Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/B7-nq7_cc4f7Zt868VHWF4evtl4.roa
File: B7-nq7_cc4f7Zt868VHWF4evtl4.roa (raw, json)
Hash identifier: 8XyukQXz+vjZuY6nqgv3ycX242CL7BTZXHzKPn1lLzs=
Subject key identifier: 07:BF:A7:AB:BF:DC:73:87:FB:66:DF:3A:F1:51:D6:17:87:AF:B6:5E
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 0198AA075833CA70A8A6D55D71BE99B02955
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/B7-nq7_cc4f7Zt868VHWF4evtl4.roa
Signing time: Thu 14 Aug 2025 19:21:04 +0000
ROA not before: Thu 14 Aug 2025 19:21:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401838
IP address blocks: 14.102.8.0/24 maxlen: 24
91.200.255.0/24 maxlen: 24
110.172.188.0/24 maxlen: 24
114.69.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:aa:07:58:33:ca:70:a8:a6:d5:5d:71:be:99:b0:29:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: Aug 14 19:21:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07bfa7abbfdc7387fb66df3af151d61787afb65e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6f:c6:74:5a:ee:48:b7:bc:63:ce:0e:d6:d2:
52:a2:ae:bf:b3:1d:3d:0d:ab:02:89:8f:d9:1d:ae:
94:93:95:05:ba:59:c2:48:0d:c5:4c:f4:5c:76:b3:
12:0d:6d:34:bb:e6:ba:a3:01:64:1d:2d:d1:a7:32:
ef:69:26:f3:3b:60:ec:26:a9:3b:37:a4:59:8b:ee:
78:31:6c:0b:fd:13:35:fe:0a:24:e0:57:a9:de:23:
c5:e9:3f:25:6b:eb:fd:bb:a8:6b:47:d6:af:27:22:
bd:1a:ef:0f:fe:b9:f2:e6:ac:e5:41:03:88:ad:28:
92:cc:a4:c0:6c:57:32:57:12:ff:92:d6:f5:43:f5:
b4:42:3a:51:e2:83:51:fc:a6:f1:f3:40:37:7d:da:
b3:11:3f:a4:02:73:f0:f3:58:83:b9:11:59:02:9e:
6d:49:0d:27:cf:7c:11:6f:5b:62:6a:6d:0e:8a:df:
66:e1:ad:f9:b4:67:69:f3:ad:e0:22:9d:cd:92:d4:
9a:50:2a:77:8c:5a:08:db:d9:2f:ae:59:96:55:09:
9a:b5:0b:21:38:e0:8c:e7:bf:46:03:29:f7:4c:37:
d0:4c:ae:12:09:f3:91:41:74:df:3f:43:18:4b:c7:
ea:34:36:3d:50:68:52:8e:68:df:42:7e:44:ec:07:
0c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:BF:A7:AB:BF:DC:73:87:FB:66:DF:3A:F1:51:D6:17:87:AF:B6:5E
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/B7-nq7_cc4f7Zt868VHWF4evtl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.8.0/24
91.200.255.0/24
110.172.188.0/24
114.69.246.0/24
Signature Algorithm: sha256WithRSAEncryption
57:ed:68:86:15:19:ab:86:8c:e9:4c:52:ed:61:e1:a0:25:cf:
d8:94:92:12:c9:fd:67:50:38:d0:fc:a4:35:f6:ad:87:e2:0d:
10:fd:f0:67:fa:41:c6:43:b9:c0:21:60:00:01:be:f3:9e:2d:
9f:ef:20:5e:ea:35:1d:f7:d5:d9:6e:6a:17:11:a7:ef:84:f7:
21:28:a1:8f:5b:b0:2d:cb:aa:df:5c:63:64:9f:1c:7f:f0:b1:
25:77:e2:77:8d:5a:05:5b:46:84:04:47:c8:b8:07:cc:f8:9d:
aa:3c:62:c4:fc:79:fd:de:45:8c:d4:a2:a0:f8:c2:f9:07:27:
7c:e9:6c:7f:80:1e:ab:d0:92:c5:d3:d6:6e:a4:87:7e:fa:47:
66:cd:90:59:27:63:9b:59:54:61:4e:15:94:45:e4:71:5f:09:
bc:51:7a:ba:78:aa:81:0c:27:85:22:40:b8:c2:5f:a0:d3:c0:
ca:af:71:d2:db:3f:06:59:1d:7f:02:5f:94:e6:98:61:f3:a9:
48:d7:b8:ef:75:fb:da:c8:8c:d3:f7:30:11:0d:5e:c1:cd:2c:
b3:24:2d:59:e8:a8:41:c0:7d:55:f0:ed:63:b6:1e:48:31:b3:
ab:54:77:8a:bd:3c:ee:52:3c:c9:6a:5c:85:47:af:44:33:71:
1d:72:f7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:24:33 2025 by rpki-client