Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/6pr7bC9xj3LXncglgFHE1ACWKnk.roa
File: 6pr7bC9xj3LXncglgFHE1ACWKnk.roa (raw, json)
Hash identifier: HF561zp0/qVinEliP1IFKlQACRwz8RHQD3kya8mzZ+U=
Subject key identifier: EA:9A:FB:6C:2F:71:8F:72:D7:9D:C8:25:80:51:C4:D4:00:96:2A:79
Certificate issuer: /CN=10fe683b1d7e47b7c7eda15501627b70920853a1
Certificate serial: 01988B88080AB17237DF37C1BE5ECC9DF91D
Authority key identifier: 10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/6pr7bC9xj3LXncglgFHE1ACWKnk.roa
Signing time: Fri 08 Aug 2025 21:13:24 +0000
ROA not before: Fri 08 Aug 2025 21:13:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5089
IP address blocks: 158.94.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:88:08:0a:b1:72:37:df:37:c1:be:5e:cc:9d:f9:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10fe683b1d7e47b7c7eda15501627b70920853a1
Validity
Not Before: Aug 8 21:13:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea9afb6c2f718f72d79dc8258051c4d400962a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:41:fc:d2:6b:d5:30:4c:22:72:06:0f:10:cd:
71:e8:4a:2c:fa:2a:bc:82:cf:c6:c0:a1:2b:c9:05:
41:09:53:7a:0c:25:ee:26:5b:aa:15:5b:88:3f:79:
74:58:18:9f:95:53:1b:b4:23:7c:e5:9b:69:5a:fe:
8e:0c:b0:fd:b7:84:45:da:cf:6f:cd:48:dd:40:6b:
2a:9d:f6:86:47:35:c7:eb:67:e9:78:b2:8d:e1:cc:
31:7e:f7:69:c5:4f:15:ac:d6:4b:a2:5c:4b:fe:6a:
3c:94:63:7a:eb:fe:6d:4b:a3:f0:fc:10:ac:3a:b0:
59:a9:43:95:ef:0e:76:41:55:ad:e3:3b:25:00:80:
0a:24:24:e4:61:8b:22:b4:74:b4:db:b6:17:c9:fe:
0a:9b:1f:10:6f:8d:f4:d4:e0:fd:4f:ff:3d:90:c1:
4f:cf:f7:96:9b:c0:c3:4b:4e:93:3c:e7:0f:3b:74:
7e:58:79:d9:56:5e:0a:55:4c:bb:e9:74:1f:bb:cf:
59:71:f1:e9:51:fb:9f:89:93:e3:24:94:92:b6:62:
4e:ad:9f:98:dd:c2:a1:9a:59:42:49:7b:1c:f3:d6:
a1:79:43:62:3c:e0:04:98:ca:90:64:32:68:76:26:
f5:28:da:3a:71:73:1f:1c:71:dc:12:64:f6:0f:cc:
c8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9A:FB:6C:2F:71:8F:72:D7:9D:C8:25:80:51:C4:D4:00:96:2A:79
X509v3 Authority Key Identifier:
keyid:10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/6pr7bC9xj3LXncglgFHE1ACWKnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.94.48.0/20
Signature Algorithm: sha256WithRSAEncryption
94:d9:9c:cf:fe:22:97:7b:12:ea:94:99:00:f0:e3:99:4f:ce:
62:d7:10:27:e0:9a:27:58:3f:bc:f4:14:44:b9:0a:4e:65:88:
62:f2:b3:5b:5f:ee:ac:a2:7f:c9:4b:29:af:53:4b:34:68:b1:
d9:52:b4:7a:60:f2:7d:70:1b:21:47:7f:d9:10:9c:87:a4:bd:
4d:97:c3:67:4e:45:60:eb:94:2c:bf:3c:6c:be:86:71:03:08:
c6:84:45:ed:77:47:c1:56:58:c4:be:17:a2:c1:cb:0c:20:ed:
9d:ea:90:f5:2a:88:23:27:a1:cb:79:57:5b:b4:f2:19:8d:4f:
d7:8d:0e:97:6d:55:f5:94:b1:01:32:41:42:a6:22:3e:4a:72:
28:cd:01:f5:22:15:b9:91:b2:50:ed:e7:05:58:6c:15:ae:09:
94:7a:f5:9e:83:35:5f:2d:0e:65:af:1d:57:09:75:f4:6f:6d:
71:c2:4f:2e:20:bf:06:f1:0d:2d:ea:9e:fd:52:d3:c4:a4:6d:
a8:ec:63:25:77:d4:65:04:a3:08:9b:97:46:0a:4e:4e:7d:79:
57:ce:54:86:ab:70:b3:52:a1:b6:0b:d6:db:c6:b7:9f:57:e8:
14:48:d6:ad:29:a8:a4:bc:3f:7f:fc:37:a6:63:7b:4a:36:29:
83:9a:7b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:46:52 2025 by rpki-client