Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/f7PbKdzww9eFqmnrI3piPy2autI.roa
File: f7PbKdzww9eFqmnrI3piPy2autI.roa (raw, json)
Hash identifier: cqid/Jh0JmuzLCy6Bmi9fDCE0NHp5jdaUsxa+HYnuO0=
Subject key identifier: 7F:B3:DB:29:DC:F0:C3:D7:85:AA:69:EB:23:7A:62:3F:2D:9A:BA:D2
Certificate issuer: /CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
Certificate serial: 0197F4C5D2B2CB3B7C26625E4570E596BAB6
Authority key identifier: 9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/f7PbKdzww9eFqmnrI3piPy2autI.roa
Signing time: Thu 10 Jul 2025 14:38:14 +0000
ROA not before: Thu 10 Jul 2025 14:38:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 5.182.201.0/24 maxlen: 24
2a0f:5b02::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f4:c5:d2:b2:cb:3b:7c:26:62:5e:45:70:e5:96:ba:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
Validity
Not Before: Jul 10 14:38:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fb3db29dcf0c3d785aa69eb237a623f2d9abad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:10:dd:80:64:9e:dd:1f:1e:11:64:92:ba:a6:
00:2d:9c:50:7f:8c:6c:db:ab:86:b4:c7:26:33:b2:
04:d3:f9:53:fb:72:ed:64:95:6d:cd:24:fd:a8:59:
9d:97:b1:6a:ae:fb:90:83:31:a3:ae:d2:ae:83:8c:
4b:2a:5c:36:a6:8d:f0:8f:30:73:b3:23:fc:aa:51:
47:d1:f7:3f:c6:49:e1:c9:ba:63:3d:1f:f6:67:bf:
7d:65:11:9c:4c:31:81:9f:15:e4:ce:54:87:22:c9:
e8:da:b2:73:15:5c:8f:5f:14:49:02:e1:a6:39:22:
04:8a:d2:42:8c:46:77:49:a6:fc:52:8f:7a:04:86:
73:a3:08:54:b8:53:59:87:b2:62:82:58:e3:29:fd:
e4:f3:73:12:3b:80:77:1d:7a:81:13:aa:93:dc:4c:
88:c5:0e:37:83:29:77:a3:5b:7d:32:ac:95:f0:3f:
de:a2:af:17:c1:9f:9a:58:0f:90:1a:c8:c0:be:ee:
0d:e7:68:0d:31:96:bd:d8:aa:e9:85:a3:46:7b:60:
5e:e0:dc:35:9f:f3:85:0d:5a:4d:2e:4b:06:82:39:
05:b7:5b:a4:43:ba:2a:c7:ff:9f:28:c0:c8:44:d5:
b1:ab:dd:13:71:ad:be:a0:ad:23:b3:6b:63:3e:db:
6d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B3:DB:29:DC:F0:C3:D7:85:AA:69:EB:23:7A:62:3F:2D:9A:BA:D2
X509v3 Authority Key Identifier:
keyid:9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/f7PbKdzww9eFqmnrI3piPy2autI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.201.0/24
IPv6:
2a0f:5b02::/32
Signature Algorithm: sha256WithRSAEncryption
4b:64:b7:78:1c:7f:17:af:81:31:22:c3:36:7d:aa:5f:88:28:
48:9b:e5:3b:08:21:95:d2:98:7a:5b:03:54:98:7b:14:b4:51:
f1:42:b8:eb:45:16:9d:67:cf:b2:1e:be:2f:52:56:d1:1d:a2:
