Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/b1e6b0-f3a0-4f5f-bf25-812d45265186/1/Y8PQyPUzQhQIv_XdteLNY7mLRvU.roa
File: Y8PQyPUzQhQIv_XdteLNY7mLRvU.roa (raw, json)
Hash identifier: A+OBbpWaD+MmN4QsD5RWbw2liSbkHZBgDbYA9Xko2fM=
Subject key identifier: 63:C3:D0:C8:F5:33:42:14:08:BF:F5:DD:B5:E2:CD:63:B9:8B:46:F5
Certificate issuer: /CN=7b221dacc6c3e371f5f0bb276c9fe588c5ee5fdc
Certificate serial: 019935249BBF4E966EA4F934F2EABFE7C848
Authority key identifier: 7B:22:1D:AC:C6:C3:E3:71:F5:F0:BB:27:6C:9F:E5:88:C5:EE:5F:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyIdrMbD43H18LsnbJ_liMXuX9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/b1e6b0-f3a0-4f5f-bf25-812d45265186/1/Y8PQyPUzQhQIv_XdteLNY7mLRvU.roa
Signing time: Wed 10 Sep 2025 19:40:15 +0000
ROA not before: Wed 10 Sep 2025 19:40:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207146
IP address blocks: 81.161.232.0/22 maxlen: 24
162.33.208.0/21 maxlen: 21
2a0d:2c40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/b1e6b0-f3a0-4f5f-bf25-812d45265186/1/eyIdrMbD43H18LsnbJ_liMXuX9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/b1e6b0-f3a0-4f5f-bf25-812d45265186/1/eyIdrMbD43H18LsnbJ_liMXuX9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/eyIdrMbD43H18LsnbJ_liMXuX9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:24:9b:bf:4e:96:6e:a4:f9:34:f2:ea:bf:e7:c8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b221dacc6c3e371f5f0bb276c9fe588c5ee5fdc
Validity
Not Before: Sep 10 19:40:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63c3d0c8f533421408bff5ddb5e2cd63b98b46f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a2:e6:40:cc:ed:6c:01:06:28:bd:8e:42:74:
a2:39:44:eb:93:be:e7:97:70:a3:72:89:56:7f:37:
a6:e3:2b:79:7e:c9:a0:76:20:c6:7d:c7:fb:cd:59:
c8:3d:5c:e6:54:29:3d:32:37:f8:bb:d7:48:7f:bd:
cd:61:a2:8f:9c:76:7f:fe:78:39:33:ea:74:e2:da:
ac:2f:91:e2:91:74:8a:83:e3:d5:f8:af:e0:5b:cb:
4f:16:b3:a8:6a:24:b1:00:3b:87:1a:15:90:71:5d:
3c:9d:89:ee:7d:a2:68:f3:3e:55:0b:df:26:2c:44:
2c:e5:63:db:84:56:e6:a4:12:ab:39:19:9f:a7:3b:
4e:ee:8b:c2:9b:c7:df:cd:d6:72:59:70:65:59:4f:
be:b5:fe:e6:ed:21:99:bb:2f:ae:fa:77:58:f2:c1:
25:b8:77:ac:a3:d5:bd:e8:ff:01:e9:81:3d:52:67:
8d:a0:57:a6:ce:69:a7:f2:6c:88:bd:91:c2:4c:79:
fa:8a:2a:29:e1:88:da:f5:6c:b2:47:bf:a1:40:9d:
62:2f:67:78:e5:90:9f:fb:36:1c:db:9e:a9:f5:15:
36:f6:ca:0e:f2:c7:1b:dc:de:e2:0c:b6:d2:2c:bf:
61:0d:08:66:8a:03:96:49:91:56:d4:f1:06:0d:91:
d7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C3:D0:C8:F5:33:42:14:08:BF:F5:DD:B5:E2:CD:63:B9:8B:46:F5
X509v3 Authority Key Identifier:
keyid:7B:22:1D:AC:C6:C3:E3:71:F5:F0:BB:27:6C:9F:E5:88:C5:EE:5F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyIdrMbD43H18LsnbJ_liMXuX9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b1e6b0-f3a0-4f5f-bf25-812d45265186/1/Y8PQyPUzQhQIv_XdteLNY7mLRvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b1e6b0-f3a0-4f5f-bf25-812d45265186/1/eyIdrMbD43H18LsnbJ_liMXuX9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.232.0/22
162.33.208.0/21
IPv6:
2a0d:2c40::/29
Signature Algorithm: sha256WithRSAEncryption
4b:1c:4d:2e:56:17:ce:73:02:4a:3d:e1:ea:54:ba:40:c1:b8:
60:32:01:aa:09:2e:3a:64:91:d5:54:40:58:52:d2:d7:61:7d:
4a:07:61:bb:e4:7b:b9:7e:b7:64:f6:1f:2d:68:e3:98:cd:6d:
76:71:e2:1d:d4:6c:b7:50:be:4b:9f:35:1b:a4:fe:ab:ee:78:
03:ce:a6:24:7d:ea:f2:36:b4:f0:13:c6:8f:ab:ae:3f:02:3f:
f5:03:05:fb:d1:0b:c3:00:53:62:e1:dd:99:a9:b8:e6:48:ea:
20:a8:e9:fb:40:bc:e0:4c:a8:de:b3:c9:10:65:e0:29:70:24:
ef:aa:3f:cf:b9:b5:2a:4f:ae:e1:70:3b:3f:cf:0f:69:16:aa:
e0:44:49:1b:34:f9:9a:d3:9c:3a:b6:c5:3e:f7:0d:d2:90:1c:
5b:6d:8a:e8:46:52:ab:24:aa:c7:1b:75:2e:1d:09:94:01:cd:
5a:f6:0f:95:94:05:de:71:63:f8:4e:d8:7d:1b:ad:a2:b5:c8:
e0:20:99:26:35:e9:e9:02:3a:0f:fb:4b:44:37:5d:ea:e6:b9:
86:73:cc:db:47:38:50:e4:bc:58:77:1e:fd:f3:4e:3a:28:dd:
a0:13:52:aa:45:98:53:a5:f8:53:61:68:e0:3b:43:bf:72:2b:
b5:bd:5d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:42 2025 by rpki-client