Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/7dayy-ue9GUJpzyclEIimtif3_w.roa
File: 7dayy-ue9GUJpzyclEIimtif3_w.roa (raw, json)
Hash identifier: 4JgYJRahEh68+u63kEGGgHtYOlGh91xC0Hb+kdcP4aU=
Subject key identifier: ED:D6:B2:CB:EB:9E:F4:65:09:A7:3C:9C:94:42:22:9A:D8:9F:DF:FC
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 0198D0F884103CD6BAA8C615462A0B2BD75C
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/7dayy-ue9GUJpzyclEIimtif3_w.roa
Signing time: Fri 22 Aug 2025 08:50:04 +0000
ROA not before: Fri 22 Aug 2025 08:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2856
IP address blocks: 84.55.17.0/24 maxlen: 24
84.55.22.0/24 maxlen: 24
95.173.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d0:f8:84:10:3c:d6:ba:a8:c6:15:46:2a:0b:2b:d7:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Aug 22 08:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edd6b2cbeb9ef46509a73c9c9442229ad89fdffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:71:c6:36:ca:73:86:48:0d:6b:43:10:6d:4a:
4f:07:9e:0f:49:6e:f6:5a:6b:1f:8b:50:a8:cc:f9:
09:7f:c2:06:31:fb:6e:99:bc:c5:6c:27:75:c3:5d:
1a:2c:16:a3:ad:59:2d:2a:15:e4:57:d2:53:02:fc:
2a:5b:76:03:f9:5a:6f:16:9b:9c:1d:70:b6:df:5d:
b8:b0:a6:29:33:ad:b2:7a:53:20:fe:1e:b8:a6:c3:
e0:37:89:35:67:b7:0b:07:10:60:7f:1c:52:8b:6e:
b4:6f:26:cb:c8:75:21:40:3d:91:76:95:4e:c9:5e:
6e:94:c4:81:a4:3a:3a:b0:fa:44:05:ee:20:f2:28:
65:ea:88:18:fb:00:df:3a:45:dd:5a:23:0f:8f:70:
d8:4c:ea:3c:39:ae:11:f4:11:41:a9:af:30:5c:00:
dd:8c:7c:f6:bd:b6:b2:73:36:da:e5:c5:fd:2f:56:
f5:ce:aa:0f:37:ad:59:c5:10:4d:8a:29:e9:4f:41:
08:58:5d:3e:df:a6:30:c6:69:f9:4a:be:24:aa:54:
30:b6:08:90:3f:b8:a2:ab:d4:25:b5:c0:60:9d:53:
82:54:07:ff:e1:83:6f:7d:d8:74:92:dd:28:82:ab:
ca:b4:05:1e:b6:61:a3:80:87:2e:88:04:57:d4:59:
d7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D6:B2:CB:EB:9E:F4:65:09:A7:3C:9C:94:42:22:9A:D8:9F:DF:FC
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/7dayy-ue9GUJpzyclEIimtif3_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.17.0/24
84.55.22.0/24
95.173.59.0/24
Signature Algorithm: sha256WithRSAEncryption
92:71:26:0c:e1:d7:d7:d3:60:25:08:53:57:d2:81:8f:be:5f:
bf:70:f6:fa:a0:13:ce:20:21:0b:f9:94:d7:5e:4f:38:58:7f:
c5:1b:5a:a1:ca:94:ed:a1:9a:92:e7:fc:fc:7d:c4:65:99:38:
cd:cd:b7:34:9c:e9:66:88:1e:84:c3:01:04:9d:c1:56:ee:8d:
44:9f:8c:92:24:29:96:3b:16:dd:ae:9f:e3:08:df:ac:f1:9d:
33:33:7a:e3:e9:53:df:4f:d0:d5:36:b6:ca:f2:b4:5a:f2:54:
ec:d1:ce:95:fe:c6:ed:13:8e:ae:19:02:da:46:c1:1c:0f:6d:
de:c7:15:ff:ca:7a:22:ae:53:ec:06:f3:ae:e8:64:dc:95:24:
bf:5a:70:03:bf:31:64:46:f6:d3:7a:f1:42:67:02:0b:2f:5d:
f0:32:ab:51:a4:5d:a5:f7:cd:a1:60:3b:78:47:a5:ec:88:7e:
34:25:2d:e7:82:f7:40:31:e6:b3:e4:46:dc:b2:5b:04:74:da:
16:99:42:16:7b:e1:21:72:50:2f:bb:34:34:f7:3c:6b:c3:8e:
37:3a:30:f6:88:ce:9d:7a:9d:a9:85:d0:fb:6e:82:c0:1b:fb:
4f:0d:53:39:d8:af:b7:32:c6:68:d4:dc:90:03:88:f2:b4:a9:
65:24:a7:1d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZjQ+IQQPNa6qMYVRioLK9dcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0
ZjgzYzQwHhcNMjUwODIyMDg1MDA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGQ2YjJjYmViOWVmNDY1MDlhNzNjOWM5NDQyMjI5YWQ4OWZkZmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHHGNspzhkgNa0MQbUpPB54PSW72
Wmsfi1CozPkJf8IGMftumbzFbCd1w10aLBajrVktKhXkV9JTAvwqW3YD+VpvFpuc
HXC23124sKYpM62yelMg/h64psPgN4k1Z7cLBxBgfxxSi260bybLyHUhQD2RdpVO
yV5ulMSBpDo6sPpEBe4g8ihl6ogY+wDfOkXdWiMPj3DYTOo8Oa4R9BFBqa8wXADd
jHz2vbayczba5cX9L1b1zqoPN61ZxRBNiinpT0EIWF0+36Ywxmn5Sr4kqlQwtgiQ
P7iiq9QltcBgnVOCVAf/4YNvfdh0kt0ogqvKtAUetmGjgIcuiARX1FnXIQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFO3WssvrnvRlCac8nJRCIprYn9/8MB8GA1UdIwQY
MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut
MWY4NzQ2OTQ1NDgzLzEvN2RheXktdWU5R1VKcHp5Y2xFSWltdGlmM193LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz
LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVDcRAwQA
VDcWAwQAX607MA0GCSqGSIb3DQEBCwUAA4IBAQCScSYM4dfX02AlCFNX0oGPvl+/
cPb6oBPOICEL+ZTXXk84WH/FG1qhypTtoZqS5/z8fcRlmTjNzbc0nOlmiB6EwwEE
ncFW7o1En4ySJCmWOxbdrp/jCN+s8Z0zM3rj6VPfT9DVNrbK8rRa8lTs0c6V/sbt
E46uGQLaRsEcD23exxX/ynoirlPsBvOu6GTclSS/WnADvzFkRvbTevFCZwILL13w
MqtRpF2l982hYDt4R6XsiH40JS3ngvdAMeaz5EbcslsEdNoWmUIWe+EhclAvuzQ0
9zxrw443OjD2iM6dep2phdD7boLAG/tPDVM52K+3MsZo1NyQA4jytKllJKcd
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:38:30 2025 by rpki-client