Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/7dOxBPA-NVqHM_R34TmdQX-eiVk.roa
File: 7dOxBPA-NVqHM_R34TmdQX-eiVk.roa (raw, json)
Hash identifier: F50CnYYnm4HGmpVuvVtE+trmrhmEhsgxat1JiN/ij8U=
Subject key identifier: ED:D3:B1:04:F0:3E:35:5A:87:33:F4:77:E1:39:9D:41:7F:9E:89:59
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 01999B1BED77B9443E32CC47E1DF577BB82A
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/7dOxBPA-NVqHM_R34TmdQX-eiVk.roa
Signing time: Tue 30 Sep 2025 14:52:02 +0000
ROA not before: Tue 30 Sep 2025 14:52:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201670
IP address blocks: 195.20.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9b:1b:ed:77:b9:44:3e:32:cc:47:e1:df:57:7b:b8:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Sep 30 14:52:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edd3b104f03e355a8733f477e1399d417f9e8959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7e:b9:5d:aa:88:f9:7a:0a:d0:cc:7a:f9:f1:
16:b4:b4:fb:cb:8e:92:87:2d:36:2a:cf:6e:ab:40:
44:c3:4a:b9:df:f9:7e:4f:91:11:b6:a5:a9:9e:ea:
19:98:bf:c5:89:b5:4f:d4:a4:74:23:fb:67:09:76:
06:21:3d:75:d3:fe:fc:f0:63:2b:81:c9:b0:de:3c:
3b:24:45:a8:14:2a:48:ae:34:73:d6:2a:ad:3b:64:
92:ed:77:2b:9e:a5:87:fb:cb:76:48:82:e2:52:c4:
7a:fc:0e:b6:80:c7:6f:09:ec:ed:ff:4b:08:40:32:
da:f5:29:62:d7:70:e0:b1:e5:5f:c1:a6:ca:72:83:
32:85:d9:6b:8c:3a:c9:e2:a6:a1:73:bc:14:de:ce:
aa:fd:b5:8d:33:11:92:a7:50:48:45:b8:b6:9f:cf:
7f:56:ca:b2:90:65:be:89:18:fb:20:13:25:0c:9b:
b7:fa:5c:75:53:af:2e:ea:41:ed:51:9f:b6:fe:47:
89:6f:43:04:bb:32:14:ee:89:cc:e5:80:e7:36:32:
3a:ce:25:81:b0:b2:20:50:f7:9a:5d:9e:37:45:22:
8e:56:61:da:9b:1f:f9:88:1a:e4:04:28:4b:ec:4f:
75:b4:d4:d7:3c:91:12:85:63:ae:9f:9e:eb:b4:55:
b4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D3:B1:04:F0:3E:35:5A:87:33:F4:77:E1:39:9D:41:7F:9E:89:59
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/7dOxBPA-NVqHM_R34TmdQX-eiVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.20.19.0/24
Signature Algorithm: sha256WithRSAEncryption
11:25:e6:28:2f:34:da:94:55:90:77:da:0d:2a:b2:3e:eb:99:
a7:cf:a5:f6:7a:35:85:80:38:81:70:6f:30:c6:9c:e5:97:07:
14:a9:bf:71:c0:0a:bd:34:14:0a:5f:36:c0:cb:a8:6f:a1:eb:
55:6a:79:bd:71:e2:50:14:31:f4:81:a1:29:9c:e8:81:4a:09:
50:9b:c5:7e:e0:6e:81:fd:60:6d:d8:f6:30:bf:7b:fd:8c:6a:
74:dd:85:5f:7a:b0:58:f4:78:50:e6:ce:f9:a0:db:63:c0:81:
1e:f8:63:b2:0b:38:30:f2:3e:ba:b6:23:d7:a6:cf:63:05:bc:
ad:cd:a9:32:87:ad:99:9f:b7:75:35:f9:11:ce:c2:86:4a:a8:
5c:7e:db:05:bf:9c:db:45:58:e7:98:1f:fd:82:d1:7e:ea:4c:
0c:8a:60:6e:cc:9b:91:fe:c6:fb:84:a6:cd:21:b1:e2:14:22:
74:75:c2:5e:18:21:45:64:ea:3a:7b:7f:58:d9:56:40:6a:97:
7e:db:83:b6:20:c9:94:a8:88:5e:04:c2:6d:f2:f5:f3:f8:e4:
4c:76:90:4a:4e:7a:21:3f:44:6a:f6:fe:95:d3:5e:dd:f3:54:
f9:f3:6c:89:50:ac:ae:59:57:0b:4c:f7:62:96:76:03:ea:97:
12:07:b2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:56 2025 by rpki-client