Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/7UUAA6-rfwajvaAr2mkA9OmXfI4.roa
File: 7UUAA6-rfwajvaAr2mkA9OmXfI4.roa (raw, json)
Hash identifier: CBN8ziM89MxVzMewBkXc6YlRG7fSrYHSwUHDuf97QWE=
Subject key identifier: ED:45:00:03:AF:AB:7F:06:A3:BD:A0:2B:DA:69:00:F4:E9:97:7C:8E
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 019892D040BAC4C4915DFCB73BF9ECACB969
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/7UUAA6-rfwajvaAr2mkA9OmXfI4.roa
Signing time: Sun 10 Aug 2025 07:09:38 +0000
ROA not before: Sun 10 Aug 2025 07:09:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207416
IP address blocks: 212.113.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:d0:40:ba:c4:c4:91:5d:fc:b7:3b:f9:ec:ac:b9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Aug 10 07:09:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed450003afab7f06a3bda02bda6900f4e9977c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e5:d3:91:17:af:71:1a:e9:12:10:d2:95:62:
eb:76:a3:ee:4f:3e:17:81:a9:b3:2b:b9:1a:48:b8:
da:36:27:08:e6:56:ef:c4:39:99:4c:77:9a:3c:18:
27:13:1e:96:4f:23:32:3c:8a:5e:fe:a3:24:ef:34:
f2:82:c0:8d:fd:de:e3:8d:52:14:8c:39:62:2e:1d:
62:5d:ef:d2:e1:e2:7c:61:63:76:1f:97:fc:30:d4:
7e:24:84:5d:fa:27:25:a1:0b:08:d2:c4:f3:96:65:
d1:a1:08:91:c2:4c:c5:85:c2:20:a0:73:9a:4a:74:
86:0b:bf:27:8e:d5:db:7a:d2:72:d9:34:78:8b:3c:
1d:89:42:6f:eb:8d:20:f0:2d:6a:ba:92:78:b8:c8:
e5:12:8a:97:37:6f:16:0d:cb:0e:34:d2:f3:f9:26:
34:d7:36:44:54:c2:d2:ec:7b:f3:c1:b9:bc:ee:ab:
23:e0:54:e5:f2:6d:17:59:9c:d7:4d:ae:a7:40:15:
75:78:91:45:f7:56:34:e4:2e:39:d5:f9:49:19:ee:
49:e5:6f:b8:cf:a3:b6:e2:df:06:4a:54:bc:40:76:
ac:ae:ee:ab:21:08:06:41:5f:8e:d4:aa:88:3e:2f:
8f:fd:79:e1:49:60:1e:0a:be:1c:64:33:84:5c:19:
0c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:45:00:03:AF:AB:7F:06:A3:BD:A0:2B:DA:69:00:F4:E9:97:7C:8E
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/7UUAA6-rfwajvaAr2mkA9OmXfI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.98.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:a8:0a:e9:ac:87:44:8f:28:58:2f:7f:60:ba:8e:fb:6b:b8:
d0:25:44:d9:45:2f:07:1e:83:6a:26:e8:10:ed:23:1d:a5:5e:
62:bf:fb:b2:1b:4f:d2:19:39:84:75:46:7e:ee:04:ca:44:58:
67:a6:39:2d:44:16:1d:2d:e2:e6:4c:2c:63:79:20:0b:00:7a:
cb:53:2d:19:31:29:96:1c:9a:2e:1d:86:87:6e:8b:01:71:94:
9a:3e:d2:02:11:f5:74:75:4e:fe:2b:da:36:e7:db:ca:c3:f3:
e5:6b:d7:97:51:b6:cd:26:51:6d:04:22:52:52:70:31:8e:e6:
09:c4:11:bb:15:4d:94:4a:04:e9:55:81:58:d3:6f:1b:29:60:
65:be:f0:04:9d:04:28:db:11:ce:22:e0:fc:93:21:14:fa:24:
4c:9a:f8:44:6a:1f:1d:4d:5c:d9:ef:df:90:76:42:cb:ec:da:
b7:7e:aa:fb:2a:e7:3a:85:85:f6:e8:7c:96:23:e0:c2:d7:bb:
e0:81:83:a2:08:19:8f:83:04:e4:e3:08:6d:f0:83:d5:ca:9f:
3d:c2:c7:cf:83:f5:28:2c:61:71:dc:c0:20:6e:2b:24:63:45:
75:c3:2a:33:ee:57:27:8f:66:3f:45:f5:9b:72:90:da:92:d4:
d1:5b:90:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:33:15 2025 by rpki-client