Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/7Vg026GilsAdwwmReGqAOt7uEBk.roa
File: 7Vg026GilsAdwwmReGqAOt7uEBk.roa (raw, json)
Hash identifier: o2eCEEPEnYtuReTatMEMg5W6/8oDYNB6JVy+I8yx6Gk=
Subject key identifier: ED:58:34:DB:A1:A2:96:C0:1D:C3:09:91:78:6A:80:3A:DE:EE:10:19
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0197A08FBA518F245801D1C591E2C551C1B0
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/7Vg026GilsAdwwmReGqAOt7uEBk.roa
Signing time: Tue 24 Jun 2025 06:11:03 +0000
ROA not before: Tue 24 Jun 2025 06:11:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20001
IP address blocks: 88.209.203.0/24 maxlen: 24
88.209.230.0/24 maxlen: 24
88.209.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 21:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a0:8f:ba:51:8f:24:58:01:d1:c5:91:e2:c5:51:c1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 24 06:11:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed5834dba1a296c01dc30991786a803adeee1019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:28:fb:e1:5e:30:a2:af:1c:6e:ab:f3:71:08:
df:37:3b:7e:69:38:52:56:bc:5b:e7:89:8d:1a:16:
c8:9d:08:c0:a5:e5:39:15:90:f0:04:a5:8f:8a:7b:
d9:47:c9:e4:77:be:b8:aa:b1:58:c0:b8:19:36:3a:
78:a1:29:4e:1e:dc:e2:7a:63:dc:36:1e:f3:c3:e2:
58:23:b8:6a:8e:b9:99:61:88:9f:17:e4:8c:6f:4d:
61:3f:2e:5a:c3:1b:3f:55:9c:92:20:e5:13:c2:d1:
e5:9b:b8:66:a2:15:6a:8c:a7:ab:98:1b:a5:6d:1a:
3b:6e:55:82:be:42:46:bd:29:c4:41:88:c2:38:2a:
94:ef:bd:ac:4f:a9:85:71:90:20:54:32:58:af:5c:
73:e1:60:4b:bb:ae:4e:c3:31:0d:56:8c:39:0c:58:
e6:be:6e:a9:93:37:a6:3f:22:57:6e:94:2a:a3:91:
47:b9:63:d4:0d:8d:67:fe:15:7d:28:6e:ac:42:15:
ff:93:2e:d4:9d:f0:42:38:bb:57:c6:85:04:1d:70:
94:bf:5b:6f:dc:58:c7:08:20:e0:98:f0:c9:46:2d:
8c:5d:7d:fc:54:b5:73:be:c6:4a:f8:c2:2b:b9:09:
f9:ea:93:3d:aa:6b:b8:31:f0:b4:a3:3b:4e:9c:25:
e1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:58:34:DB:A1:A2:96:C0:1D:C3:09:91:78:6A:80:3A:DE:EE:10:19
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/7Vg026GilsAdwwmReGqAOt7uEBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.209.203.0/24
88.209.230.0/24
88.209.255.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:7c:5c:f0:7a:f2:41:ba:6d:5f:1c:86:8d:4e:67:79:d1:88:
6b:50:f9:b4:73:3e:4c:3d:1a:25:f8:04:d5:b6:1c:a2:3e:b7:
98:3c:c2:56:d5:79:85:98:ff:75:7f:3a:7b:67:b9:89:f5:9e:
7c:87:5b:ab:6d:90:65:42:e4:a6:a5:77:b8:a3:e6:4d:fd:93:
c1:91:4f:69:b5:ea:bd:55:d0:06:77:d5:3e:9c:bf:85:33:bd:
bc:e9:0a:32:8e:19:a6:42:cd:21:48:9b:aa:ee:26:c2:91:ee:
51:06:f2:46:fa:c3:e1:a6:96:6a:76:8b:9e:c0:90:c1:fc:af:
b9:ad:99:4a:03:3e:1d:cc:da:c5:36:bd:3f:0f:f0:6b:9c:9c:
83:d2:16:51:a3:d0:e4:c0:3d:f0:f1:1c:37:c2:8b:a9:d0:d3:
0e:29:6c:84:15:17:ac:7f:e0:19:3a:d0:6b:6d:72:0c:b9:23:
0d:ee:06:18:de:a6:de:4c:76:02:b4:b2:e5:51:b6:41:69:92:
45:f8:bf:03:3a:30:e6:44:5f:3e:26:af:17:f8:2c:6a:b0:4c:
f4:5f:87:10:89:a4:70:37:b3:13:0c:ec:be:b5:b7:2f:4d:83:
14:48:a4:c1:fc:74:da:1d:e9:9b:88:58:2d:2d:71:00:8b:e9:
29:7f:5c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 06:10:23 2025 by rpki-client