Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/7qEAZmQD1-94n8i4N2Qc_rlJrGU.roa
File: 7qEAZmQD1-94n8i4N2Qc_rlJrGU.roa (raw, json)
Hash identifier: 6v8RDq4wVo6gvIhqBgAzhTWagUv+vMQdk+c95MgIIvo=
Subject key identifier: EE:A1:00:66:64:03:D7:EF:78:9F:C8:B8:37:64:1C:FE:B9:49:AC:65
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01993970295443E011EEE0B1E713985E070E
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/7qEAZmQD1-94n8i4N2Qc_rlJrGU.roa
Signing time: Thu 11 Sep 2025 15:41:15 +0000
ROA not before: Thu 11 Sep 2025 15:41:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214243
IP address blocks: 2.56.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:31:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:70:29:54:43:e0:11:ee:e0:b1:e7:13:98:5e:07:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Sep 11 15:41:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eea100666403d7ef789fc8b837641cfeb949ac65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1b:0e:fe:ca:18:57:f7:14:b8:bf:5f:98:5b:
cc:04:4a:15:b6:c7:2b:bd:e0:74:be:73:f7:45:5e:
3b:5a:0d:ac:5a:9f:db:e3:2a:d5:30:27:03:ca:7e:
b0:fc:e9:aa:ee:78:a7:97:d0:d8:45:4f:f9:7f:1a:
6e:7f:7a:b2:1b:bd:bd:df:b7:f3:a3:8a:fd:ee:c0:
70:53:71:20:80:10:49:bf:88:fa:64:3d:de:4f:3d:
43:7d:3f:f7:34:ca:9e:44:d3:65:2c:37:86:31:fd:
a0:a4:d0:42:ca:37:43:6d:2c:6c:dc:61:98:27:21:
e1:e8:b9:be:96:f6:92:4c:59:df:e8:98:e4:d8:af:
93:5a:c7:7a:15:64:e4:4e:f2:58:26:ff:28:da:6b:
1a:0c:35:59:50:5c:77:3f:e6:b3:ba:88:a1:c1:6e:
11:dc:8b:e9:e8:5d:85:18:47:02:26:3f:0a:99:ee:
ee:62:d1:19:df:b8:8f:8c:bc:b3:ce:1e:01:2e:65:
f7:28:1d:54:3c:51:c8:ce:7e:a7:2c:6d:49:6b:ac:
97:5c:5a:f0:7d:b7:d3:3a:f8:fa:5f:55:a8:19:6a:
fa:05:e2:20:fd:30:01:d9:04:b7:e2:e7:8a:bd:a4:
1a:f5:16:31:d7:12:48:b1:20:00:79:11:41:8d:e6:
56:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A1:00:66:64:03:D7:EF:78:9F:C8:B8:37:64:1C:FE:B9:49:AC:65
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/7qEAZmQD1-94n8i4N2Qc_rlJrGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.247.0/24
Signature Algorithm: sha256WithRSAEncryption
43:ab:9c:a7:b4:14:8d:bd:3f:00:8b:78:d1:bd:18:ca:72:33:
e1:dd:68:a9:16:7e:0b:73:4d:3d:52:c7:78:0b:6d:3d:72:80:
a9:ee:ec:82:b0:d3:99:ed:b3:b9:ce:38:a3:bd:4c:4b:a3:94:
18:2c:3a:cd:ad:2b:6e:71:b9:e8:fd:88:73:69:a8:9c:2a:6b:
36:91:0c:cd:55:18:2a:e8:d7:fa:c2:9c:e8:73:14:98:af:c3:
ce:06:3a:57:d2:56:ea:b8:56:65:a2:21:54:ba:f8:b3:dd:39:
bd:2f:bd:04:48:52:58:01:c1:bf:ab:28:f5:1b:92:c1:2c:1c:
51:18:0d:e9:39:b2:5a:c8:89:5a:03:84:d2:b8:fa:da:02:ba:
0d:e5:e2:77:8b:38:68:1c:e7:ea:34:75:a5:cd:16:f4:2d:b4:
7a:11:d5:a7:52:c7:c9:f5:5c:a2:5c:2e:c7:7c:e9:78:be:5f:
b3:11:1e:54:6a:d4:e1:07:8a:bd:00:5a:56:19:ce:d4:e4:5a:
ad:15:a0:d0:4f:f9:f1:e0:4e:50:48:64:af:b0:24:1c:ee:00:
d3:aa:df:20:4c:b5:04:e1:08:15:6f:58:c0:48:a4:f6:fd:e1:
a7:7f:6a:bb:ca:da:59:04:ce:9d:91:37:b6:f5:54:c5:81:88:
3c:c9:10:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:08:56 2025 by rpki-client