Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/e6ZG1PGYjUHyi4CUDkZ2N9ASRQo.roa
File: e6ZG1PGYjUHyi4CUDkZ2N9ASRQo.roa (raw, json)
Hash identifier: jnhCXJBws3bktWWp2eJKi7mQgOmukoDVq7RoHExPILE=
Subject key identifier: 7B:A6:46:D4:F1:98:8D:41:F2:8B:80:94:0E:46:76:37:D0:12:45:0A
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 0198A8C25308464C4BF086CF4CD25C7B4708
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/e6ZG1PGYjUHyi4CUDkZ2N9ASRQo.roa
Signing time: Thu 14 Aug 2025 13:26:04 +0000
ROA not before: Thu 14 Aug 2025 13:26:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43180
IP address blocks: 93.152.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a8:c2:53:08:46:4c:4b:f0:86:cf:4c:d2:5c:7b:47:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 14 13:26:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ba646d4f1988d41f28b80940e467637d012450a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ed:7f:4b:14:cc:08:00:92:1f:d0:48:3f:27:
13:e2:11:c4:d5:67:c1:d0:e5:d5:1a:37:fa:54:08:
c2:f9:c9:3d:e3:12:26:0a:4b:26:7f:6b:57:63:52:
52:7f:94:08:07:ac:e9:83:51:df:df:40:33:7f:45:
fb:1f:09:19:ed:b4:f5:34:fe:f7:77:ca:60:f7:e4:
ad:97:1a:c3:58:f1:ca:f1:ff:8b:50:a5:e6:6b:04:
35:47:75:c6:64:e5:b8:e2:3b:ce:f5:5a:7e:79:ff:
11:83:53:fd:d0:85:f6:e9:80:01:af:df:3d:5a:de:
68:34:da:04:64:ae:03:6b:7c:16:83:80:24:84:78:
28:ff:b3:7d:31:77:27:18:62:35:fc:21:80:c1:37:
1d:d8:d7:26:72:89:a5:6c:aa:f8:63:2c:27:10:ac:
f9:7e:47:6e:49:6b:ff:69:ea:04:4d:84:a3:2a:c8:
a8:4c:7d:bf:b4:81:85:9a:a6:ea:4c:bc:ed:1c:c3:
ee:af:22:27:52:6b:1a:1e:2d:71:cd:77:75:51:fe:
9d:98:ac:b7:a8:40:f6:a2:5c:79:c8:14:89:ba:2f:
01:26:f0:8e:3e:af:65:ef:17:11:ba:2f:f8:a7:b4:
cb:16:d4:e5:6b:ca:78:87:42:94:e9:b3:7c:66:70:
b2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A6:46:D4:F1:98:8D:41:F2:8B:80:94:0E:46:76:37:D0:12:45:0A
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/e6ZG1PGYjUHyi4CUDkZ2N9ASRQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.97.0/24
Signature Algorithm: sha256WithRSAEncryption
23:14:70:0d:a3:1e:e6:0d:13:4b:04:a0:75:c4:aa:97:2f:77:
3c:ea:45:ac:e1:67:90:06:a2:f4:d3:e1:0b:6f:e9:c2:dd:74:
ba:6b:0b:2d:5c:2f:fb:07:74:16:dc:e2:56:56:59:71:1b:6e:
a3:88:02:d0:43:4c:1b:37:27:0a:10:65:c6:19:5f:00:99:35:
8b:4b:a5:74:1a:79:aa:ae:9c:aa:c5:bf:9c:33:d7:6a:ba:aa:
4b:71:13:b5:1b:0c:f8:27:ce:d8:f6:01:c6:86:2b:ab:6d:70:
33:a8:85:e6:88:7f:b3:e1:c3:ab:48:84:f8:43:44:74:d9:2e:
e8:ce:d2:c5:a8:3f:43:44:8d:f9:4b:56:a4:be:29:1d:73:20:
cd:b8:1d:a4:42:a1:31:ed:3a:f2:5e:8f:7b:07:2c:44:36:44:
98:0f:8a:80:40:f8:2c:8c:f0:20:73:fd:d7:6c:16:aa:ea:f8:
b9:1f:be:83:99:90:b2:91:40:0b:d9:c2:f9:90:40:bf:a5:1e:
d0:8a:96:f3:3c:58:24:c6:e7:8e:15:b7:b9:61:19:05:22:52:
04:56:bf:e4:32:49:0c:01:c8:4c:d2:54:86:4c:c1:7b:17:78:
d4:32:a6:6e:a0:d5:ad:e8:19:d9:94:45:32:29:68:a3:26:f7:
56:c5:2f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:40:53 2025 by rpki-client