a6:43:c8:e2:da:6b:1a:ae:df:8a:38:a0:b4:08:44:8c:33:52:
69:a3:2f:23:7a:dc:a5:c1:89:57:96:b2:a3:73:54:72:96:f5:
36:eb:4c:c5:29:a5:29:c0:17:7e:f8:86:fa:af:53:7a:31:c3:
47:f7:b3:a8:ee:70:ad:a1:13:77:82:7d:7d:13:2e:1e:3d:f8:
bd:91:dc:34:97:8b:b4:7b:37:e0:f5:bf:46:a5:f6:fc:54:83:
35:5d:ee:85:c2:50:53:f7:22:21:47:90:98:a0:d3:da:81:b1:
73:88:bb:06:ef:05:c6:4d:82:17:ec:21:ef:17:cc:b3:13:bd:
fb:8d:53:65:d9:28:91:fd:6c:d2:93:82:ba:b5:72:c4:ee:3e:
a0:02:da:fa:3f:06:0f:3a:9f:68:c3:62:aa:2c:cf:34:68:c4:
c6:39:81:6f:e0:f3:f0:10:0f:d3:20:27:b9:82:64:63:da:d8:
92:e7:a6:20:dc:be:8c:01:a8:07:4c:54:a8:28:3d:c5:95:24:
75:61:3a:be
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZf0xdKyyzt8JmJeRXDllrq2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYTkwZDY2ZDJkZGViNjQ2YTYxNDA2OTEyZmZkZGZhMTRl
Mzk5MTAwHhcNMjUwNzEwMTQzODE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmIzZGIyOWRjZjBjM2Q3ODVhYTY5ZWIyMzdhNjIzZjJkOWFiYWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhDdgGSe3R8eEWSSuqYALZxQf4xs
26uGtMcmM7IE0/lT+3LtZJVtzST9qFmdl7FqrvuQgzGjrtKug4xLKlw2po3wjzBz
syP8qlFH0fc/xknhybpjPR/2Z799ZRGcTDGBnxXkzlSHIsno2rJzFVyPXxRJAuGm
OSIEitJCjEZ3Sab8Uo96BIZzowhUuFNZh7JigljjKf3k83MSO4B3HXqBE6qT3EyI
xQ43gyl3o1t9MqyV8D/eoq8XwZ+aWA+QGsjAvu4N52gNMZa92KrphaNGe2Be4Nw1
n/OFDVpNLksGgjkFt1ukQ7oqx/+fKMDIRNWxq90Tca2+oK0js2tjPtttMwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFH+z2ync8MPXhapp6yN6Yj8tmrrSMB8GA1UdIwQY
MBaAFJupDWbS3etkamFAaRL/3foU45kQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTZrTlp0TGQ2MlJxWVVCcEV2X2QtaFRqbVJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xYjc2MzUtZTZmZi00OTY5LWIyYzAt
ODlmYjhmZTY5NjMzLzEvZjdQYktkend3OWVGcW1uckkzcGlQeTJhdXRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xYjc2MzUtZTZmZi00OTY5LWIyYzAtODlmYjhmZTY5NjMz
LzEvbTZrTlp0TGQ2MlJxWVVCcEV2X2QtaFRqbVJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQABbbJMA0E
AgACMAcDBQAqD1sCMA0GCSqGSIb3DQEBCwUAA4IBAQBLZLd4HH8Xr4ExIsM2fapf
iChIm+U7CCGV0ph6WwNUmHsUtFHxQrjrRRadZ8+yHr4vUlbRHaKmQ8ji2msart+K
OKC0CESMM1Jpoy8jetylwYlXlrKjc1RylvU260zFKaUpwBd++Ib6r1N6McNH97Oo
7nCtoRN3gn19Ey4ePfi9kdw0l4u0ezfg9b9Gpfb8VIM1Xe6FwlBT9yIhR5CYoNPa
gbFziLsG7wXGTYIX7CHvF8yzE737jVNl2SiR/WzSk4K6tXLE7j6gAtr6PwYPOp9o
w2KqLM80aMTGOYFv4PPwEA/TICe5gmRj2tiS56Yg3L6MAagHTFSoKD3FlSR1YTq+
-----END CERTIFICATE-----
Generated at Mon Jul 21 13:06:19 2025 by rpki-client