Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/7o9ALcr1bL4UOBX6YJn0uD-9tF0.roa
File: 7o9ALcr1bL4UOBX6YJn0uD-9tF0.roa (raw, json)
Hash identifier: wGcA/CUa2AHlBIQ9Ur+ssm2xCQswNtocmJ6VYpXekNw=
Subject key identifier: EE:8F:40:2D:CA:F5:6C:BE:14:38:15:FA:60:99:F4:B8:3F:BD:B4:5D
Certificate issuer: /CN=8303792890ada2ba387e39b314b77035d5fb315b
Certificate serial: 019782A3BBCAE181B552B0CD8213793C7375
Authority key identifier: 83:03:79:28:90:AD:A2:BA:38:7E:39:B3:14:B7:70:35:D5:FB:31:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwN5KJCtoro4fjmzFLdwNdX7MVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/7o9ALcr1bL4UOBX6YJn0uD-9tF0.roa
Signing time: Wed 18 Jun 2025 10:44:17 +0000
ROA not before: Wed 18 Jun 2025 10:44:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50496
IP address blocks: 195.191.100.0/23 maxlen: 23
195.191.100.0/24 maxlen: 24
195.191.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwN5KJCtoro4fjmzFLdwNdX7MVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:a3:bb:ca:e1:81:b5:52:b0:cd:82:13:79:3c:73:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8303792890ada2ba387e39b314b77035d5fb315b
Validity
Not Before: Jun 18 10:44:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee8f402dcaf56cbe143815fa6099f4b83fbdb45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ce:28:b0:b2:ac:8d:cf:88:0d:4d:f2:a2:21:
5b:3f:f0:a5:35:69:0d:5a:7b:72:47:b8:ab:fc:69:
d2:dc:72:08:99:b6:c7:af:18:c9:d8:87:98:c7:d0:
b2:ab:75:2d:45:98:5f:75:2b:44:3b:8a:49:24:bb:
26:25:ca:06:17:71:13:68:4d:d4:d1:0f:d9:f5:7c:
9a:32:40:ce:eb:e9:aa:38:3a:af:2c:45:81:54:19:
b4:9e:0e:2e:d1:3e:97:8d:73:cc:0a:3a:b9:32:34:
ee:4d:2b:4d:d7:66:f4:2b:ad:41:04:9c:df:71:98:
56:28:08:bb:07:fa:ba:25:59:e3:1c:db:fa:a1:cd:
ce:1a:31:3b:29:e8:7d:61:e7:c4:c1:bb:3f:f3:b0:
e1:3a:a4:6d:6d:1e:13:c9:05:85:a2:20:38:66:8f:
d6:15:af:2a:f7:06:10:c1:a7:2d:d1:e2:06:4d:b1:
a0:6c:83:cc:2c:fc:a5:f9:db:72:5b:4c:a9:83:25:
5a:7c:5b:ff:51:2b:be:26:7e:a0:60:cc:3b:a8:97:
25:b4:70:e5:0a:36:b8:a5:7b:fa:81:d8:b0:5d:d8:
07:d4:98:ff:5b:fd:3a:53:d3:5a:9f:88:69:c9:f0:
3d:16:1e:a2:88:3c:24:0e:b4:35:ba:c5:6a:6e:9b:
9a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8F:40:2D:CA:F5:6C:BE:14:38:15:FA:60:99:F4:B8:3F:BD:B4:5D
X509v3 Authority Key Identifier:
keyid:83:03:79:28:90:AD:A2:BA:38:7E:39:B3:14:B7:70:35:D5:FB:31:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwN5KJCtoro4fjmzFLdwNdX7MVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/7o9ALcr1bL4UOBX6YJn0uD-9tF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/319cdc-b5bc-413a-bee7-7e847a34141a/1/gwN5KJCtoro4fjmzFLdwNdX7MVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.100.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:b2:47:c0:07:d3:0f:f8:ba:41:c6:c7:41:8d:d3:41:a0:db:
43:c5:4e:00:23:86:9d:f2:37:db:87:9d:26:8c:65:70:19:c7:
a2:40:4b:95:cc:b6:26:d1:6c:2f:76:cb:3d:f2:30:cf:ed:b2:
00:26:cc:a1:76:4e:8a:65:8c:e6:65:77:05:ab:8a:c7:58:68:
76:fd:60:be:47:ff:a1:b8:0b:5a:23:ee:50:43:63:48:eb:ac:
a0:e6:b2:73:f4:be:7e:a7:84:79:51:b1:ca:85:1f:da:b4:de:
72:0f:94:3c:14:5a:81:c7:46:ab:25:cd:9f:9a:35:a9:e6:0e:
4b:ef:24:cb:be:3a:36:dc:0b:20:72:67:2b:9a:b3:a3:b6:32:
fc:c1:2a:21:02:c2:4c:6b:e9:01:19:ed:cd:ea:1d:3b:d5:f8:
5c:c1:42:9a:80:31:c0:a0:07:8f:15:7a:d4:93:d9:a5:ea:9d:
38:8c:a5:17:1a:b9:3d:4e:c9:56:4e:fb:d9:00:6d:ca:fe:5b:
e9:1b:9a:3e:d4:2f:22:04:e0:16:7c:a8:32:aa:7d:3a:16:36:
05:5d:c9:f2:56:6d:b8:73:b1:f8:b9:9a:3d:0f:20:6f:fa:ed:
58:be:7c:cc:61:a3:ae:e6:9b:37:e3:ea:c7:ba:fd:cf:d5:79:
74:0e:a8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 21:06:02 2025 by rpki-client