Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/C7vrkIFWXY_BNWEv51jTGWAVhms.roa
File: C7vrkIFWXY_BNWEv51jTGWAVhms.roa (raw, json)
Hash identifier: cap60yWCJctiOIlZe8AHUS9c1TEo5a6aG0FiNoYWu4k=
Subject key identifier: 0B:BB:EB:90:81:56:5D:8F:C1:35:61:2F:E7:58:D3:19:60:15:86:6B
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01989DBC11BAAA772754B8A9BF0EE383194A
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/C7vrkIFWXY_BNWEv51jTGWAVhms.roa
Signing time: Tue 12 Aug 2025 10:03:24 +0000
ROA not before: Tue 12 Aug 2025 10:03:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 88.216.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:bc:11:ba:aa:77:27:54:b8:a9:bf:0e:e3:83:19:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Aug 12 10:03:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bbbeb9081565d8fc135612fe758d3196015866b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:da:66:49:04:9f:2c:f8:f9:8c:2a:19:5a:38:
dc:c2:d4:6f:f7:c8:f1:b7:d4:7d:db:76:8e:f2:e1:
03:98:50:1a:44:55:b9:85:80:a5:3c:03:e7:ba:78:
97:bc:73:3f:69:24:a8:63:55:8e:8e:2c:84:09:18:
a7:0b:ff:86:07:0f:1f:aa:40:ac:26:6e:11:4e:22:
6f:4e:9a:cf:90:4b:a7:8c:b8:d6:64:32:c4:76:f7:
a1:d1:c1:0e:fe:77:9c:b1:8c:99:c2:9d:34:e4:f6:
32:1f:fa:18:95:78:86:09:63:91:d8:de:1b:d5:aa:
22:ee:61:d3:43:5c:ce:57:9c:e2:bf:f8:27:19:a0:
d5:b4:a5:fe:36:c2:7b:0c:4d:77:73:ce:72:37:51:
e3:bb:52:95:77:3a:04:9f:a6:db:cc:32:fb:de:23:
92:aa:ee:b9:bb:a5:86:d5:d2:23:53:86:8d:8f:52:
de:06:3d:0b:80:54:a4:34:4b:15:fc:87:50:eb:c5:
21:47:5d:d6:68:8f:43:f8:d6:88:28:64:92:9c:72:
78:74:3d:27:79:ea:be:40:ea:5c:ba:21:cb:bf:38:
f4:84:3b:20:7f:51:46:44:4e:66:2d:c7:fa:df:b1:
e7:89:65:c4:17:31:4c:59:57:32:74:ea:28:fb:6d:
0a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BB:EB:90:81:56:5D:8F:C1:35:61:2F:E7:58:D3:19:60:15:86:6B
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/C7vrkIFWXY_BNWEv51jTGWAVhms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.221.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:77:d0:ac:65:55:d0:b9:37:ef:7f:97:b4:fd:7c:1b:5d:fd:
33:44:15:4e:a2:81:77:ef:c2:8e:15:05:b6:ed:7c:0c:83:33:
9a:65:a9:53:09:54:0a:99:b8:18:52:e8:56:50:ae:27:bd:b7:
3b:0b:aa:af:96:f1:a4:79:64:29:06:bc:1c:31:46:2b:d9:ca:
d9:af:3b:a2:3b:64:89:24:46:06:79:20:18:31:06:04:77:b2:
ac:9e:85:09:d9:b7:6b:f1:8f:9b:88:6d:48:8b:ea:19:e7:57:
e9:99:b6:14:60:9c:96:2a:54:81:43:2f:16:c2:d7:9e:52:16:
2c:b6:88:75:85:64:dc:a7:b6:ed:01:cd:ef:5f:46:5b:de:9b:
75:09:f8:5a:aa:ba:2a:b0:7c:8d:d5:9b:bf:a9:f4:3e:56:63:
e2:dd:c8:14:b9:2d:a3:69:c7:9e:62:7e:c8:ed:62:5a:c4:67:
d3:05:45:4a:7f:59:8e:f9:fa:fc:a9:4d:03:e4:91:bf:f6:79:
6f:80:f8:3a:73:78:74:67:65:f8:7f:63:82:6c:5f:28:a0:96:
06:25:89:2f:a8:c3:b5:66:d3:39:8a:16:66:cb:e5:24:3d:c8:
69:5f:fa:32:d6:2d:ce:d6:a4:bb:d0:b0:df:cc:6c:b4:d6:80:
48:f6:5e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:51:51 2025 by rpki-client