Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/EP2vE3nVk8EDmpGKt4xSRlKDGRg.roa
File: EP2vE3nVk8EDmpGKt4xSRlKDGRg.roa (raw, json)
Hash identifier: hMn0ABRgvwjw8LNWxiAha11Y7RHxc4NZtpaX7cPfLrs=
Subject key identifier: 10:FD:AF:13:79:D5:93:C1:03:9A:91:8A:B7:8C:52:46:52:83:19:18
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 01987E35B86D51EE8975D82A4CD914C5B87C
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/EP2vE3nVk8EDmpGKt4xSRlKDGRg.roa
Signing time: Wed 06 Aug 2025 07:08:26 +0000
ROA not before: Wed 06 Aug 2025 07:08:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 194.238.80.0/22 maxlen: 24
194.238.84.0/22 maxlen: 24
194.238.88.0/22 maxlen: 24
194.238.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:35:b8:6d:51:ee:89:75:d8:2a:4c:d9:14:c5:b8:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Aug 6 07:08:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10fdaf1379d593c1039a918ab78c524652831918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:31:ae:dc:51:f0:5e:22:4f:b3:00:fb:46:59:
69:40:11:68:d2:39:f4:0f:92:35:ad:1d:5a:36:75:
fe:66:76:4f:41:06:14:0b:77:30:2f:07:fa:1f:e3:
11:ae:6b:b6:f2:58:8e:df:23:2a:e1:5f:a7:a3:56:
67:ca:e6:5a:30:ab:1d:c6:53:d2:4b:c2:3d:c7:64:
7c:fd:1f:4a:b6:02:78:88:67:9d:31:d9:e0:6b:04:
d0:f3:be:6b:99:88:73:a8:da:d7:1d:ab:c3:9e:48:
0f:52:35:8e:d8:03:9f:61:ea:28:d1:42:15:08:23:
e1:34:c0:b8:28:9c:38:73:14:af:83:4e:6d:62:63:
25:da:e4:fe:6c:a1:f4:f4:0f:6f:82:7c:7a:e0:04:
d4:58:6b:e2:ce:24:17:59:76:75:f4:2d:d9:10:0a:
bc:cb:a7:64:a9:77:3c:ed:de:1c:0a:5c:b1:e0:ba:
0c:11:c7:b4:1c:0b:3e:1a:79:cc:d1:5a:b4:4b:af:
d3:ff:6a:2d:a8:43:27:15:b1:d0:f9:1e:bb:fc:6d:
46:75:cf:d3:53:ca:11:99:8a:03:97:4c:fc:2c:1c:
92:55:e4:24:21:97:ff:b8:55:e6:6b:fd:c8:11:7a:
d7:89:2a:22:bb:a6:fd:f3:35:63:b5:b4:65:fb:4c:
4f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:FD:AF:13:79:D5:93:C1:03:9A:91:8A:B7:8C:52:46:52:83:19:18
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/EP2vE3nVk8EDmpGKt4xSRlKDGRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.238.80.0/20
Signature Algorithm: sha256WithRSAEncryption
be:88:32:38:ec:0a:e1:8c:0d:bf:b4:5d:10:da:60:f6:0b:ef:
77:d7:b1:f4:36:87:11:19:d8:23:9e:f9:f4:e0:b2:15:9f:38:
cb:da:22:28:c4:c1:b5:d9:89:25:16:ef:46:a5:96:38:30:a7:
17:6f:b8:82:72:9d:07:3e:68:c8:f7:56:51:55:11:e9:39:22:
44:73:b0:d9:5c:71:cd:ff:1c:1c:d5:c4:6e:c6:6b:bc:4c:ea:
5a:f9:9b:b6:00:03:76:8b:89:4b:12:99:81:f0:2d:0e:0f:a4:
ab:29:78:8a:65:9e:6d:e2:94:b5:bf:be:f6:2b:0b:86:e7:d9:
d3:d2:92:da:10:e8:bf:0d:71:ce:a8:a7:95:86:64:8d:3b:59:
9c:e1:9a:81:f2:15:a2:96:eb:ed:9a:3c:c3:fc:0f:22:e9:65:
9d:9f:a1:d6:42:85:31:4e:a9:87:7d:b3:4b:65:c5:2a:da:ff:
a5:b9:d9:e4:10:84:d0:93:24:89:f7:ba:b5:da:8e:15:4a:b7:
6f:c1:a5:da:41:a6:61:a2:1e:aa:66:7e:2f:8f:14:76:39:8b:
2c:d9:11:3f:f7:63:fa:3c:ac:91:bd:7b:d9:dc:10:86:21:bc:
2f:f4:e4:65:b7:ac:8b:6a:3a:08:6b:d1:54:2b:b4:05:81:32:
c5:99:02:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:59:18 2025 by rpki-client