Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/7W85Tt0gwzhkJWxBWSICyLMHvBg.roa
File: 7W85Tt0gwzhkJWxBWSICyLMHvBg.roa (raw, json)
Hash identifier: JppPMnJbiXzbpD/Pc6qWhNpXFo8/+nx6fCwzyRamuQY=
Subject key identifier: ED:6F:39:4E:DD:20:C3:38:64:25:6C:41:59:22:02:C8:B3:07:BC:18
Certificate issuer: /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial: 0199D19BB6A94638742A03FCB8C075063E5A
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/7W85Tt0gwzhkJWxBWSICyLMHvBg.roa
Signing time: Sat 11 Oct 2025 04:51:07 +0000
ROA not before: Sat 11 Oct 2025 04:51:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397630
IP address blocks: 194.50.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d1:9b:b6:a9:46:38:74:2a:03:fc:b8:c0:75:06:3e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
Validity
Not Before: Oct 11 04:51:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed6f394edd20c33864256c41592202c8b307bc18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e4:1d:a4:4c:f4:81:7a:47:d7:f2:38:39:b1:
c3:52:1d:b9:13:ce:a9:d6:31:c1:71:5a:7b:73:ff:
fc:74:90:a3:1a:79:1d:10:7d:7f:b9:f9:40:df:4f:
b2:bb:4a:3a:c8:92:52:f4:39:34:aa:9c:b6:f3:00:
bd:8f:42:ca:50:b3:3b:59:06:6f:53:89:c8:8f:37:
b7:85:55:0d:9a:44:57:e0:e4:19:59:b7:3c:44:dc:
46:2a:07:b4:20:03:80:dd:ef:25:b0:77:09:d7:ee:
a1:c2:7a:58:cb:7e:af:4e:44:0c:bf:e9:05:d9:22:
13:a4:d7:f1:22:1d:4b:5f:fa:c0:f4:7b:00:48:89:
7c:83:bc:65:97:50:02:aa:54:40:1c:a6:c3:83:ac:
7d:4a:e3:0e:ef:a6:4b:62:67:b7:e1:6d:59:a4:83:
e3:9e:fd:0f:8e:c4:9a:f5:d5:bd:cd:22:cd:42:27:
c4:07:a9:3b:bc:62:89:f5:a8:40:e2:07:bf:b9:01:
c2:c7:52:ff:80:8a:31:96:16:75:e5:71:26:d3:82:
ee:fc:49:9b:70:f5:96:3e:c4:6d:5b:9f:93:16:07:
6b:d1:c0:d3:99:4c:db:bb:4a:a7:77:7b:c8:a2:cd:
6d:8d:02:77:16:81:a3:13:bb:ac:8b:5b:10:2a:27:
53:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6F:39:4E:DD:20:C3:38:64:25:6C:41:59:22:02:C8:B3:07:BC:18
X509v3 Authority Key Identifier:
keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/7W85Tt0gwzhkJWxBWSICyLMHvBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.1.0/24
Signature Algorithm: sha256WithRSAEncryption
47:e4:6d:69:7a:8a:bd:e6:6a:f2:8b:4a:15:56:62:99:41:6f:
7e:e9:97:70:07:90:67:c5:6e:30:e5:54:3d:58:c8:90:7d:94:
2f:4c:a3:30:b7:8e:39:56:b7:25:97:3e:c4:bf:78:64:59:0a:
9c:3f:85:ea:76:b2:8e:a7:11:2e:39:c0:fc:46:18:a5:c3:74:
f4:48:f1:fb:6b:d7:ea:85:89:7e:1a:db:77:bf:29:6a:4e:fd:
f7:b5:e9:1e:6e:ee:ef:cf:49:47:6d:e3:96:a5:74:26:93:aa:
a1:34:e3:2f:fe:14:49:2c:96:9e:a4:cb:2e:0a:13:aa:55:27:
d6:64:12:1e:5d:fd:68:8f:cb:a7:18:37:10:4a:05:53:06:1b:
66:83:b9:ad:20:d9:dc:fd:9c:6a:80:3c:9b:8c:e9:0c:be:fb:
a2:05:ce:3e:4d:cf:55:3f:17:69:d7:6a:0b:e0:d9:b9:a3:19:
0a:3c:57:af:aa:c7:cf:46:28:37:28:be:b1:b2:81:4b:17:71:
cc:05:4e:40:d0:4b:45:65:37:78:c3:70:47:56:00:cb:17:d2:
07:49:a4:da:e9:fa:3a:0a:8a:1a:89:f6:2b:c7:80:25:4a:9e:
6c:dd:dd:ec:5c:66:7b:21:8d:54:a1:a5:5c:b3:8a:6f:97:aa:
84:7c:a3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:58:28 2025 by rpki-client