Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/7gDVXYzVg1BvONcpfCIgQ1ikYW0.roa
File: 7gDVXYzVg1BvONcpfCIgQ1ikYW0.roa (raw, json)
Hash identifier: Z2b/6g0Ewxo1JzfiDSHW6lUXSikVRdrWw603e3VzRm4=
Subject key identifier: EE:00:D5:5D:8C:D5:83:50:6F:38:D7:29:7C:22:20:43:58:A4:61:6D
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0198BBAAB8B5EAC67A46AD2CBF4977EB5029
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/7gDVXYzVg1BvONcpfCIgQ1ikYW0.roa
Signing time: Mon 18 Aug 2025 05:33:04 +0000
ROA not before: Mon 18 Aug 2025 05:33:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 274838
IP address blocks: 109.122.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bb:aa:b8:b5:ea:c6:7a:46:ad:2c:bf:49:77:eb:50:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Aug 18 05:33:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee00d55d8cd583506f38d7297c22204358a4616d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:69:33:5e:c4:41:d9:9d:4d:2f:28:3c:07:6f:
b2:5c:6c:d5:d1:ed:17:b0:af:d3:8c:65:cc:68:05:
89:56:ee:33:26:e7:e8:1f:4d:aa:f3:a8:2d:96:68:
a1:35:cf:d2:f0:93:70:55:42:7e:72:53:ad:99:2b:
18:4d:87:18:f3:02:b0:a5:f8:a5:72:bc:09:e4:a4:
6d:c8:b5:28:b5:7a:19:f0:89:16:36:0d:a0:93:ce:
05:5e:16:5b:47:0e:e4:b0:1e:82:3b:39:d7:23:d8:
15:44:c2:74:e5:2f:92:cd:18:1f:49:d8:12:03:36:
1b:38:6d:4d:ba:ba:78:a4:4c:2f:d5:7c:08:bf:1e:
72:21:c4:0b:aa:44:5f:85:08:33:fd:3f:4c:84:40:
c8:9d:4a:a3:00:e7:01:bd:75:2d:37:73:c9:a9:e0:
c7:68:7f:7c:cb:ef:e6:ce:58:9b:ae:4c:5c:83:49:
5b:bc:55:5c:b2:71:84:59:76:de:67:6f:ac:6c:ec:
d0:61:5a:40:93:35:1b:07:9f:eb:4c:7a:68:d9:64:
8b:a2:73:72:1a:99:85:45:73:e7:76:12:a5:9b:d6:
f4:78:a3:78:26:50:d9:ba:d5:f0:a7:85:c3:07:8c:
e6:65:08:44:19:d7:31:bf:70:95:56:45:7e:7b:6c:
b9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:00:D5:5D:8C:D5:83:50:6F:38:D7:29:7C:22:20:43:58:A4:61:6D
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/7gDVXYzVg1BvONcpfCIgQ1ikYW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.42.0/24
Signature Algorithm: sha256WithRSAEncryption
36:ac:31:0f:23:ab:ca:cb:6e:f8:af:18:a5:b8:2f:e7:e6:4d:
66:b7:5e:c9:8d:28:ce:7b:5e:2b:bf:cd:9f:20:34:ce:2e:37:
ff:a8:d7:06:a6:3e:cd:21:0e:9a:e3:7a:47:dc:b5:96:06:6d:
61:a6:d0:81:eb:b8:91:c1:67:46:f2:80:92:f6:c8:cd:3e:10:
f0:34:6b:1f:d9:79:4f:3f:56:c0:f9:c7:83:21:4b:f0:ab:88:
98:a6:c6:0d:29:5a:30:75:ef:38:6f:34:06:cd:6b:2c:3d:82:
ad:39:cf:71:7c:10:b0:5e:a2:ea:20:f4:34:dd:d4:d9:10:70:
6d:7a:8c:e0:ce:29:a2:6d:a5:41:7d:cb:2d:c2:ae:b0:93:f4:
1c:7f:c4:2b:71:7f:9d:8f:40:b2:b3:93:9a:e3:e0:44:b7:b1:
14:2e:61:1c:71:b0:c4:42:b7:4d:7f:91:e9:8c:8a:7b:d5:d9:
15:78:31:dd:6d:bd:ec:e4:3c:28:eb:23:87:9e:11:7d:b7:32:
a9:81:49:e0:dd:81:5a:61:ea:94:27:7d:69:8e:e5:64:18:25:
ff:7e:11:93:c2:49:ee:a2:1a:d4:fe:e2:65:a7:74:23:4f:93:
5c:16:e8:59:14:64:b4:1b:e9:78:1e:88:80:61:ba:e1:48:c7:
97:68:3d:89
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZi7qri16sZ6Rq0sv0l361ApMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjUwODE4MDUzMzA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTAwZDU1ZDhjZDU4MzUwNmYzOGQ3Mjk3YzIyMjA0MzU4YTQ2MTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmkzXsRB2Z1NLyg8B2+yXGzV0e0X
sK/TjGXMaAWJVu4zJufoH02q86gtlmihNc/S8JNwVUJ+clOtmSsYTYcY8wKwpfil
crwJ5KRtyLUotXoZ8IkWNg2gk84FXhZbRw7ksB6COznXI9gVRMJ05S+SzRgfSdgS
AzYbOG1Nurp4pEwv1XwIvx5yIcQLqkRfhQgz/T9MhEDInUqjAOcBvXUtN3PJqeDH
aH98y+/mzlibrkxcg0lbvFVcsnGEWXbeZ2+sbOzQYVpAkzUbB5/rTHpo2WSLonNy
GpmFRXPndhKlm9b0eKN4JlDZutXwp4XDB4zmZQhEGdcxv3CVVkV+e2y5owIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO4A1V2M1YNQbzjXKXwiIENYpGFtMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvN2dEVlhZelZnMUJ2T05jcGZDSWdRMWlrWVcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXoqMA0G
CSqGSIb3DQEBCwUAA4IBAQA2rDEPI6vKy274rxiluC/n5k1mt17JjSjOe14rv82f
IDTOLjf/qNcGpj7NIQ6a43pH3LWWBm1hptCB67iRwWdG8oCS9sjNPhDwNGsf2XlP
P1bA+ceDIUvwq4iYpsYNKVowde84bzQGzWssPYKtOc9xfBCwXqLqIPQ03dTZEHBt
eozgzimibaVBfcstwq6wk/Qcf8QrcX+dj0Cys5Oa4+BEt7EULmEccbDEQrdNf5Hp
jIp71dkVeDHdbb3s5Dwo6yOHnhF9tzKpgUng3YFaYeqUJ31pjuVkGCX/fhGTwknu
ohrU/uJlp3QjT5NcFuhZFGS0G+l4HoiAYbrhSMeXaD2J
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:23:28 2025 by rpki-client