Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/7B14ZplVrco99CgQhNCv1xGbSkc.roa
File: 7B14ZplVrco99CgQhNCv1xGbSkc.roa (raw, json)
Hash identifier: OmdwbZQIFrQFIJiZl5h04SvPsC9q6wGpd1O2lXSQCno=
Subject key identifier: EC:1D:78:66:99:55:AD:CA:3D:F4:28:10:84:D0:AF:D7:11:9B:4A:47
Certificate issuer: /CN=61e6ea83926bc478c785471d805a5c1210a8c993
Certificate serial: 01978734A34166E7D1429F58B7192898F102
Authority key identifier: 61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/7B14ZplVrco99CgQhNCv1xGbSkc.roa
Signing time: Thu 19 Jun 2025 08:01:03 +0000
ROA not before: Thu 19 Jun 2025 08:01:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35273
IP address blocks: 195.69.248.0/22 maxlen: 22
195.238.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:34:a3:41:66:e7:d1:42:9f:58:b7:19:28:98:f1:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e6ea83926bc478c785471d805a5c1210a8c993
Validity
Not Before: Jun 19 08:01:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec1d78669955adca3df4281084d0afd7119b4a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:be:31:61:c1:60:46:a3:26:89:7c:df:45:10:
b5:1c:36:e5:20:11:a4:7e:8e:31:94:60:02:87:53:
48:b8:35:69:a8:60:ed:ce:a8:da:80:04:2e:36:16:
20:e7:db:b8:da:8c:e1:d4:89:d4:97:8c:61:ac:05:
82:e1:9e:16:67:bc:47:30:60:62:8c:46:3f:87:2f:
27:0b:29:97:3f:29:ff:8f:03:d5:01:89:82:2f:d4:
b0:c6:ed:60:24:a7:db:79:63:74:45:44:d0:91:e7:
a4:a4:f7:4f:9b:f4:0c:0a:25:6f:72:2c:2a:1b:0f:
3d:e3:f0:d3:2d:2e:24:fd:68:6d:ec:90:82:bc:ac:
e5:4c:1c:7c:04:7a:06:38:c8:17:60:5d:85:70:d4:
9a:96:06:eb:47:39:6a:3e:f1:b5:19:f2:20:3f:39:
57:4c:dc:a9:3d:d4:76:2e:6f:e2:7f:76:16:34:b2:
e6:6b:5b:2e:4d:56:4c:fd:de:20:fe:79:20:35:39:
47:57:4f:b2:36:fc:c8:96:5e:45:05:8e:5e:da:ba:
86:37:91:cb:eb:31:cd:f1:8b:e8:c5:b0:4d:c2:e7:
8c:16:60:9b:2a:ba:53:65:c4:51:6b:09:ec:9e:9b:
d4:18:10:d0:32:32:ca:af:53:04:0b:e3:0c:3a:04:
d2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1D:78:66:99:55:AD:CA:3D:F4:28:10:84:D0:AF:D7:11:9B:4A:47
X509v3 Authority Key Identifier:
keyid:61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/7B14ZplVrco99CgQhNCv1xGbSkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.248.0/22
195.238.112.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:52:fd:84:f1:41:84:09:03:56:8b:0d:7d:43:89:f8:47:08:
4e:39:b0:c6:14:42:a6:fb:53:36:ac:f6:ca:4a:f3:f6:02:8b:
71:40:eb:be:c7:8a:94:69:8d:df:97:ed:b9:0c:f5:03:81:57:
f4:20:ac:60:01:ff:f2:d4:31:f3:50:c0:98:5e:39:a6:4c:af:
eb:b5:33:d7:89:04:1b:71:9c:80:a6:38:7b:8b:a2:41:8b:1e:
85:c8:a9:f3:ec:f4:32:ef:29:c2:7d:e4:cf:0d:79:c7:a5:14:
94:3b:38:19:09:2d:65:15:8f:39:77:94:bb:0c:7a:7c:16:d6:
43:a6:6a:75:f6:4a:98:9a:c3:b3:c0:fa:4b:db:73:89:78:5a:
5d:2d:11:3f:56:0f:62:a8:11:8a:f3:37:c9:50:59:34:a7:dd:
4f:20:fb:a2:b3:50:64:7b:3a:df:f1:04:4c:e4:b0:44:31:aa:
4d:72:25:f4:70:44:b4:c1:d2:20:1b:cf:b9:39:03:94:ed:7d:
b7:e8:20:ab:de:d7:cf:3d:7d:b5:ee:2e:9f:b7:f1:43:82:e1:
20:ec:0d:d0:d1:5c:c6:6c:51:28:1c:36:d6:da:84:b3:90:e8:
19:79:01:cf:91:b8:16:b6:f3:11:1f:aa:d9:2c:a2:4c:07:11:
6f:3b:44:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:18:59 2025 by rpki-client