Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/7aEwr5jCQ71yDDM1z5QgxzZT-KY.roa
File: 7aEwr5jCQ71yDDM1z5QgxzZT-KY.roa (raw, json)
Hash identifier: EbipFyNyMO/QLR4UBnR/trLMTxu3kzh57Gr1ht8Dd+U=
Subject key identifier: ED:A1:30:AF:98:C2:43:BD:72:0C:33:35:CF:94:20:C7:36:53:F8:A6
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 0199C3B3B4C8D2CA73161EB60A9DB4AB5B89
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/7aEwr5jCQ71yDDM1z5QgxzZT-KY.roa
Signing time: Wed 08 Oct 2025 12:02:38 +0000
ROA not before: Wed 08 Oct 2025 12:02:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61371
IP address blocks: 94.131.196.0/23 maxlen: 23
94.131.198.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:b3:b4:c8:d2:ca:73:16:1e:b6:0a:9d:b4:ab:5b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Oct 8 12:02:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eda130af98c243bd720c3335cf9420c73653f8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6a:75:8e:ef:f4:cf:9e:e2:dd:f0:26:eb:4e:
73:8f:eb:94:b4:b9:dc:34:03:fa:1f:90:b7:23:7c:
8c:80:83:f3:19:5f:63:e1:01:8b:d1:27:67:1f:e9:
12:1d:b4:45:f4:5a:8b:9f:24:0d:2e:23:2d:e1:de:
8a:e2:53:cd:a7:e0:e4:65:09:ec:20:2e:92:c6:0c:
9b:87:d4:e3:85:12:64:39:00:0c:00:28:72:3a:ab:
6c:c6:94:eb:4a:34:cc:1d:00:0b:7f:82:e8:82:7f:
a7:46:8c:e5:93:03:a6:91:c9:63:52:c1:97:75:5d:
1e:df:a9:10:b5:95:17:34:37:df:9e:bb:7c:ce:07:
af:68:84:2b:93:0a:3d:c6:f8:6c:86:83:46:7f:8f:
53:46:50:dd:75:57:ae:1e:84:82:71:9c:5f:b9:7b:
86:fc:12:41:fa:5f:30:07:dc:6b:f5:90:01:61:b2:
4e:5c:29:30:cf:09:0e:1a:ae:8e:0b:73:61:df:11:
50:4d:bb:7d:fe:89:ef:29:d6:95:d3:cb:af:ca:53:
97:d8:11:c6:16:52:6f:09:49:5f:8c:00:96:17:db:
89:1a:ad:07:ef:39:62:c5:92:92:b7:ed:04:16:7c:
7d:03:2b:a9:3a:56:a4:bd:42:3c:4c:27:c8:c6:36:
e1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A1:30:AF:98:C2:43:BD:72:0C:33:35:CF:94:20:C7:36:53:F8:A6
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/7aEwr5jCQ71yDDM1z5QgxzZT-KY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.196.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:c3:bd:74:29:e6:cc:ff:58:c3:3e:90:87:0c:65:cf:c2:91:
8b:87:78:d1:d9:26:b9:7a:f5:73:ac:d9:4a:5f:84:63:1d:27:
63:58:8e:91:69:0b:9a:1e:10:77:0e:77:10:b5:1c:09:22:a2:
49:43:80:ef:4a:5f:3a:74:bb:4b:f3:5a:d4:91:dd:85:ae:83:
82:05:24:11:fe:c8:0f:53:84:a4:25:b6:60:17:5c:ba:69:4f:
fc:24:61:cc:ec:b7:8b:eb:76:4d:7d:7f:bf:43:07:a9:b7:a1:
6e:cc:01:ef:08:72:2f:36:61:01:c6:46:94:8a:ec:30:0e:75:
6d:ab:c8:3e:25:4b:13:99:d8:46:f2:c1:42:32:9d:1b:02:48:
3e:65:53:b7:4a:e1:c8:1e:8b:20:7e:d3:5e:0a:b6:ed:45:f5:
dd:38:7a:b8:dc:03:88:35:ea:ca:bc:1d:a4:d0:39:b8:cd:ab:
2a:9d:d7:81:59:aa:8a:7d:f0:94:9e:77:fb:bf:9f:74:62:16:
9c:fe:ec:bc:68:04:4d:34:99:c9:cf:ec:68:cf:87:4d:bd:38:
f3:26:f2:f9:58:e1:57:e5:d6:18:67:97:2d:d8:ce:de:8f:7e:
05:2a:be:ac:cc:1c:71:81:7f:16:09:99:7f:bc:0c:2c:be:64:
c5:6b:e9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:09:13 2025 by rpki-client