Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/eI_RQ6AJ4E0z9B7GOJa52wr5foc.roa
File: eI_RQ6AJ4E0z9B7GOJa52wr5foc.roa (raw, json)
Hash identifier: HGEC1odkERakp/sMpWBFo962FhRjB0yXI9SlY4RDrwU=
Subject key identifier: 78:8F:D1:43:A0:09:E0:4D:33:F4:1E:C6:38:96:B9:DB:0A:F9:7E:87
Certificate issuer: /CN=a3f1b22b2054502bfd3889138291103d83b6a50e
Certificate serial: 019779206D585143F2E477992F51165DC950
Authority key identifier: A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/eI_RQ6AJ4E0z9B7GOJa52wr5foc.roa
Signing time: Mon 16 Jun 2025 14:24:17 +0000
ROA not before: Mon 16 Jun 2025 14:24:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56582
IP address blocks: 46.235.14.0/24 maxlen: 24
178.210.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 05:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:20:6d:58:51:43:f2:e4:77:99:2f:51:16:5d:c9:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3f1b22b2054502bfd3889138291103d83b6a50e
Validity
Not Before: Jun 16 14:24:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=788fd143a009e04d33f41ec63896b9db0af97e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:29:73:85:b3:2f:4d:7f:7a:5d:00:3a:18:f4:
18:45:a1:13:af:80:7f:51:fc:40:b5:3e:57:65:c4:
c4:8f:d2:51:18:0e:d4:80:bd:b4:5f:b0:3f:e2:86:
df:c7:7d:9c:ef:10:94:0a:21:47:9a:e3:46:48:df:
ec:32:32:40:74:a9:02:7a:96:f5:40:7b:71:08:4e:
5c:47:a0:47:ce:aa:62:45:26:bc:ad:6d:75:56:6f:
73:da:23:a8:3b:77:aa:a9:41:17:92:36:f2:a1:57:
4c:ab:f6:42:60:bb:1c:48:91:d1:65:fc:0e:28:06:
62:b7:74:ce:63:e1:7a:73:2b:f3:85:66:5e:c4:55:
c2:9e:dd:7c:b7:b7:cb:7f:dc:0e:fe:34:44:20:bc:
bc:da:84:16:65:91:b0:25:5b:c0:31:cc:cd:15:63:
25:39:92:46:c0:3e:51:11:2e:3b:4a:93:97:85:38:
6c:32:a3:0d:bb:d2:dc:a7:53:03:8b:3a:be:61:57:
b2:b6:be:b8:60:d6:e3:cc:43:39:7d:04:49:f9:6f:
94:a7:45:e2:6c:45:70:cb:f1:bb:93:db:cc:3e:48:
a8:31:6e:00:1a:08:43:e7:d2:b3:6b:02:c8:15:4d:
13:00:ae:7f:8c:ca:f1:79:22:5f:d4:be:fa:65:e4:
68:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8F:D1:43:A0:09:E0:4D:33:F4:1E:C6:38:96:B9:DB:0A:F9:7E:87
X509v3 Authority Key Identifier:
keyid:A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/eI_RQ6AJ4E0z9B7GOJa52wr5foc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.14.0/24
178.210.180.0/24
Signature Algorithm: sha256WithRSAEncryption
08:69:cd:e9:7b:fd:61:e4:b7:8f:89:8e:5a:5d:35:06:00:f4:
49:2a:8f:84:7a:fc:b7:fe:4f:20:5c:db:d8:d1:ff:ad:91:2a:
eb:c9:95:5f:99:c0:28:04:e6:fe:00:87:db:1f:ba:a7:1d:52:
42:e2:c7:ce:19:eb:ca:11:9e:08:41:a9:af:c2:69:65:1e:70:
bf:cf:f5:f2:b0:c9:a1:4b:5d:3e:d3:7b:8d:1e:77:fa:2f:49:
f4:e1:44:c2:77:54:9d:a5:09:a8:e7:51:e8:7b:56:f6:81:c2:
83:e9:94:e0:04:5c:b8:c6:b5:67:10:1a:58:c7:78:a0:75:ac:
59:f7:62:84:74:61:c3:f7:27:b5:66:3f:15:9c:4c:b9:bc:d2:
41:cf:e4:fc:34:24:9f:eb:b1:20:bc:ab:b9:8b:ed:d8:0a:9e:
d0:8d:69:6e:1d:36:95:ee:a5:67:93:31:b9:ea:2a:d7:e2:e6:
b0:85:b2:36:ed:e2:21:87:85:23:75:81:77:4b:96:14:b2:e6:
60:5a:ad:35:88:1d:a1:32:0b:90:ea:42:a6:81:de:61:28:69:
43:6b:36:7e:5e:70:0b:3e:ab:3b:c8:bf:c1:82:7d:e9:cf:49:
85:bc:e7:60:d4:d9:70:8d:87:ee:a0:42:7e:e7:38:53:5f:a4:
4a:5f:fe:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:03:30 2025 by rpki-client