Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/P7_C7b_4vo53NGrxUS50oRlIj_Y.roa
File: P7_C7b_4vo53NGrxUS50oRlIj_Y.roa (raw, json)
Hash identifier: abguGFcEQVh0M2e/YYyGA2/5OuGN/4DBmADdcRtjoBw=
Subject key identifier: 3F:BF:C2:ED:BF:F8:BE:8E:77:34:6A:F1:51:2E:74:A1:19:48:8F:F6
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0199EE1C58B8BD95165AFB65F83B3EB67401
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/P7_C7b_4vo53NGrxUS50oRlIj_Y.roa
Signing time: Thu 16 Oct 2025 17:40:59 +0000
ROA not before: Thu 16 Oct 2025 17:40:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213905
IP address blocks: 193.23.209.0/24 maxlen: 24
193.23.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ee:1c:58:b8:bd:95:16:5a:fb:65:f8:3b:3e:b6:74:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 16 17:40:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fbfc2edbff8be8e77346af1512e74a119488ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:36:e3:74:21:30:0d:17:72:24:eb:92:ec:df:
3d:d0:f2:68:d4:cb:98:51:ce:b2:77:b1:66:85:79:
ab:be:52:35:80:4a:f1:2b:49:04:12:98:ee:c5:c8:
10:e5:13:24:02:3c:71:88:15:fc:b6:5d:ce:65:8c:
8a:7c:ef:6f:82:0d:d8:9c:c1:89:47:bb:4b:e2:ca:
77:20:5e:4f:d7:f6:20:4e:c7:9d:59:aa:bd:54:3a:
cd:5f:52:88:d7:1a:64:ab:bb:ec:e1:5a:70:34:19:
9a:a2:89:3b:62:d7:05:41:11:f1:96:89:8a:9f:7f:
14:14:47:02:f3:e9:a1:91:bd:ab:bf:68:74:7b:6b:
ed:72:18:89:bd:f1:c9:ec:8f:4a:97:e5:12:8a:17:
f9:0e:53:89:b7:47:27:32:35:c3:ce:da:9b:42:64:
4e:f8:62:f0:56:50:13:59:71:40:12:48:23:9f:9d:
f3:01:69:50:08:40:5c:ef:7a:79:8e:00:11:2c:81:
d0:20:c3:fc:49:ec:67:6d:1e:3b:9a:92:3c:7f:0b:
4b:c7:e9:8a:91:6e:73:99:cb:7d:fb:77:9c:fc:51:
14:cd:0d:5f:59:1e:82:c1:30:aa:fa:af:f8:3f:7f:
65:f9:36:77:2a:9b:bf:d9:c2:ad:3c:d0:b3:9d:8f:
ae:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BF:C2:ED:BF:F8:BE:8E:77:34:6A:F1:51:2E:74:A1:19:48:8F:F6
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/P7_C7b_4vo53NGrxUS50oRlIj_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.209.0/24
193.23.221.0/24
Signature Algorithm: sha256WithRSAEncryption
57:d2:c1:fe:a8:0c:34:26:5d:cf:64:39:20:82:31:a3:14:6b:
7a:4c:dd:de:11:e4:2c:99:3e:79:2c:2b:67:96:32:7b:2b:56:
a1:8c:9f:f4:dd:20:20:21:2f:ed:92:3d:26:1e:5c:5e:2b:b5:
6d:d8:c8:7d:2c:44:98:5f:6b:10:e5:54:2f:95:ba:a7:12:1f:
fb:8e:4e:d3:17:e5:35:07:87:df:d1:0f:f8:30:0e:ca:56:aa:
b6:69:1d:07:66:16:34:b3:fd:86:f7:00:6f:13:62:83:8b:5b:
4f:e2:79:33:b4:ba:a3:3f:57:af:5c:08:c4:c2:ea:25:18:8a:
fc:df:c2:f6:eb:67:b7:b5:80:28:b7:e5:75:57:d6:60:f7:1c:
9d:73:7b:b5:39:5c:47:4c:9c:95:98:5a:50:d9:a5:30:6a:ae:
71:c9:69:38:da:60:a9:8e:fe:a5:6a:8e:1b:c0:ec:8c:0c:59:
6c:ff:35:6e:c7:75:61:0b:c9:2f:26:c4:ae:07:79:be:92:6f:
83:2d:73:7f:22:76:02:89:ce:63:22:80:a2:b4:c3:73:9b:f8:
03:52:e2:7e:8c:6a:7c:7f:48:e0:30:0e:e6:00:f6:c8:5a:67:
a5:80:f3:1d:bd:d1:1e:00:a3:bf:0b:9f:bb:6f:19:75:83:d6:
56:74:f3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:47:47 2025 by rpki-client