Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7--6eexOI34zjUpPM1FXwtdCs-o.roa
File: 7--6eexOI34zjUpPM1FXwtdCs-o.roa (raw, json)
Hash identifier: 6DHy45vA/IJmVDa+3fc/qMZw0AvLZnKFNfdGB0t+3Zg=
Subject key identifier: EF:EF:BA:79:EC:4E:23:7E:33:8D:4A:4F:33:51:57:C2:D7:42:B3:EA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01979B7E6ED9487FF431DC18800EB01BEBB2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7--6eexOI34zjUpPM1FXwtdCs-o.roa
Signing time: Mon 23 Jun 2025 06:34:03 +0000
ROA not before: Mon 23 Jun 2025 06:34:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215292
IP address blocks: 81.161.239.0/24 maxlen: 24
193.25.217.0/24 maxlen: 24
194.31.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9b:7e:6e:d9:48:7f:f4:31:dc:18:80:0e:b0:1b:eb:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 23 06:34:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efefba79ec4e237e338d4a4f335157c2d742b3ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:af:10:82:dd:58:1d:c2:92:37:3a:5c:d7:65:
af:6e:f4:31:08:82:57:c0:29:2e:5b:f6:66:87:68:
fd:0c:e5:97:20:02:82:7d:73:f9:0e:b1:1e:7a:93:
ae:4a:17:42:c0:eb:08:b8:03:81:83:71:2b:54:f3:
ee:e8:ab:b0:e0:1a:1a:13:75:1c:09:34:d7:c4:7b:
22:cb:54:5d:f9:6b:bb:5b:6b:a4:f8:c2:ea:92:b1:
7c:d5:3e:6f:68:66:d0:b0:e8:9d:b2:5c:5e:f5:e6:
c2:02:f9:73:b6:82:6a:96:3d:b8:c8:86:9d:e5:08:
d9:f7:9b:9e:4f:05:c3:54:3a:cf:2d:ad:d1:e7:64:
dc:3d:ad:14:d3:a8:f2:0e:9f:a0:bc:43:6f:3e:50:
9b:2f:6c:84:bb:41:a9:9f:88:b6:5b:14:1f:27:f5:
42:35:38:27:2f:9a:9e:02:37:7b:3e:9f:31:95:cf:
7b:60:5a:de:10:47:bb:33:03:ab:c7:a4:3d:86:8a:
19:96:22:3f:b7:da:84:08:1f:f0:1b:8a:83:9e:8e:
99:e1:7f:06:a0:98:2c:34:dc:ca:e0:24:82:16:de:
dd:d9:a4:e1:d0:aa:69:75:46:cd:e9:d7:a1:21:5d:
57:27:e7:9e:5d:5e:a4:a8:2e:cd:33:8d:94:22:1f:
96:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EF:BA:79:EC:4E:23:7E:33:8D:4A:4F:33:51:57:C2:D7:42:B3:EA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7--6eexOI34zjUpPM1FXwtdCs-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.239.0/24
193.25.217.0/24
194.31.222.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:7a:e4:64:f9:42:a5:52:3e:b0:d3:6b:fe:6d:c5:d4:07:c8:
da:42:bd:32:b1:a9:e2:fe:92:0e:b5:24:28:b1:65:a6:98:c9:
00:21:a6:ba:58:0f:3a:34:f0:6c:b0:6d:9e:60:fb:53:9f:92:
77:9c:1d:db:1a:e0:4d:91:c5:65:eb:73:cd:f0:20:4a:80:65:
e8:99:c7:21:2e:09:b4:85:f2:13:c1:82:95:b6:15:3d:3f:b8:
78:0e:20:4c:03:2c:04:8d:f1:d6:d6:f5:41:4c:e5:24:41:a6:
8f:88:d4:28:fd:e7:c7:a2:11:ab:e4:15:37:60:bb:c7:fd:ec:
c7:40:44:b6:28:6d:83:e1:70:be:c8:b5:4f:75:52:e0:8c:36:
b3:43:3e:c6:17:84:6a:f4:2a:b4:27:c3:7d:fe:66:fb:a1:e8:
36:47:17:46:ed:ba:81:5e:33:c8:6d:36:77:fd:77:77:8f:9d:
e7:f0:4b:c4:67:a2:97:6c:5d:0d:6c:96:b0:17:7a:c0:50:f0:
e8:02:ee:53:98:72:1c:b6:b4:16:e8:c4:64:39:9b:73:9d:31:
69:4c:23:56:2f:29:04:aa:42:e8:3d:e8:55:56:84:0a:fe:d6:
7e:84:08:ff:8c:e5:ed:0f:b9:e6:0c:43:e7:87:7c:00:24:40:
72:87:57:20
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZebfm7ZSH/0MdwYgA6wG+uyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwNjIzMDYzNDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmVmYmE3OWVjNGUyMzdlMzM4ZDRhNGYzMzUxNTdjMmQ3NDJiM2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkK8Qgt1YHcKSNzpc12WvbvQxCIJX
wCkuW/Zmh2j9DOWXIAKCfXP5DrEeepOuShdCwOsIuAOBg3ErVPPu6Kuw4BoaE3Uc
CTTXxHsiy1Rd+Wu7W2uk+MLqkrF81T5vaGbQsOidslxe9ebCAvlztoJqlj24yIad
5QjZ95ueTwXDVDrPLa3R52TcPa0U06jyDp+gvENvPlCbL2yEu0Gpn4i2WxQfJ/VC
NTgnL5qeAjd7Pp8xlc97YFreEEe7MwOrx6Q9hooZliI/t9qECB/wG4qDno6Z4X8G
oJgsNNzK4CSCFt7d2aTh0KppdUbN6dehIV1XJ+eeXV6kqC7NM42UIh+W9wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFO/vunnsTiN+M41KTzNRV8LXQrPqMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvNy0tNmVleE9JMzR6alVwUE0xRlh3dGRDcy1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUaHvAwQA
wRnZAwQAwh/eMA0GCSqGSIb3DQEBCwUAA4IBAQCreuRk+UKlUj6w02v+bcXUB8ja
Qr0ysani/pIOtSQosWWmmMkAIaa6WA86NPBssG2eYPtTn5J3nB3bGuBNkcVl63PN
8CBKgGXomcchLgm0hfITwYKVthU9P7h4DiBMAywEjfHW1vVBTOUkQaaPiNQo/efH
ohGr5BU3YLvH/ezHQES2KG2D4XC+yLVPdVLgjDazQz7GF4Rq9Cq0J8N9/mb7oeg2
RxdG7bqBXjPIbTZ3/Xd3j53n8EvEZ6KXbF0NbJawF3rAUPDoAu5TmHIctrQW6MRk
OZtznTFpTCNWLykEqkLoPehVVoQK/tZ+hAj/jOXtD7nmDEPnh3wAJEByh1cg
-----END CERTIFICATE-----
Generated at Tue Jul 1 11:07:00 2025 by rpki-client