Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/7BRz7sqgzw4Xpt--CopEuxCWfWM.roa
File: 7BRz7sqgzw4Xpt--CopEuxCWfWM.roa (raw, json)
Hash identifier: uXb1hThCDZs/zDa1KxumXwWAiBxIWiN8ARDqjmHXwEs=
Subject key identifier: EC:14:73:EE:CA:A0:CF:0E:17:A6:DF:BE:0A:8A:44:BB:10:96:7D:63
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0199CD86A897815A9B667719EC523F58D1A2
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/7BRz7sqgzw4Xpt--CopEuxCWfWM.roa
Signing time: Fri 10 Oct 2025 09:49:38 +0000
ROA not before: Fri 10 Oct 2025 09:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 188.95.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cd:86:a8:97:81:5a:9b:66:77:19:ec:52:3f:58:d1:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Oct 10 09:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec1473eecaa0cf0e17a6dfbe0a8a44bb10967d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9b:5f:41:22:4a:8e:4a:d0:6c:ec:32:17:9b:
2e:29:ee:c6:ce:9f:de:01:52:93:7d:80:1a:90:91:
33:76:5a:87:27:be:d0:52:67:d9:bd:73:33:1e:40:
97:d5:b4:5f:5e:0a:f3:4d:23:07:66:75:a7:6c:ae:
7e:67:67:6f:03:cb:97:27:42:ae:8c:8e:8c:9b:91:
4b:7e:78:55:89:b4:85:99:cc:c7:4f:77:cc:39:ca:
6c:b7:8a:73:a8:10:eb:27:40:20:71:23:f9:40:00:
88:50:ae:44:a2:5f:3c:36:61:c0:28:cc:a1:d9:e7:
0f:c8:3b:31:6a:6d:17:d4:f4:83:dc:90:f6:67:29:
e4:76:8c:60:45:9e:05:94:9c:e4:57:ce:e7:ac:33:
2b:66:5a:8f:cb:13:11:e1:fe:79:66:84:8e:da:a7:
05:d8:b1:4a:ba:62:38:1f:6e:38:92:a9:82:4a:7f:
29:26:af:56:0b:08:f2:84:df:b5:6f:03:27:0d:b0:
e8:ed:e1:aa:cf:57:58:f4:e2:f3:bb:bb:85:23:47:
b9:9e:43:26:1e:4c:13:48:09:db:a9:38:51:16:2a:
1e:cd:3e:24:e6:35:b7:c4:87:7e:1f:f7:85:99:5b:
48:fd:cd:8b:08:57:fd:cf:0a:be:01:f4:29:f9:85:
59:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:14:73:EE:CA:A0:CF:0E:17:A6:DF:BE:0A:8A:44:BB:10:96:7D:63
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/7BRz7sqgzw4Xpt--CopEuxCWfWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.70.0/24
Signature Algorithm: sha256WithRSAEncryption
01:5b:81:05:b4:88:e9:6c:4a:96:17:d9:25:69:e5:c8:6f:79:
74:d8:9f:8f:f8:0d:78:c1:bd:b7:50:af:c4:ac:11:07:f3:0f:
3e:8a:a7:8c:41:12:85:17:31:71:0e:aa:6e:1a:4b:c2:9e:ca:
d1:f7:d1:6f:41:db:dd:f6:b0:1d:06:21:bf:3d:c4:da:4e:27:
85:c6:2f:ec:90:4c:49:13:c6:2d:14:f6:be:cf:4d:11:ba:69:
9b:57:6a:f6:ac:41:a8:02:4e:3e:d1:53:a5:eb:31:e5:db:4b:
33:49:f9:2a:2a:9b:cc:68:10:3c:cd:f7:28:40:70:68:a4:86:
3a:99:df:cb:0e:c5:b7:dd:19:78:9c:c5:c5:5d:f2:23:70:1c:
b7:4c:08:5c:68:35:46:a4:ab:82:a7:72:3e:78:c1:fc:14:52:
88:d2:94:b8:9d:9f:de:d6:bd:2f:d5:a4:bd:40:8a:20:af:d8:
3c:9c:a3:69:e4:79:b1:f7:bc:27:6d:ce:d4:ce:24:77:d8:c4:
54:cb:03:35:c0:4b:95:fe:38:a9:6a:d4:32:80:28:f0:08:b0:
f3:87:c0:7a:d7:cd:dd:ac:21:05:6b:d2:ae:b7:a9:d8:7b:33:
ed:87:83:1a:02:c0:b2:df:34:11:7b:2e:55:06:06:00:5b:1b:
e2:7a:a3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:45:54 2025 by rpki-client