Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/M7UMw75zEMferpyTZliqTtxFYGw.roa
File: M7UMw75zEMferpyTZliqTtxFYGw.roa (raw, json)
Hash identifier: bhGEILsyYzSvD2gGTZix+BRHPPr9Z15A13HndBQFJh0=
Subject key identifier: 33:B5:0C:C3:BE:73:10:C7:DE:AE:9C:93:66:58:AA:4E:DC:45:60:6C
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 019880B7B54069BF85DF664720E7245C4379
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/M7UMw75zEMferpyTZliqTtxFYGw.roa
Signing time: Wed 06 Aug 2025 18:49:39 +0000
ROA not before: Wed 06 Aug 2025 18:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206247
IP address blocks: 212.22.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:b7:b5:40:69:bf:85:df:66:47:20:e7:24:5c:43:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Aug 6 18:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33b50cc3be7310c7deae9c936658aa4edc45606c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3d:28:79:ba:13:bc:42:85:dd:ed:1c:d6:52:
c6:a4:56:71:bb:92:8f:86:41:31:18:d4:c3:8f:79:
40:3d:32:95:7a:4f:ae:8a:2c:99:0f:83:88:f1:1e:
d0:75:62:9f:43:23:b2:2e:52:16:d5:4b:28:ea:63:
00:f1:85:cb:db:2a:72:20:b1:06:41:e9:34:34:14:
24:c5:09:41:ca:7b:25:ad:73:db:da:84:3c:5a:c6:
30:7a:f7:62:cd:5f:7e:bb:9f:b7:7c:dd:1b:6b:c2:
a3:07:3f:91:04:85:5c:7c:68:d3:43:f7:85:1c:b0:
13:a4:6f:7e:1e:58:3a:93:3f:a2:03:5b:96:0f:a1:
b0:6e:13:b7:4f:e9:90:1d:28:10:2e:f7:36:ec:a1:
e2:b8:e8:40:d3:a9:22:ae:89:a8:cc:aa:de:bc:c4:
7a:da:c7:ff:12:1d:36:a1:b2:a3:8a:d6:49:50:2e:
71:f7:58:ab:b2:e5:3a:3b:65:12:b9:33:58:a4:27:
f3:09:18:aa:93:41:47:27:de:49:4a:d5:76:7d:c9:
b3:be:ad:05:9e:df:c9:85:c3:7b:59:4c:69:19:0c:
ba:d3:c1:89:4f:70:64:53:9b:86:70:2d:da:c4:25:
77:11:e1:36:e2:50:70:1b:1b:e9:8a:41:c5:65:c7:
6b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B5:0C:C3:BE:73:10:C7:DE:AE:9C:93:66:58:AA:4E:DC:45:60:6C
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/M7UMw75zEMferpyTZliqTtxFYGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.22.73.0/24
Signature Algorithm: sha256WithRSAEncryption
19:5f:0e:11:a4:88:00:58:5a:6a:32:5d:9a:66:55:33:7a:00:
a3:ed:56:2d:3f:be:8e:a0:1b:66:7d:14:eb:6d:01:44:57:93:
4b:35:64:e3:dc:3e:72:9a:f7:55:9b:4f:ee:14:a6:16:b7:8d:
76:1e:ed:a3:a3:fc:77:c1:58:b7:ae:8f:50:76:05:dd:5d:33:
d1:c4:41:3b:d1:2c:65:58:b5:d5:2e:58:32:a0:1d:c4:34:2c:
4f:8e:64:89:7c:1b:87:fa:15:27:57:ba:ed:40:4a:cc:4c:34:
e3:00:84:7f:b7:0a:10:5c:a5:f1:1e:d7:92:56:b2:ff:58:4a:
84:2c:2c:e4:e8:2e:eb:f0:2e:4a:e7:74:9c:dc:3d:cb:bf:bb:
c0:78:e6:a5:ec:af:2c:17:46:84:b5:3c:a7:3d:3f:18:e1:8a:
45:62:96:f0:29:f7:75:1a:20:4f:aa:c1:65:db:ae:9f:d5:be:
c8:70:e5:de:76:a7:be:22:fa:97:38:3b:bf:0e:0c:17:0c:d0:
2f:23:05:c0:a1:bd:43:cb:77:07:97:98:04:d5:80:fa:28:cc:
17:29:0c:90:00:c6:1d:1c:52:3f:ff:24:48:68:65:ba:7d:f8:
41:01:a3:6f:78:6a:a2:cb:c6:ad:87:89:e4:b6:91:e8:6a:4a:
49:eb:0c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:07:46 2025 by rpki-client