Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/G1_7-l6SOhcMGwm4Q4QRU0G0dg4.roa
File: G1_7-l6SOhcMGwm4Q4QRU0G0dg4.roa (raw, json)
Hash identifier: QXiiZ3VfyX8LoKEFp1jr8ZJ1hSMXw8WJGVPoXN5t20w=
Subject key identifier: 1B:5F:FB:FA:5E:92:3A:17:0C:1B:09:B8:43:84:11:53:41:B4:76:0E
Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Certificate serial: 0198AAC1317C2ECEAD074EF158F6E813D79C
Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/G1_7-l6SOhcMGwm4Q4QRU0G0dg4.roa
Signing time: Thu 14 Aug 2025 22:44:04 +0000
ROA not before: Thu 14 Aug 2025 22:44:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 185.22.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:aa:c1:31:7c:2e:ce:ad:07:4e:f1:58:f6:e8:13:d7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Validity
Not Before: Aug 14 22:44:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b5ffbfa5e923a170c1b09b84384115341b4760e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e5:87:7b:bd:c8:23:40:f6:0c:e7:04:81:48:
04:3f:41:9c:5a:90:1c:4e:a8:e3:43:2a:87:ff:cc:
b9:e4:0a:5e:db:24:00:1b:b5:20:1e:fa:2e:53:d5:
4a:ae:75:5b:ed:97:ef:b8:88:98:d3:64:f6:04:10:
70:04:59:9e:e1:b5:06:c3:f6:7f:41:76:2f:bb:f0:
12:83:0c:65:bc:51:9d:95:4b:cd:d4:bd:61:d8:5e:
48:12:22:82:da:a5:82:13:c0:ae:19:70:58:f6:f9:
1c:8a:ab:d7:3a:9c:91:74:28:3e:cd:21:2b:03:8e:
93:22:7f:b4:8b:6d:31:ef:01:18:e3:5c:90:92:ef:
6a:39:56:c9:76:2d:37:e3:df:08:89:20:06:00:3e:
05:a3:20:2c:d7:91:cd:c4:b4:42:a1:96:6d:30:96:
8a:ac:f3:a1:d0:85:0c:80:62:ef:22:d1:0c:34:b5:
ba:96:ea:bf:86:61:fa:5b:f6:e8:64:aa:ff:6b:e8:
ba:82:2e:f5:d0:e1:e5:ee:06:43:0b:0d:23:c6:e7:
97:b4:d6:61:e0:ee:fc:8b:48:70:69:83:37:45:f9:
4f:ad:08:b1:5c:d2:f7:e7:76:f1:af:2f:37:35:4e:
dc:da:5f:22:f7:48:4a:fa:48:39:16:c1:52:32:b8:
30:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5F:FB:FA:5E:92:3A:17:0C:1B:09:B8:43:84:11:53:41:B4:76:0E
X509v3 Authority Key Identifier:
keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/G1_7-l6SOhcMGwm4Q4QRU0G0dg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.43.0/24
Signature Algorithm: sha256WithRSAEncryption
93:0a:0f:24:5b:6f:4b:58:17:bb:32:ba:e3:1d:ee:c7:5a:ae:
bb:96:5f:6f:ec:54:f0:54:08:5b:d9:99:50:97:3d:9d:8d:db:
47:e0:7e:f7:e6:a4:c0:73:48:2b:56:e9:7a:1c:0a:7c:2b:24:
d3:8e:8b:b4:14:f3:1f:8d:9c:09:60:be:de:2a:08:c3:e4:a7:
4b:b7:00:3e:f5:9c:bf:b1:05:11:e9:e9:30:2f:7a:2c:eb:a4:
88:20:67:19:5c:38:0c:4a:f9:cc:7c:89:32:23:b3:d0:97:50:
17:7e:7b:e0:05:12:4a:91:42:f6:b3:99:ee:6d:b5:c4:de:a3:
59:50:5e:67:e2:9f:7f:20:b4:85:71:bd:c0:e6:0c:83:d3:46:
90:d1:67:d9:b5:d2:13:18:5a:66:63:07:8e:b1:17:cc:86:fa:
c3:32:6c:9c:95:31:0b:2d:bc:eb:3f:5c:a3:59:21:0b:4d:68:
e3:de:2b:be:fc:b8:6e:fa:13:6c:64:83:04:1f:87:43:bc:b8:
a9:0c:32:a5:f4:ff:b5:9b:cb:fd:76:3b:be:b6:43:2e:91:ef:
5b:2d:a3:df:3e:bd:68:82:be:f7:93:28:22:ff:59:73:1f:58:
cc:16:4a:e8:26:07:62:4b:08:69:30:40:74:ec:c3:27:27:3a:
de:10:51:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:10:07 2025 by rpki-client