Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/7SM7vUceATsFrfF0CqsBTpXKSGU.roa
File: 7SM7vUceATsFrfF0CqsBTpXKSGU.roa (raw, json)
Hash identifier: Pv7FxR8uexNbyaAWKuVOmphYKINQaxYNIRHQdASafkQ=
Subject key identifier: ED:23:3B:BD:47:1E:01:3B:05:AD:F1:74:0A:AB:01:4E:95:CA:48:65
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 0198A9E921EA50611D69AE385578A75F00F2
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/7SM7vUceATsFrfF0CqsBTpXKSGU.roa
Signing time: Thu 14 Aug 2025 18:48:04 +0000
ROA not before: Thu 14 Aug 2025 18:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205418
IP address blocks: 2a0c:9a40:8700::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a9:e9:21:ea:50:61:1d:69:ae:38:55:78:a7:5f:00:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Aug 14 18:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed233bbd471e013b05adf1740aab014e95ca4865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0c:6b:64:1f:a5:53:82:85:ed:d4:6b:7e:22:
a0:18:0e:62:7c:17:6c:34:cc:8d:b7:8c:ae:05:ef:
8c:4d:83:2f:30:59:35:e2:60:20:17:d6:d3:62:e9:
c5:09:39:27:f8:7f:fb:93:5c:1d:1a:d0:a9:ed:23:
ed:ff:5f:a0:7f:fe:27:61:e4:25:b3:c5:ca:9d:52:
a1:60:8d:15:43:67:fa:56:e2:e7:66:35:f1:33:f6:
26:3a:dc:14:52:6b:62:f8:5d:b1:ca:32:f7:6a:44:
5c:bc:1d:bd:26:4a:c7:91:c2:3d:86:2b:84:ee:64:
e8:c0:dd:33:ea:68:b7:95:ca:8c:5d:3c:0d:57:76:
1f:81:a5:7e:0e:ed:4c:b4:40:3c:cc:26:5f:72:84:
cf:e0:16:15:0d:72:b1:a7:d6:d3:db:d6:d3:32:9f:
63:ea:7a:dd:14:40:61:dd:76:5d:f0:57:18:0c:c3:
70:27:10:b4:58:77:00:d6:29:11:e8:88:08:b1:b2:
20:60:c2:bd:b0:90:a8:18:d1:ca:ac:45:26:8e:42:
d3:eb:ce:6c:46:2c:1e:4b:06:3f:b0:89:06:4e:be:
48:ef:1c:b9:85:d8:0b:b2:7b:f4:59:31:55:2d:9f:
af:3a:0b:56:a1:b8:10:c3:e7:1d:cc:c6:35:1b:bb:
73:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:23:3B:BD:47:1E:01:3B:05:AD:F1:74:0A:AB:01:4E:95:CA:48:65
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/7SM7vUceATsFrfF0CqsBTpXKSGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8700::/48
Signature Algorithm: sha256WithRSAEncryption
1f:61:de:4f:65:d0:70:d4:01:64:fd:b3:d8:a0:c5:86:9a:63:
78:26:08:48:72:4e:81:de:96:06:27:50:0d:d0:f2:31:5a:9b:
b2:bd:d4:3c:ce:b9:5c:74:a4:6a:e8:8b:df:3e:28:1e:df:aa:
5f:9d:0f:b0:c1:ef:44:e2:7d:93:29:93:a0:d6:cd:85:8f:0d:
7d:37:12:6b:9b:40:79:85:38:e3:08:dd:80:1e:cd:91:f2:d7:
e0:de:27:d9:ac:9f:cc:3d:18:0c:9f:7e:b8:17:06:ed:1b:e5:
b2:4b:62:3d:c5:0f:7e:15:a5:ca:1e:5f:87:c0:dd:33:36:7d:
0e:6a:27:7a:a8:f8:9d:13:2b:1d:19:8b:c7:a2:2e:13:4a:93:
aa:7a:a2:ab:2c:5e:a1:52:84:38:31:52:81:42:ad:ed:38:8c:
2e:ea:de:55:2f:32:39:5d:0c:85:a3:7b:10:5d:95:44:9d:b0:
3a:1e:d8:cf:ac:b1:4a:95:6f:a5:49:e1:79:93:9a:7c:d1:b2:
15:f6:d6:19:3a:4e:1f:9d:3d:6f:17:08:a9:ca:ea:d5:e0:ee:
40:b2:8b:ed:b0:09:23:01:54:f4:fc:f8:c2:35:db:e6:24:5c:
5b:23:90:02:a5:88:83:04:4e:aa:ca:2c:2f:c0:9a:f9:e5:e6:
47:e4:7b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:14:31 2025 by rpki-client