Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/7DAxFJT5VyzcSgHTnJmDdUKxQNw.roa
File: 7DAxFJT5VyzcSgHTnJmDdUKxQNw.roa (raw, json)
Hash identifier: 37ijJqs68GCjjpypVGN9wvpiuMLosaLv3KKoBIsmUtU=
Subject key identifier: EC:30:31:14:94:F9:57:2C:DC:4A:01:D3:9C:99:83:75:42:B1:40:DC
Certificate issuer: /CN=f4b207ef8024244bbb4a0106af19270150c9f624
Certificate serial: 019875C34840C432CD19569A1BF43F4DCC28
Authority key identifier: F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/7DAxFJT5VyzcSgHTnJmDdUKxQNw.roa
Signing time: Mon 04 Aug 2025 15:46:28 +0000
ROA not before: Mon 04 Aug 2025 15:46:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215488
IP address blocks: 77.95.175.0/24 maxlen: 24
188.214.224.0/24 maxlen: 24
2a14:4c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:c3:48:40:c4:32:cd:19:56:9a:1b:f4:3f:4d:cc:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b207ef8024244bbb4a0106af19270150c9f624
Validity
Not Before: Aug 4 15:46:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec30311494f9572cdc4a01d39c99837542b140dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d2:43:d0:d5:67:e7:ef:38:d8:ee:a8:0d:95:
0d:9e:e1:16:36:15:59:68:3d:5b:08:b8:ad:bb:6f:
d0:37:37:a1:79:f6:fb:0c:4a:41:51:79:d6:d5:13:
41:9a:28:03:d8:ec:6a:f4:d4:3e:f5:35:b0:11:26:
bf:78:a8:0a:5b:b4:99:45:b5:1b:35:95:99:7d:8c:
38:d4:d8:14:38:eb:53:0e:ad:b6:2e:cc:3c:8f:2b:
ac:3f:c3:ff:65:31:a2:05:21:6d:08:10:a0:d7:13:
84:2b:ac:fc:41:08:07:b3:f8:9a:15:fc:fe:30:d5:
17:7c:f7:49:fc:de:bf:d4:ba:65:ee:5d:c7:e6:6e:
b0:84:be:cd:1d:a2:e4:35:5d:b9:ba:9a:47:a2:0a:
ba:f3:f9:d2:67:1f:d5:04:fe:77:98:4e:00:9b:cf:
d6:e5:2a:a7:df:02:4a:39:f0:62:99:2d:5b:7c:92:
02:06:03:c9:04:ec:c7:d0:29:d0:e4:93:32:37:04:
b5:60:d3:77:39:46:3d:ec:89:fb:8a:7b:7b:6c:ae:
58:6b:e6:b6:7e:8e:ee:c2:09:a5:a8:fd:3e:b8:08:
02:e2:62:51:d3:f7:c7:21:11:3c:36:2f:e0:03:50:
02:2a:60:d8:cd:0d:51:d1:c2:ef:81:c5:b8:74:64:
12:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:30:31:14:94:F9:57:2C:DC:4A:01:D3:9C:99:83:75:42:B1:40:DC
X509v3 Authority Key Identifier:
keyid:F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/7DAxFJT5VyzcSgHTnJmDdUKxQNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.175.0/24
188.214.224.0/24
IPv6:
2a14:4c0::/32
Signature Algorithm: sha256WithRSAEncryption
8d:d3:3b:80:d9:dd:db:ee:33:8c:06:de:01:64:84:ee:63:a3:
4a:99:43:75:5e:0e:0d:99:73:78:5f:7f:fd:45:b4:85:20:9e:
c9:31:41:7d:3c:ea:22:13:02:2e:f5:27:80:cd:05:b5:07:97:
78:c7:47:95:38:ea:56:46:1a:30:68:81:9f:ee:9f:4c:99:d7:
d3:e6:98:74:93:e7:2f:83:f2:3b:2d:d3:f9:ee:b4:99:a7:8f:
79:92:b5:af:f6:42:32:d5:aa:80:d7:53:16:41:f8:20:24:d4:
1e:07:2d:bb:62:91:79:44:a3:96:c1:3a:5c:ea:ce:7d:53:6f:
5d:9a:5e:83:2d:90:e2:a4:6f:e4:77:d5:b6:b4:fa:5e:1a:44:
6b:8f:84:9f:bb:04:52:db:e7:fd:5f:da:d7:d1:be:44:de:f6:
04:aa:9e:1b:1c:01:ba:dd:d8:f9:28:13:b9:56:98:3b:e2:d0:
0c:ea:9b:f7:45:a7:c6:f0:81:30:cb:6b:8a:c2:3d:38:28:00:
92:4a:b8:1d:79:68:f3:7d:31:64:1b:dc:1b:dc:b7:52:8d:b0:
2d:7e:6a:bc:20:2a:ef:31:92:74:fd:6f:77:cb:c2:5e:1d:91:
73:e0:6c:c9:dc:da:35:09:c4:43:40:dd:b4:e1:86:b1:98:12:
44:96:c4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 14:46:56 2025 by rpki-client