Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/7p7DRfsKRQgIFnRoD-torrVwpOU.roa
File: 7p7DRfsKRQgIFnRoD-torrVwpOU.roa (raw, json)
Hash identifier: vF6vZ5+aCaTu0YHZFUhcdCkat0uXKKUmkLzk7fzLfkE=
Subject key identifier: EE:9E:C3:45:FB:0A:45:08:08:16:74:68:0F:EB:68:AE:B5:70:A4:E5
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 0199E84BB27D431F27FE35444B193925D545
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/7p7DRfsKRQgIFnRoD-torrVwpOU.roa
Signing time: Wed 15 Oct 2025 14:34:58 +0000
ROA not before: Wed 15 Oct 2025 14:34:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 213.185.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e8:4b:b2:7d:43:1f:27:fe:35:44:4b:19:39:25:d5:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Oct 15 14:34:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee9ec345fb0a4508081674680feb68aeb570a4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f2:41:0c:77:80:af:72:75:af:a3:bb:d4:d0:
6a:31:5f:cd:47:d9:0c:40:cf:6a:ac:ec:89:f0:10:
7a:9b:61:4e:1c:3f:40:9f:8f:37:41:4c:1c:d4:80:
52:4f:76:c8:cd:4e:21:c2:23:a3:b6:24:eb:c6:5c:
bb:c3:8f:1e:77:a0:a8:6f:a1:12:d5:e3:4e:e8:13:
95:85:a8:9b:13:54:b1:93:c7:f2:03:65:39:eb:a0:
a9:88:6b:1a:da:8f:d2:74:4d:68:fc:17:ae:c5:62:
2b:10:21:69:07:54:83:44:17:90:f8:c7:54:b7:04:
4f:b9:de:21:bd:e2:4a:04:0b:d6:ba:5e:45:8b:e9:
89:53:b4:29:95:4f:98:3d:d6:b9:92:3a:0b:f3:60:
01:f0:f9:30:b5:fc:58:09:05:61:07:76:10:1e:50:
cc:c5:49:88:25:97:33:6f:05:db:ac:35:73:f6:76:
98:a4:0b:fc:31:f1:61:cc:98:ec:81:78:a1:92:81:
13:45:f4:0a:31:5c:31:66:c7:a4:e0:75:9e:dd:4d:
6d:18:6d:57:13:86:27:10:ae:fd:33:6a:8a:19:5d:
f8:02:0a:c9:0f:d6:8d:50:48:2e:31:c4:7f:de:a4:
7c:66:08:99:91:c6:d3:37:f4:b9:a3:0d:ac:27:fd:
da:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9E:C3:45:FB:0A:45:08:08:16:74:68:0F:EB:68:AE:B5:70:A4:E5
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/7p7DRfsKRQgIFnRoD-torrVwpOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.185.92.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:c3:a1:f5:ff:48:34:37:89:9d:54:98:2f:88:86:83:01:da:
8e:cf:48:3e:4d:b4:0a:a5:b8:5c:94:22:20:f5:70:c5:a0:0e:
3c:ab:07:ac:c0:12:fd:9c:06:ea:29:f3:bd:8b:4d:27:90:9d:
2c:dc:3d:ed:e8:3e:ac:20:c3:68:00:74:78:2e:37:20:23:38:
38:4a:3c:1f:f9:db:ee:c4:ff:18:3e:32:32:a8:30:a7:d4:91:
51:8f:a8:c3:41:94:59:6e:33:52:df:9c:1f:82:02:b9:37:89:
c1:63:25:61:72:a1:99:af:95:7e:a5:bf:9e:f8:70:fe:98:b5:
17:ab:ee:b8:f0:ed:7d:e7:a3:94:2c:34:15:ef:6e:ae:42:47:
9e:f3:95:74:ed:c1:91:c2:38:1d:57:e7:76:db:fd:5c:ae:f5:
d2:af:c7:de:d8:f7:31:c5:40:b3:95:f6:ac:d6:c3:aa:ac:05:
c6:82:46:84:79:07:66:d0:79:6e:23:a1:71:f7:92:80:df:b2:
87:ab:58:14:d5:83:76:7e:2b:ce:9b:12:e9:f6:3d:79:3f:d1:
d4:6d:bc:b9:c1:04:1c:b1:5b:f7:59:4a:2c:e7:3a:0e:ef:de:
da:3c:3d:9b:eb:e4:3e:57:50:bb:fa:cf:b0:e3:7b:2e:9f:a9:
25:0e:0a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:57:13 2025 by rpki-client