Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/brk2eWKkbDOeEGphbM_FR9qqM9A.roa
File: brk2eWKkbDOeEGphbM_FR9qqM9A.roa (raw, json)
Hash identifier: yHMenONPVTRm7WPjBi5HPXl1TTgaMoeCdfTRvLQgfGk=
Subject key identifier: 6E:B9:36:79:62:A4:6C:33:9E:10:6A:61:6C:CF:C5:47:DA:AA:33:D0
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 019884077B9F86B444D24DE521D8CDC1D107
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/brk2eWKkbDOeEGphbM_FR9qqM9A.roa
Signing time: Thu 07 Aug 2025 10:15:39 +0000
ROA not before: Thu 07 Aug 2025 10:15:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201814
IP address blocks: 109.205.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:07:7b:9f:86:b4:44:d2:4d:e5:21:d8:cd:c1:d1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Aug 7 10:15:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6eb9367962a46c339e106a616ccfc547daaa33d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c4:97:29:05:ad:1e:bd:4a:9b:51:98:e4:37:
f5:0a:26:ca:0d:57:26:70:9f:dd:5e:d6:d4:79:ef:
c1:9a:4a:df:bb:33:ea:e1:bd:2b:dd:31:af:ed:f0:
4d:43:69:76:7c:88:7b:ee:43:8a:ab:6c:44:fd:08:
f1:3c:62:93:9f:4d:ec:7c:c7:ce:21:56:66:ef:9d:
1a:a1:36:6c:72:1d:3c:d9:a7:8a:b3:07:bf:7e:3c:
3d:e8:95:9f:73:5d:d0:3a:8a:4e:5d:b4:61:26:97:
6b:a1:48:d2:d4:cf:3c:1d:0f:a4:91:b7:74:b4:dd:
6e:ac:bb:7e:c4:48:c9:dd:c8:50:c4:1a:25:0e:bc:
e1:82:4b:ea:63:d7:cc:1f:50:bc:eb:49:45:a3:7f:
9f:0d:f7:20:27:a7:a3:1b:df:68:d4:31:db:06:f0:
e9:d2:a3:7e:c6:df:a4:32:7b:1a:79:9d:12:37:2f:
09:25:75:8d:c6:11:82:42:50:d5:9f:f5:80:c0:dd:
d9:30:a3:0a:97:75:b9:85:89:d9:f6:3f:b9:e5:12:
c6:8b:0b:23:6f:b6:75:2d:1e:58:db:8d:ad:dc:4e:
18:16:df:95:a2:40:26:21:cf:3b:92:98:fd:c3:a1:
db:9e:c4:9a:e5:79:8b:b3:1d:76:44:53:d8:6b:e9:
e2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B9:36:79:62:A4:6C:33:9E:10:6A:61:6C:CF:C5:47:DA:AA:33:D0
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/brk2eWKkbDOeEGphbM_FR9qqM9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.211.0/24
Signature Algorithm: sha256WithRSAEncryption
82:43:b0:03:1b:e4:6f:08:8e:32:bb:f6:1a:2b:53:b6:75:37:
0b:ea:fa:7d:44:bf:fc:f2:f2:be:57:fd:4d:d3:41:4f:9c:92:
ee:95:c7:ce:ff:f3:4a:97:1a:c3:3f:b5:ba:db:01:e0:f6:bc:
e4:fd:a4:10:c0:c9:87:82:32:5a:23:f3:9c:aa:65:b5:1b:e4:
66:12:03:71:bc:4e:ef:ee:e7:5e:21:5d:3d:79:d0:f5:78:02:
2b:b0:0a:c2:ae:9a:db:06:45:11:83:56:5a:3e:22:55:89:a3:
ac:26:7a:67:25:46:0c:a8:3b:7d:da:12:47:88:e6:ba:7c:9b:
d5:5f:f1:f9:5a:b6:fb:29:ff:05:e7:9a:3c:34:1c:4b:98:d5:
ff:4b:49:d3:69:ab:63:ff:67:0a:68:dd:55:15:bf:a0:1b:9c:
3a:b2:d1:96:c4:61:ae:42:6e:f4:6f:11:88:68:a6:55:40:4e:
c5:56:74:60:d7:63:ed:e8:f3:c7:af:e9:a8:69:6d:ec:c0:58:
ce:b3:92:70:22:a6:d2:0f:08:f3:f0:c5:49:01:0d:1e:98:6b:
5e:61:9b:5a:f2:04:04:e5:65:44:22:2c:c8:6b:e0:88:cb:65:
74:c9:ed:5e:9e:35:5b:78:e2:b8:b2:1e:51:38:3c:78:4c:5d:
ca:68:c0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:17:33 2025 by rpki-client