Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/n7Fl57Sl1pGzpjbP-2vnnXGeCSM.roa
File: n7Fl57Sl1pGzpjbP-2vnnXGeCSM.roa (raw, json)
Hash identifier: yMYv0kAJ/QEz5fR9SrsfYu/yiezyRaShWj8NQosvLuo=
Subject key identifier: 9F:B1:65:E7:B4:A5:D6:91:B3:A6:36:CF:FB:6B:E7:9D:71:9E:09:23
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 01977DFD8BE5EAF2685FCA89EF8DA9968EAC
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/n7Fl57Sl1pGzpjbP-2vnnXGeCSM.roa
Signing time: Tue 17 Jun 2025 13:04:17 +0000
ROA not before: Tue 17 Jun 2025 13:04:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214567
IP address blocks: 109.122.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 10:16:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:fd:8b:e5:ea:f2:68:5f:ca:89:ef:8d:a9:96:8e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jun 17 13:04:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fb165e7b4a5d691b3a636cffb6be79d719e0923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e7:5f:74:21:99:6f:5c:a1:db:7e:5b:bd:a8:
ee:66:4c:5d:ef:40:d9:7a:c9:e2:32:f6:89:fb:bd:
6f:89:8c:be:43:dd:28:2d:d6:cb:00:5d:1c:36:9c:
dd:f6:39:0e:6d:df:e3:f9:f8:43:79:23:81:ba:37:
54:bf:d7:ba:10:db:a0:fa:b6:d4:29:a6:a8:76:12:
2b:16:5e:f1:ee:c8:5b:80:72:f5:92:b8:37:81:a1:
72:1b:0b:0f:5b:3f:27:ee:79:48:e0:4a:d8:be:d5:
e3:e3:09:e2:cd:90:85:95:63:19:a0:cb:97:52:38:
37:3c:a6:57:c5:1e:0e:a6:8e:6d:46:0f:5c:1a:1f:
7a:4c:f5:8c:75:78:49:b0:2f:b7:0f:8a:b9:5b:24:
9e:73:b8:e8:11:7d:e9:95:b6:7e:4c:6d:1c:c2:61:
23:89:ac:cf:87:82:e1:66:16:6d:a0:99:33:a1:84:
03:d0:e6:de:f1:d9:c2:fa:be:ca:8c:c4:0d:ff:cc:
eb:f0:18:f9:d3:f2:68:79:18:f5:91:5e:be:96:88:
27:a6:c3:91:ec:a2:f2:08:69:c9:f7:a4:46:e7:4d:
8d:8e:9b:24:1a:eb:ae:ee:6e:f3:e1:a6:85:63:fd:
de:3a:6f:f5:d6:dd:ba:de:dd:23:e5:cd:4f:cf:2d:
82:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B1:65:E7:B4:A5:D6:91:B3:A6:36:CF:FB:6B:E7:9D:71:9E:09:23
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/n7Fl57Sl1pGzpjbP-2vnnXGeCSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.251.0/24
Signature Algorithm: sha256WithRSAEncryption
80:3e:64:89:78:ab:8d:1f:d3:e4:37:73:53:c0:25:da:29:06:
7e:91:57:ae:d2:29:cb:44:36:6b:ac:c7:b5:2e:1b:b4:b8:0f:
8c:46:24:4c:97:e5:44:ca:7d:88:6a:7a:59:6a:b3:18:75:64:
39:00:bd:89:ec:d3:4e:ef:44:22:8f:ed:81:cd:91:82:83:2a:
23:c9:f3:77:c7:50:86:4e:3c:75:54:11:3e:da:d2:4d:b1:cd:
5e:b0:96:0c:8e:a8:6f:e2:2c:99:68:e2:ec:ef:05:1b:65:9f:
37:57:95:88:92:1d:d4:8d:8a:7c:2e:a2:0c:a6:c8:94:c1:f1:
c4:fb:6c:a7:a7:a0:af:7b:0a:d8:22:45:95:bf:d3:16:b9:6b:
6f:51:24:b3:b7:0f:9c:69:37:c2:8d:c5:70:a5:10:4d:2e:bb:
a7:07:3a:e9:52:df:ed:60:c0:34:d9:ca:01:fd:62:da:24:99:
55:0c:1b:58:a1:7d:dd:03:c8:e2:00:3d:94:84:fc:6e:88:14:
d2:aa:26:c7:d7:21:33:d0:5b:cf:02:cc:7e:b5:ff:36:88:43:
8f:e1:38:d1:b0:e6:9b:46:8d:ba:5f:2f:bf:ff:22:91:b0:70:
30:f6:19:a4:9e:4c:64:4a:d7:b2:fb:fe:fb:1c:d9:10:58:1f:
97:0c:09:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:41:43 2025 by rpki-client