Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/7hWCsPelXMQmpESwr4GWvxzkq98.roa
File: 7hWCsPelXMQmpESwr4GWvxzkq98.roa (raw, json)
Hash identifier: oD7zlhvzmlTWXnuOdQmMdbtoa//UwgMcOCLQqr4S1S8=
Subject key identifier: EE:15:82:B0:F7:A5:5C:C4:26:A4:44:B0:AF:81:96:BF:1C:E4:AB:DF
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 0199F13272479CC62AD8B5BAA370491B429B
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/7hWCsPelXMQmpESwr4GWvxzkq98.roa
Signing time: Fri 17 Oct 2025 08:03:59 +0000
ROA not before: Fri 17 Oct 2025 08:03:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25198
IP address blocks: 93.88.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f1:32:72:47:9c:c6:2a:d8:b5:ba:a3:70:49:1b:42:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Oct 17 08:03:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee1582b0f7a55cc426a444b0af8196bf1ce4abdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:90:46:58:75:4b:71:75:75:c2:86:6a:9c:31:
b0:d6:29:b1:60:6a:60:7e:ee:40:b6:90:f0:90:50:
80:bd:7e:36:d4:49:9e:d6:2e:5e:fa:11:37:94:ba:
35:7a:6f:2b:61:38:6d:dc:00:af:e7:6b:44:ed:de:
c6:c7:8f:fc:ad:f1:4b:48:f9:6b:69:68:2b:4b:cf:
d2:26:b8:9e:1f:33:4b:3b:46:a7:d0:bd:3d:8e:f2:
45:db:2b:9a:d2:14:54:f9:56:6d:5e:10:7b:d7:01:
18:79:8b:d8:6c:84:79:3f:dc:87:31:cf:e1:b7:c6:
17:6e:34:81:2a:57:6f:71:51:0a:e6:59:7a:68:26:
b2:5d:01:55:08:0f:40:38:db:3a:59:df:c1:7c:b7:
08:37:6b:c8:74:86:3f:68:1e:e9:b6:e0:4b:55:01:
7d:d3:86:92:21:5a:83:eb:8a:6d:4d:8b:4d:90:15:
4f:c6:69:8b:3f:bd:19:06:8f:47:4f:3f:94:8f:5d:
68:f9:2e:f4:b0:d3:41:bb:0f:aa:f0:06:ed:cd:48:
7e:e1:3d:ea:49:ed:10:8e:36:fe:24:a7:08:2c:10:
17:b7:90:0e:3a:ff:ef:48:52:80:d7:b2:8a:21:cd:
69:d0:b5:30:2e:f0:6c:c6:62:82:58:0b:5d:00:40:
56:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:15:82:B0:F7:A5:5C:C4:26:A4:44:B0:AF:81:96:BF:1C:E4:AB:DF
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/7hWCsPelXMQmpESwr4GWvxzkq98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.158.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:01:04:a3:fc:df:b4:9f:8b:25:84:12:64:f1:b6:a1:51:40:
eb:10:f5:99:2b:a7:e9:12:74:e4:a5:24:b6:27:cd:6d:b5:fa:
f9:ba:3f:18:91:62:be:26:a4:6d:14:40:98:aa:eb:0a:e9:31:
2b:86:29:32:4e:1c:32:63:fb:bb:72:4e:aa:23:f7:84:44:ac:
dd:5b:f5:7f:92:06:57:e1:99:d5:19:29:b5:b8:6d:24:a7:17:
cc:3e:03:62:0d:fb:83:da:5a:d7:17:20:33:be:3d:44:ae:55:
15:40:fb:95:5c:44:44:50:8c:df:90:67:72:e3:b2:ad:13:5b:
ce:77:d4:75:09:1b:5d:27:b8:e2:82:a4:b9:dc:18:ea:29:38:
5b:ec:b4:b8:56:68:6d:32:a6:e5:34:25:58:35:7e:e1:37:19:
69:82:36:ff:6d:12:ec:b4:50:4c:20:ef:d0:15:05:49:52:c8:
c8:ef:d0:72:db:36:10:8b:8b:80:cf:6a:5d:82:ce:58:5a:ab:
76:c3:f9:b8:ae:fa:3a:74:eb:8a:fe:7d:34:04:df:bc:e2:98:
f5:63:cc:6f:ca:3d:88:41:1c:8f:5c:bc:ba:18:67:e3:8d:ca:
33:44:e6:94:3c:72:85:7d:43:5c:25:ae:c0:19:32:d1:1c:fb:
90:3f:5e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:47:21 2025 by rpki-client