Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/f7e24_kc_woNPGchU49zRaiPPtg.roa
File: f7e24_kc_woNPGchU49zRaiPPtg.roa (raw, json)
Hash identifier: rsVGF94CsaYZyejnnB2G7Jx9MOV3cb8+8hyyFUvoFDk=
Subject key identifier: 7F:B7:B6:E3:F9:1C:FF:0A:0D:3C:67:21:53:8F:73:45:A8:8F:3E:D8
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 0199DD18DCF592D9745C728DB505A6117B1F
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/f7e24_kc_woNPGchU49zRaiPPtg.roa
Signing time: Mon 13 Oct 2025 10:23:38 +0000
ROA not before: Mon 13 Oct 2025 10:23:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 81.31.246.0/24 maxlen: 24
185.84.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:dd:18:dc:f5:92:d9:74:5c:72:8d:b5:05:a6:11:7b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Oct 13 10:23:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fb7b6e3f91cff0a0d3c6721538f7345a88f3ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c1:40:dc:6c:50:5b:2a:b2:e3:2d:85:73:87:
12:5c:9a:8b:60:aa:4e:f9:53:85:e1:9e:8a:6e:ed:
28:0f:7f:39:27:67:0c:d7:b7:5f:1c:f4:8a:6c:b0:
64:6b:29:f4:bb:66:b2:5a:59:7d:a4:9b:b9:90:62:
37:bc:b1:78:ed:81:49:00:8b:a0:64:86:5d:f9:fc:
ab:53:05:fa:f4:0b:a1:6a:5b:c6:be:f7:ab:04:2c:
12:c5:b9:f5:86:48:2d:79:3c:01:01:f5:9b:31:75:
ff:ff:e8:1a:ad:29:f7:6f:6b:37:43:ba:da:b9:87:
1f:b2:c7:39:08:f4:40:35:03:87:be:21:47:a4:80:
2b:84:b9:3b:dd:0d:cb:63:da:6f:e6:c9:e1:21:a3:
04:f9:77:99:ff:a9:4f:49:f4:c0:de:47:7c:a5:e9:
9d:a0:04:62:8f:7b:f5:d4:cd:fb:fe:8d:a6:36:46:
62:af:c3:16:b1:00:b4:eb:bf:31:eb:7a:95:2c:a7:
16:14:a0:5c:df:98:e9:58:15:0e:b0:29:26:15:4a:
48:03:57:f1:d4:e8:4d:0e:60:ed:1f:8e:5d:3a:76:
f4:bf:d4:f0:b7:83:6d:a6:0a:62:84:b2:b6:19:16:
89:d1:c6:06:f9:bf:be:33:b4:f6:fd:36:a9:fb:22:
15:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B7:B6:E3:F9:1C:FF:0A:0D:3C:67:21:53:8F:73:45:A8:8F:3E:D8
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/f7e24_kc_woNPGchU49zRaiPPtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.246.0/24
185.84.162.0/24
Signature Algorithm: sha256WithRSAEncryption
e5:02:9e:9e:25:a9:11:46:8a:a2:f1:d8:f8:1b:54:d3:e2:53:
e7:74:47:73:34:79:08:67:34:c1:9e:cc:98:28:28:a5:44:78:
e3:b2:49:f4:8e:79:93:f0:e8:5e:84:18:c4:b0:71:82:22:7b:
62:82:9c:60:f9:5c:13:d1:7e:40:f4:96:35:85:d5:4f:b9:b5:
d0:e0:ab:6f:78:30:c5:30:b2:03:80:5f:08:e7:57:f7:15:cc:
80:43:78:7a:77:50:9b:bc:63:da:ae:9d:cb:27:32:83:da:4f:
7a:ca:13:d6:17:fb:41:49:3d:ac:c3:83:47:01:6c:80:56:51:
bc:9f:16:c6:36:94:df:5e:b0:65:7b:28:ff:02:87:10:08:46:
99:82:25:1b:df:72:93:34:56:92:6f:8e:d9:d8:5d:09:63:77:
66:bb:6f:c0:91:a6:61:51:69:af:40:29:01:6a:0e:88:8c:89:
12:f5:ba:52:8c:00:d6:f0:a2:7a:1d:de:37:d2:44:6a:a8:17:
42:ff:4c:f6:eb:04:26:c2:56:b8:f0:26:34:bf:63:76:11:43:
70:b0:6c:ae:82:c5:c9:75:fb:3c:44:87:cf:00:b9:80:8c:e5:
d2:48:3f:b3:64:17:00:59:70:17:34:79:e4:dd:9a:6f:6e:69:
e8:0c:42:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:47 2025 by rpki-client