Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/7b7EG1vudOLMnDaGNLb-lncealc.roa
File: 7b7EG1vudOLMnDaGNLb-lncealc.roa (raw, json)
Hash identifier: 7HBX7N18idbXa7ERLNpjoIxh0pf4J3pXlXdB96pAP+A=
Subject key identifier: ED:BE:C4:1B:5B:EE:74:E2:CC:9C:36:86:34:B6:FE:96:77:1E:6A:57
Certificate issuer: /CN=2450ca4aab2a3f8abc6c973aa7c0fa13f2571081
Certificate serial: 01978D331013FDAF475505C3F7FD9C6F06B7
Authority key identifier: 24:50:CA:4A:AB:2A:3F:8A:BC:6C:97:3A:A7:C0:FA:13:F2:57:10:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFDKSqsqP4q8bJc6p8D6E_JXEIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/7b7EG1vudOLMnDaGNLb-lncealc.roa
Signing time: Fri 20 Jun 2025 11:57:03 +0000
ROA not before: Fri 20 Jun 2025 11:57:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16190
IP address blocks: 2.56.204.0/22 maxlen: 24
2.56.204.0/23 maxlen: 23
2.56.205.0/24 maxlen: 24
2.56.206.0/23 maxlen: 23
91.195.254.0/23 maxlen: 24
91.195.254.0/24 maxlen: 24
91.195.255.0/24 maxlen: 24
91.198.108.0/23 maxlen: 23
91.198.108.0/24 maxlen: 24
91.198.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFDKSqsqP4q8bJc6p8D6E_JXEIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8d:33:10:13:fd:af:47:55:05:c3:f7:fd:9c:6f:06:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2450ca4aab2a3f8abc6c973aa7c0fa13f2571081
Validity
Not Before: Jun 20 11:57:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edbec41b5bee74e2cc9c368634b6fe96771e6a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1a:97:9f:56:44:0a:e3:1f:49:79:90:78:27:
5b:6f:89:31:3e:20:c3:a2:f3:5e:9f:76:04:64:5e:
1c:30:4d:c4:b4:01:e1:ea:14:81:b8:24:9b:c9:1f:
43:db:3d:82:ec:b9:30:21:07:e9:78:21:d0:d3:76:
56:b7:eb:93:d6:32:1e:d1:29:e7:04:17:51:6e:df:
6e:36:4e:7c:9c:37:31:dd:e0:60:e7:2f:07:10:7d:
54:8a:79:28:27:34:8e:94:92:66:c0:54:0e:d1:67:
5c:11:58:ac:c0:1e:e5:31:b4:4c:e1:56:6a:e0:23:
e4:31:d8:37:3e:33:d8:c0:4a:e6:f8:dc:08:80:c8:
9b:8d:cd:db:b2:8f:2f:82:9d:e2:2b:7b:c1:a6:a9:
ce:8b:6e:e5:41:5f:b6:92:d4:81:24:2e:94:44:ce:
71:a4:80:82:23:9d:34:33:8d:04:9f:c3:8b:f1:50:
44:ab:dc:4f:d2:6d:3f:3a:d8:d3:25:80:82:88:73:
c3:d3:c4:02:16:eb:a1:b7:64:bf:b8:9b:d4:51:c9:
1e:30:c5:37:fb:96:7a:59:df:12:65:6a:ce:a1:a0:
4c:7b:f4:ad:80:2b:d5:ef:76:a3:51:7e:2f:41:dd:
44:c3:d5:d0:bf:ae:24:96:3e:0a:5b:79:5d:f8:08:
82:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BE:C4:1B:5B:EE:74:E2:CC:9C:36:86:34:B6:FE:96:77:1E:6A:57
X509v3 Authority Key Identifier:
keyid:24:50:CA:4A:AB:2A:3F:8A:BC:6C:97:3A:A7:C0:FA:13:F2:57:10:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFDKSqsqP4q8bJc6p8D6E_JXEIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/7b7EG1vudOLMnDaGNLb-lncealc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.204.0/22
