Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/76e277-9637-4cbf-91f9-85432e93ee78/1/cE7D59zxehJZdZNEvYWQXDVNz7A.roa
File: cE7D59zxehJZdZNEvYWQXDVNz7A.roa (raw, json)
Hash identifier: p6fUjsKyUdQv5Z7o25/yMrHwWCat6eLyUeS3asqc+Yo=
Subject key identifier: 70:4E:C3:E7:DC:F1:7A:12:59:75:93:44:BD:85:90:5C:35:4D:CF:B0
Certificate issuer: /CN=7810b5e2d41913f928a34e9961b7fc8964850046
Certificate serial: 01999F886F5014AF36A91046D9D9033F51B1
Authority key identifier: 78:10:B5:E2:D4:19:13:F9:28:A3:4E:99:61:B7:FC:89:64:85:00:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eBC14tQZE_koo06ZYbf8iWSFAEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/76e277-9637-4cbf-91f9-85432e93ee78/1/cE7D59zxehJZdZNEvYWQXDVNz7A.roa
Signing time: Wed 01 Oct 2025 11:29:02 +0000
ROA not before: Wed 01 Oct 2025 11:29:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205951
IP address blocks: 212.108.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/76e277-9637-4cbf-91f9-85432e93ee78/1/eBC14tQZE_koo06ZYbf8iWSFAEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/76e277-9637-4cbf-91f9-85432e93ee78/1/eBC14tQZE_koo06ZYbf8iWSFAEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/eBC14tQZE_koo06ZYbf8iWSFAEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9f:88:6f:50:14:af:36:a9:10:46:d9:d9:03:3f:51:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7810b5e2d41913f928a34e9961b7fc8964850046
Validity
Not Before: Oct 1 11:29:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=704ec3e7dcf17a1259759344bd85905c354dcfb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:61:dd:34:bf:e5:1b:07:d0:f0:84:0a:84:44:
48:df:23:5a:44:f0:0b:4c:89:66:3b:02:c8:f4:34:
c4:d6:9a:3a:ca:58:eb:a1:81:50:b6:2a:26:e8:a3:
70:6d:02:7f:15:70:bc:0d:cb:2a:43:81:ae:5f:5a:
0b:10:a3:ab:50:9e:41:93:d2:ce:ca:fa:52:25:5e:
83:cc:2b:59:a5:2e:0f:49:92:6a:77:e7:bf:24:2a:
65:a5:6c:cf:18:ab:57:01:3b:6b:93:21:b9:fe:52:
a1:37:e3:4d:19:12:68:08:f0:c0:82:6f:b3:17:d8:
51:8f:91:19:12:b3:2b:23:c7:af:9c:be:ab:f6:5c:
83:bf:59:c4:36:20:f2:a2:20:f5:93:e8:86:83:ea:
67:f1:97:93:53:b4:5f:95:32:13:9f:c1:5a:94:f7:
43:2c:37:0c:ac:5b:59:8f:a1:fd:39:dc:0b:ad:a0:
d6:4b:0e:48:4d:a2:92:69:60:82:8f:b8:bb:d9:aa:
4e:9a:24:d1:40:e9:63:55:43:52:ce:d1:a5:13:42:
39:d0:7f:6a:e6:80:17:1c:d3:df:4c:55:0f:e9:46:
a8:4b:fb:b8:f8:db:f9:82:b4:5a:d5:4d:03:eb:de:
c6:1d:18:9e:ee:ad:ea:42:4e:b8:1d:a4:06:93:e2:
e8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4E:C3:E7:DC:F1:7A:12:59:75:93:44:BD:85:90:5C:35:4D:CF:B0
X509v3 Authority Key Identifier:
keyid:78:10:B5:E2:D4:19:13:F9:28:A3:4E:99:61:B7:FC:89:64:85:00:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBC14tQZE_koo06ZYbf8iWSFAEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/76e277-9637-4cbf-91f9-85432e93ee78/1/cE7D59zxehJZdZNEvYWQXDVNz7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/76e277-9637-4cbf-91f9-85432e93ee78/1/eBC14tQZE_koo06ZYbf8iWSFAEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.108.126.0/24
Signature Algorithm: sha256WithRSAEncryption
63:bd:e2:0e:56:ce:36:f8:ee:af:8d:91:dd:3a:c6:fa:00:4f:
b2:09:55:50:39:6c:4f:c6:66:74:91:64:83:fc:cc:35:7d:a3:
68:3d:d3:61:43:db:7a:c5:bf:84:6a:f9:1d:6b:e6:4c:66:0e:
f6:74:c0:b1:52:a0:c4:9b:2b:2e:18:78:c7:fa:55:b5:a2:be:
58:b1:dc:72:48:f4:7d:83:bc:fe:24:7f:76:8b:c3:69:0f:41:
96:51:57:92:42:ed:8f:25:f9:fb:d9:d2:7a:7a:c6:65:5f:e6:
df:a4:23:1c:0e:eb:b0:a3:c9:9a:ae:9f:77:48:ae:3e:1b:1f:
98:8b:15:5f:31:77:57:73:41:44:78:e0:eb:21:af:95:7a:90:
e4:ab:60:0c:32:1b:36:19:01:bc:02:6b:5c:53:be:ec:06:36:
81:ac:2d:9b:f8:ec:0e:5d:27:56:ce:34:c9:70:55:58:cd:02:
1e:8e:b4:3c:c2:81:20:f3:ff:d9:9c:02:31:91:7c:9c:d5:ca:
91:4c:61:2d:57:77:2f:e6:92:ca:5b:b2:90:74:9b:44:68:00:
89:c9:0a:78:90:b9:7b:5c:69:e0:4f:54:28:76:eb:67:7e:cf:
53:73:fc:a9:d8:cb:e3:70:f7:35:d0:b1:53:47:89:e1:25:a8:
fe:94:fe:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:46:06 2025 by rpki-client