Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/7kUEEtsLEWbBLf682zjziWpJDt8.roa
File: 7kUEEtsLEWbBLf682zjziWpJDt8.roa (raw, json)
Hash identifier: L5MkevfpSfqm+2QnxtbEBtYb6kT449AxFgwbNk4+bn0=
Subject key identifier: EE:45:04:12:DB:0B:11:66:C1:2D:FE:BC:DB:38:F3:89:6A:49:0E:DF
Certificate issuer: /CN=2d597268a57534f8cf1b63b794eef0d77c7b43a2
Certificate serial: 0198D178B00BCA1928CC89ECDDCA42A8E68A
Authority key identifier: 2D:59:72:68:A5:75:34:F8:CF:1B:63:B7:94:EE:F0:D7:7C:7B:43:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVlyaKV1NPjPG2O3lO7w13x7Q6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/7kUEEtsLEWbBLf682zjziWpJDt8.roa
Signing time: Fri 22 Aug 2025 11:10:04 +0000
ROA not before: Fri 22 Aug 2025 11:10:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47405
IP address blocks: 2001:67c:7e8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVlyaKV1NPjPG2O3lO7w13x7Q6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d1:78:b0:0b:ca:19:28:cc:89:ec:dd:ca:42:a8:e6:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d597268a57534f8cf1b63b794eef0d77c7b43a2
Validity
Not Before: Aug 22 11:10:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee450412db0b1166c12dfebcdb38f3896a490edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7e:db:c1:cc:97:cd:7a:a5:45:d1:ba:37:63:
d1:43:de:a9:c5:55:ea:13:06:b3:79:ed:a1:50:8a:
1a:c2:7c:fb:dd:86:db:43:04:78:8b:04:ba:ba:c2:
6c:f9:9b:5e:28:53:12:e9:5b:10:a5:b8:0e:4d:27:
15:68:1d:55:03:b5:36:b3:d7:66:96:8c:ef:7d:20:
72:57:b0:c3:b5:0d:a2:77:d9:2e:29:9d:c9:1c:df:
14:3a:7c:d0:12:76:e2:8f:46:0f:29:9e:95:b1:5d:
64:03:3a:30:5e:88:12:2c:73:2e:94:93:d9:31:3c:
fb:a6:da:fb:46:d5:ac:fd:53:34:6f:3c:20:e7:20:
53:99:98:39:01:e5:e0:44:c8:7c:87:aa:a0:b6:32:
92:d3:97:60:c0:38:6e:89:03:b2:49:f5:0e:10:72:
e0:33:ee:04:0f:3c:37:79:58:2d:6c:80:03:4f:6c:
cb:9c:8a:3e:9d:b7:ac:66:99:53:70:96:e1:56:d0:
a3:02:3a:4d:13:1a:07:0c:f9:8f:31:97:7c:81:0d:
66:2c:58:e1:25:b1:59:47:d1:c7:b6:13:dc:dd:62:
a5:b1:fa:f3:66:36:e9:af:d9:61:40:b2:96:bb:44:
34:f9:8f:ac:af:f8:a6:da:a5:5c:09:0a:11:79:f2:
68:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:45:04:12:DB:0B:11:66:C1:2D:FE:BC:DB:38:F3:89:6A:49:0E:DF
X509v3 Authority Key Identifier:
keyid:2D:59:72:68:A5:75:34:F8:CF:1B:63:B7:94:EE:F0:D7:7C:7B:43:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVlyaKV1NPjPG2O3lO7w13x7Q6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/7kUEEtsLEWbBLf682zjziWpJDt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/71b428-ce82-4e91-ba09-4e0481dc7d1c/1/LVlyaKV1NPjPG2O3lO7w13x7Q6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:7e8::/48
Signature Algorithm: sha256WithRSAEncryption
1c:58:15:4b:d2:7c:0e:a4:d6:f1:4b:7a:72:5c:65:d8:27:aa:
46:8c:1e:da:9e:f2:6c:8b:fd:92:fc:fa:2b:db:4d:f0:76:25:
89:f3:33:4f:17:ee:72:07:93:a7:74:98:6e:de:5e:cf:53:5c:
91:dc:3e:8a:e8:2b:a6:f5:25:d8:a7:df:70:86:95:dd:20:c1:
69:b4:f8:b3:60:ce:18:32:f5:47:b1:ab:b5:3a:f5:65:a9:1b:
33:fc:48:17:54:07:20:50:6a:40:3b:62:ee:f0:37:51:84:d3:
18:61:3d:23:b9:ab:7e:db:25:86:b4:ca:86:28:04:4d:28:39:
96:9a:6a:b9:0d:f3:50:89:d6:13:ab:f2:ee:be:44:18:2b:b4:
23:90:92:38:67:34:2f:8a:bb:90:96:93:a4:91:82:a4:00:89:
49:20:37:10:7c:9d:fa:0a:8e:cb:d6:36:6c:a0:63:63:23:20:
94:1b:98:7b:d2:23:de:99:ff:52:4f:fc:7d:c9:07:d8:25:35:
e9:6f:2f:dc:3f:17:83:1f:64:13:a4:84:97:ad:40:98:75:f6:
2b:73:da:3d:c6:90:f3:48:96:4e:28:f6:a1:0b:da:7d:6c:8a:
45:c2:84:90:de:a4:37:25:ac:38:15:ac:7b:2e:b1:cd:e8:67:
fe:99:f6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:26:33 2025 by rpki-client