91.195.254.0/23
91.198.108.0/23
Signature Algorithm: sha256WithRSAEncryption
87:e4:c6:03:41:02:bf:45:b3:c8:a3:66:aa:c0:c7:81:7e:dc:
53:bf:65:07:15:05:6b:01:46:60:46:f0:d0:55:c7:aa:de:72:
2f:46:34:bc:cc:27:97:e7:f1:3e:16:d5:fe:32:24:58:3c:46:
fd:92:94:9b:72:c8:fa:b3:66:45:8f:94:ef:a5:9a:a1:ec:e3:
06:48:5d:44:16:82:58:f2:4c:01:8e:69:dd:68:db:97:81:4c:
d0:a2:2f:62:13:f0:c6:2a:62:89:61:7d:67:e6:ce:f7:8b:5e:
3a:9b:2d:8d:5e:d4:6d:4d:ae:a0:43:a8:a4:c1:b7:7e:fa:14:
b8:19:86:0f:3d:9f:e5:2c:b0:1b:9d:99:ed:b6:89:3e:3f:d4:
e9:b0:13:3d:d9:db:75:56:5f:c9:88:9d:b0:93:4f:ce:0d:52:
ff:94:cb:e9:98:c5:06:e4:9b:0d:5b:f0:13:ed:54:cf:f4:fa:
99:5f:51:cf:f6:e7:3b:59:e5:4c:26:9b:03:29:55:1b:4c:e0:
19:9f:8c:a6:e7:b3:af:01:cd:46:2e:06:0f:b7:ec:7c:da:fc:
62:25:56:6a:6e:60:ea:df:4a:d3:39:38:dc:b1:e7:aa:bc:40:
05:6d:ba:64:e8:ce:5f:73:0a:f7:fd:3c:8b:1c:a3:98:df:48:
bc:96:ec:a1
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZeNMxAT/a9HVQXD9/2cbwa3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NTBjYTRhYWIyYTNmOGFiYzZjOTczYWE3YzBmYTEzZjI1
NzEwODEwHhcNMjUwNjIwMTE1NzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGJlYzQxYjViZWU3NGUyY2M5YzM2ODYzNGI2ZmU5Njc3MWU2YTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRqXn1ZECuMfSXmQeCdbb4kxPiDD
ovNen3YEZF4cME3EtAHh6hSBuCSbyR9D2z2C7LkwIQfpeCHQ03ZWt+uT1jIe0Snn
BBdRbt9uNk58nDcx3eBg5y8HEH1UinkoJzSOlJJmwFQO0WdcEViswB7lMbRM4VZq
4CPkMdg3PjPYwErm+NwIgMibjc3bso8vgp3iK3vBpqnOi27lQV+2ktSBJC6URM5x
pICCI500M40En8OL8VBEq9xP0m0/OtjTJYCCiHPD08QCFuuht2S/uJvUUckeMMU3
+5Z6Wd8SZWrOoaBMe/StgCvV73ajUX4vQd1Ew9XQv64klj4KW3ld+AiCZQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFO2+xBtb7nTizJw2hjS2/pZ3HmpXMB8GA1UdIwQY
MBaAFCRQykqrKj+KvGyXOqfA+hPyVxCBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkZES1Nxc3FQNHE4YkpjNnA4RDZFX0pYRUlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yMTljNmYtZTMwZi00YTllLWFjYzAt
ZTBkNTc2ZDU1NzdhLzEvN2I3RUcxdnVkT0xNbkRhR05MYi1sbmNlYWxjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yMTljNmYtZTMwZi00YTllLWFjYzAtZTBkNTc2ZDU1Nzdh
LzEvSkZES1Nxc3FQNHE4YkpjNnA4RDZFX0pYRUlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCAjjMAwQB
W8P+AwQBW8ZsMA0GCSqGSIb3DQEBCwUAA4IBAQCH5MYDQQK/RbPIo2aqwMeBftxT
v2UHFQVrAUZgRvDQVceq3nIvRjS8zCeX5/E+FtX+MiRYPEb9kpSbcsj6s2ZFj5Tv
pZqh7OMGSF1EFoJY8kwBjmndaNuXgUzQoi9iE/DGKmKJYX1n5s73i146my2NXtRt
Ta6gQ6ikwbd++hS4GYYPPZ/lLLAbnZnttok+P9TpsBM92dt1Vl/JiJ2wk0/ODVL/
lMvpmMUG5JsNW/AT7VTP9PqZX1HP9uc7WeVMJpsDKVUbTOAZn4ym57OvAc1GLgYP
t+x82vxiJVZqbmDq30rTOTjcseeqvEAFbbpk6M5fcwr3/TyLHKOY30i8luyh
-----END CERTIFICATE-----
Generated at Sun Jun 29 05:47:54 2025 by rpki-client