Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/p7OBVJvorncCcOmPHCxdavaaGQg.roa
File: p7OBVJvorncCcOmPHCxdavaaGQg.roa (raw, json)
Hash identifier: Z1hwZh/uA1vCv2HPMQGXrM/pP16+axX4xigkUmdf4sk=
Subject key identifier: A7:B3:81:54:9B:E8:AE:77:02:70:E9:8F:1C:2C:5D:6A:F6:9A:19:08
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0199AB27DE3C2629CB9EA2F854AF5FBD79FC
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/p7OBVJvorncCcOmPHCxdavaaGQg.roa
Signing time: Fri 03 Oct 2025 17:39:00 +0000
ROA not before: Fri 03 Oct 2025 17:39:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215531
IP address blocks: 45.88.137.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ab:27:de:3c:26:29:cb:9e:a2:f8:54:af:5f:bd:79:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 3 17:39:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7b381549be8ae770270e98f1c2c5d6af69a1908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d5:06:a5:23:9c:92:0d:6a:34:38:36:03:79:
d8:e5:f2:18:39:b3:16:13:23:cb:83:29:f1:c6:8d:
2e:2f:8d:05:72:30:e0:8d:2d:87:13:b7:2e:4c:80:
88:c2:9f:db:6f:b8:2a:fd:2e:bb:7f:a4:b3:3f:45:
a7:0b:9e:71:cd:0e:aa:28:52:78:95:df:2e:06:dc:
e9:51:7a:19:c5:b6:14:e5:79:0c:fe:9e:0b:d3:b2:
48:b4:48:1a:ba:d1:aa:c2:4a:c9:37:64:71:92:6b:
32:9d:6c:51:c9:6f:96:aa:1b:44:05:e8:a1:53:01:
d1:1e:08:41:8e:6c:cd:67:cd:81:97:9e:31:bf:18:
e5:62:a4:31:8c:e6:b7:1f:fe:1a:56:d5:62:dd:9d:
0b:a9:d8:ef:ee:9e:cc:43:94:49:53:01:c4:0a:2e:
32:47:6a:dc:a0:3b:32:f0:7a:18:92:b4:1f:8c:68:
f2:2b:e0:73:07:1b:2c:a0:67:1b:61:3c:05:36:a7:
fe:f7:78:24:b3:0f:5a:7f:cf:32:45:f0:41:77:9e:
fe:cd:64:a0:19:8d:f6:6f:06:0d:03:98:5c:bd:0a:
41:0f:40:70:f3:f7:47:2d:41:ed:47:c6:01:f5:27:
ef:15:f7:95:f6:09:85:50:f6:d3:51:ee:46:b1:34:
47:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B3:81:54:9B:E8:AE:77:02:70:E9:8F:1C:2C:5D:6A:F6:9A:19:08
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/p7OBVJvorncCcOmPHCxdavaaGQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.137.0/24
77.83.37.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:ea:eb:a3:92:5f:b6:d1:4b:09:2d:a3:d1:2d:7a:6d:36:a3:
1a:4f:6b:a6:da:de:d5:1f:1e:59:d2:42:7d:3c:e1:ad:d0:8d:
3a:4f:2a:66:4e:ff:98:b0:24:f5:1e:c0:ba:da:a3:ef:bc:ed:
81:92:bb:66:00:32:c0:21:21:69:38:df:88:25:4e:e0:63:ec:
a2:e1:4e:92:39:98:20:92:65:cd:a9:58:f5:c5:99:fa:fb:3d:
1f:4c:59:b5:14:06:57:d6:06:6a:45:4c:8f:cc:6a:42:68:8f:
bd:cf:11:f1:b8:44:6a:ae:83:d1:fb:39:08:8e:8e:d3:6d:c0:
59:17:f1:4b:b5:90:55:fc:55:00:6d:4f:da:57:9d:ba:20:15:
75:0d:dc:1a:97:c2:ec:cf:8e:e5:24:f8:28:32:7d:7b:c7:ba:
0f:f1:be:50:ca:aa:88:0e:71:8e:ec:00:70:9f:f3:0b:0d:8e:
75:0a:7f:80:74:c1:08:e7:ac:e5:4e:5d:88:6f:fe:c0:e5:84:
ee:7f:bd:11:15:c6:39:de:81:e1:25:c8:72:4c:00:95:83:38:
1f:32:93:ab:26:9b:68:b1:31:9f:79:51:c4:50:36:07:55:ef:
55:b9:42:bb:2f:1b:8b:f8:69:b5:40:08:15:58:11:d8:07:5a:
8e:fe:1c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:59:17 2025 by rpki-client