Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ec9616-79ad-4a36-aba4-84bd67ed0eef/1/7jOhIlGMYtpzhKm6UF5jgqFBiMc.roa
File: 7jOhIlGMYtpzhKm6UF5jgqFBiMc.roa (raw, json)
Hash identifier: C4mpTuEk6wGFVxeEj+/or69TPysG1QX13HP+3u1HlsQ=
Subject key identifier: EE:33:A1:22:51:8C:62:DA:73:84:A9:BA:50:5E:63:82:A1:41:88:C7
Certificate issuer: /CN=90d426209bd8c405cbefee5741b1a52548012bab
Certificate serial: 0198BC00C7DE4A62032CC9BADC47B3FF2978
Authority key identifier: 90:D4:26:20:9B:D8:C4:05:CB:EF:EE:57:41:B1:A5:25:48:01:2B:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNQmIJvYxAXL7-5XQbGlJUgBK6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ec9616-79ad-4a36-aba4-84bd67ed0eef/1/7jOhIlGMYtpzhKm6UF5jgqFBiMc.roa
Signing time: Mon 18 Aug 2025 07:07:04 +0000
ROA not before: Mon 18 Aug 2025 07:07:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44113
IP address blocks: 2a01:70c0::/48 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ec9616-79ad-4a36-aba4-84bd67ed0eef/1/kNQmIJvYxAXL7-5XQbGlJUgBK6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/ec9616-79ad-4a36-aba4-84bd67ed0eef/1/kNQmIJvYxAXL7-5XQbGlJUgBK6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNQmIJvYxAXL7-5XQbGlJUgBK6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bc:00:c7:de:4a:62:03:2c:c9:ba:dc:47:b3:ff:29:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d426209bd8c405cbefee5741b1a52548012bab
Validity
Not Before: Aug 18 07:07:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee33a122518c62da7384a9ba505e6382a14188c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a3:57:b6:6a:a2:e9:be:2c:d1:70:ee:c0:89:
1e:e4:e2:3a:c7:0c:86:90:92:52:f0:b8:4c:ff:87:
11:f7:28:97:83:96:ef:01:cb:2d:75:eb:1e:24:bd:
a0:e6:24:96:28:51:9e:80:6d:67:2c:b4:3c:1e:10:
91:4a:46:5f:42:25:da:95:a3:d1:b6:b2:8a:e9:d7:
cc:ce:5c:c0:3a:51:dd:1e:f2:fc:bf:00:0a:a6:1e:
61:dd:75:ff:c5:24:45:f0:7d:4b:9c:cc:e3:d0:80:
fa:6b:a3:bf:03:64:e6:cb:3b:3c:99:fa:02:e7:70:
5b:b2:5e:16:88:83:04:93:25:e8:a5:0a:8f:c4:dd:
cb:f1:6b:11:03:62:ff:72:69:02:f7:6a:6f:b7:4a:
64:e0:2a:11:84:84:81:3b:de:97:95:df:50:c8:8c:
b1:6d:a2:4a:34:73:7e:05:26:6d:8b:30:0b:57:21:
2c:e1:09:55:92:bd:6a:3e:9f:25:c6:21:d4:13:4b:
bb:65:5d:97:04:8e:f0:12:54:f0:cd:59:fc:75:71:
16:cb:45:aa:0b:d4:31:a2:c8:4d:77:12:59:aa:48:
12:fc:ba:61:b6:eb:92:e6:03:15:e8:6d:bd:70:6c:
47:35:18:d1:96:7b:e4:f3:08:fc:d2:55:aa:40:7c:
65:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:33:A1:22:51:8C:62:DA:73:84:A9:BA:50:5E:63:82:A1:41:88:C7
X509v3 Authority Key Identifier:
keyid:90:D4:26:20:9B:D8:C4:05:CB:EF:EE:57:41:B1:A5:25:48:01:2B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNQmIJvYxAXL7-5XQbGlJUgBK6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ec9616-79ad-4a36-aba4-84bd67ed0eef/1/7jOhIlGMYtpzhKm6UF5jgqFBiMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ec9616-79ad-4a36-aba4-84bd67ed0eef/1/kNQmIJvYxAXL7-5XQbGlJUgBK6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:70c0::/48
Signature Algorithm: sha256WithRSAEncryption
66:2b:4a:66:42:ed:17:bc:0f:79:21:d5:05:66:56:72:50:2c:
43:4d:32:0e:00:4e:15:57:6e:fd:ef:8f:4e:aa:02:c2:d3:c4:
bf:b3:f5:8b:7a:e3:d9:4b:c5:c5:77:5e:9e:2e:0f:2d:d8:67:
2c:90:77:fe:aa:af:3a:07:3a:57:fe:28:35:da:40:be:0b:5a:
ab:8c:56:d8:cb:65:be:71:48:42:84:f7:5d:1e:cd:69:d3:90:
dc:06:fe:48:46:d9:93:77:eb:b8:bb:15:85:0c:f4:9c:fd:0e:
ae:1f:54:af:95:c2:0f:00:df:b3:13:f5:63:b9:72:6a:09:f7:
07:48:c6:ae:88:76:16:94:81:d2:95:47:e6:09:1a:bf:de:b3:
7f:c4:f0:84:b9:64:61:5c:f8:da:dd:1c:61:ff:4f:aa:d9:61:
38:d5:45:5d:00:40:47:cb:fd:d1:5e:17:0e:60:e2:b2:2d:0a:
05:42:12:eb:21:ac:73:a6:71:02:42:40:e0:3d:f3:a9:6f:fd:
d3:08:82:d6:ba:9f:08:99:3a:33:e3:b0:44:bd:71:18:06:04:
0e:a0:8e:25:65:62:19:8d:0f:b4:f3:00:a4:d0:69:a8:55:56:
de:0b:5e:48:cf:45:2a:78:41:39:95:e0:49:69:5d:72:a4:87:
fd:f9:99:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:45:53 2025 by rpki-client