 Aug 2025 08:27:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199845
IP address blocks: 178.211.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:57:b9:e7:0c:a7:a1:66:d2:3f:1a:95:eb:57:cc:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ce0814167eaa8189fd84d390270eadf29482cb
Validity
Not Before: Aug 5 08:27:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fb660fcc997c7a2099cb968cf7abbf3aa5eda2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f7:6d:a1:dc:df:46:8d:c4:87:51:3d:ca:b0:
22:6f:d5:19:de:e8:0c:6f:cb:d1:2e:96:4b:30:1e:
ee:9d:b8:27:9b:86:e2:e1:8a:94:0b:07:b9:2e:00:
26:ae:5a:86:0c:d3:b5:20:68:f3:4c:c2:25:37:37:
8a:93:ba:e7:1c:9c:a3:4a:9c:6f:8c:d0:b1:8a:b4:
1c:db:2c:1e:ab:53:7b:aa:9c:6e:6e:c3:8a:ca:0e:
07:aa:83:b6:ad:43:5b:8e:13:47:b5:86:08:6f:f3:
cc:f1:69:50:42:75:3c:f5:d1:33:66:8f:cf:a0:83:
3c:a4:20:be:3e:6d:df:74:d5:7b:a2:a7:16:90:a9:
78:2b:87:ac:19:bb:5e:f6:51:38:54:07:9a:3f:f7:
6e:b9:4d:d1:81:83:28:89:b7:ce:de:05:16:64:8c:
60:8c:4a:e3:fb:80:ea:76:90:69:27:54:f4:b4:bf:
3b:65:c6:e9:5c:52:80:e2:37:e8:fd:05:41:93:ee:
de:c7:32:22:98:3b:47:f1:65:08:2a:14:2d:69:2c:
1a:71:c5:c4:38:ed:35:35:bd:bd:25:b4:12:60:67:
e6:48:2f:3e:5a:7e:4e:b4:10:a7:40:da:0d:b4:18:
70:44:d8:0e:2e:03:d2:f8:84:32:8c:19:fd:19:93:
fd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B6:60:FC:C9:97:C7:A2:09:9C:B9:68:CF:7A:BB:F3:AA:5E:DA:2E
X509v3 Authority Key Identifier:
keyid:C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/f7Zg_MmXx6IJnLloz3q786pe2i4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.134.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:89:dd:b2:1b:85:4b:aa:d6:62:54:96:15:26:36:b2:52:b2:
d4:af:79:e6:3b:fe:d3:a3:98:cb:2a:71:a0:5b:c9:76:9f:f1:
67:27:9e:c1:c8:7e:f9:43:b2:f8:95:89:cd:b9:60:9d:66:9c:
52:ff:c2:ff:0b:a4:a8:71:9b:9c:a4:34:b8:79:65:b2:83:77:
10:25:36:0e:51:4b:e9:83:7a:d9:40:0d:e5:ea:a7:ce:3d:61:
de:8d:91:bb:8f:17:16:61:70:58:c1:27:71:35:c9:55:a3:fd:
6e:57:0e:2e:32:12:60:11:3b:da:50:70:aa:c3:c3:d4:dc:da:
82:af:71:b9:60:e2:d5:71:e9:20:21:96:58:af:6c:c3:d6:d0:
93:c9:64:be:1c:44:29:c0:87:66:d4:f3:92:a0:a0:d1:ec:b2:
46:9d:06:06:fe:c2:6b:0f:c1:68:bf:8b:0b:4e:8b:10:22:e6:
6b:23:c5:ac:6a:cf:a8:5d:af:12:34:d4:59:3d:bb:78:bf:09:
e3:5b:97:d2:93:6d:35:69:04:14:dd:07:dd:da:bd:b9:0a:cb:
68:32:be:6f:51:9c:f8:9d:81:79:41:08:f3:f3:26:dd:34:d0:
26:4a:70:95:6d:ee:16:fc:56:4a:98:38:30:38:bb:0c:73:30:
53:e7:77:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:15:23 2025 by rpki-client