Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/i7s_rOXOS6kYX0sDFEqFGZad-XM.roa
File: i7s_rOXOS6kYX0sDFEqFGZad-XM.roa (raw, json)
Hash identifier: /n5dO1dlOLjxt3g9xlSAiuAp1pYED4+r3AwngO41LLE=
Subject key identifier: 8B:BB:3F:AC:E5:CE:4B:A9:18:5F:4B:03:14:4A:85:19:96:9D:F9:73
Certificate issuer: /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Certificate serial: 019805C7FAEA42462060219C85C6A57277B4
Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/i7s_rOXOS6kYX0sDFEqFGZad-XM.roa
Signing time: Sun 13 Jul 2025 21:54:08 +0000
ROA not before: Sun 13 Jul 2025 21:54:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136787
IP address blocks: 195.210.100.0/24 maxlen: 24
195.210.101.0/24 maxlen: 24
195.210.102.0/24 maxlen: 24
195.210.103.0/24 maxlen: 24
195.210.116.0/24 maxlen: 24
195.210.117.0/24 maxlen: 24
195.210.118.0/24 maxlen: 24
195.210.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 14:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:05:c7:fa:ea:42:46:20:60:21:9c:85:c6:a5:72:77:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Validity
Not Before: Jul 13 21:54:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8bbb3face5ce4ba9185f4b03144a8519969df973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ee:3d:4c:71:ce:c3:d7:ca:3c:23:0c:7e:4a:
04:3c:66:e0:40:16:fc:7c:0c:63:d9:da:60:06:44:
54:91:54:79:f4:ae:64:6f:9c:c5:95:d2:e2:45:15:
0a:b4:82:b2:3e:85:c0:ae:f6:6f:6c:49:e3:b4:40:
3b:c4:5d:67:88:db:16:a9:85:9f:0f:fa:bb:ca:52:
5c:59:94:7e:02:c7:22:79:ad:28:4b:2d:29:79:a0:
0c:82:7c:ed:7f:96:ab:94:75:cc:7a:e3:fc:9a:f7:
1e:5e:af:de:af:16:96:21:ef:5f:1e:d3:72:19:1b:
05:92:bb:2a:3f:ae:34:99:74:9e:93:be:48:3b:86:
0d:44:91:49:a8:46:3d:6b:57:93:c9:a9:01:99:ff:
90:9e:e1:02:e5:d2:39:dd:65:3f:e3:56:ec:df:75:
65:8f:6f:d6:32:1c:d2:39:69:16:2a:e5:cc:fe:01:
0e:60:c8:50:b5:a0:c6:2e:53:4b:1c:40:7a:ce:37:
16:db:74:ca:32:a8:63:9b:b9:2f:da:33:6d:4c:98:
59:81:dd:31:fc:80:24:4f:19:6c:bf:0d:b1:da:b3:
36:df:e3:28:db:3d:3d:d3:71:b6:05:b2:3d:ae:ad:
33:24:93:01:e3:c3:70:83:02:10:7f:16:8b:e5:2f:
4a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BB:3F:AC:E5:CE:4B:A9:18:5F:4B:03:14:4A:85:19:96:9D:F9:73
X509v3 Authority Key Identifier:
keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/i7s_rOXOS6kYX0sDFEqFGZad-XM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.210.100.0/22
195.210.116.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:f0:2e:01:86:38:09:48:a5:c2:d7:f9:cf:36:75:e1:c7:d6:
91:f6:90:e5:2d:d0:91:10:6b:82:22:8b:25:3e:f1:a9:35:6c:
51:09:e3:5f:41:ac:30:fc:db:a2:ae:3d:dd:37:56:24:d3:b3:
7b:fa:e4:3e:00:f9:e1:9a:6c:19:3e:d9:a5:0c:3f:4b:22:2b:
53:cb:f5:cf:7a:ef:21:44:3f:c2:17:e4:62:dc:24:b7:cb:a0:
9a:05:cc:ba:9f:54:ba:b0:e7:4e:14:d2:9e:b6:39:46:0f:50:
22:f8:34:a7:18:cd:14:a6:23:6d:da:ab:3b:bf:fe:bb:5d:de:
d8:e0:b2:25:82:f3:72:a4:35:33:8b:cc:d5:a2:fc:44:f6:e7:
62:69:eb:e1:97:44:a0:b4:4b:43:da:8f:38:39:d8:2e:7e:61:
f1:eb:82:dd:e4:88:37:5f:75:2f:cb:9d:f3:04:72:ce:1b:6d:
34:ab:b9:50:a4:4d:e2:bd:80:80:88:43:88:40:ed:bb:c5:57:
17:c7:f0:53:66:f4:d8:7c:b6:75:61:47:2b:45:dd:c7:45:3a:
5d:df:32:87:35:09:c2:e2:1e:9e:9d:ee:39:35:fc:63:5e:08:
c2:12:29:b8:8a:5c:65:d1:b0:b5:fa:12:b4:86:01:b7:82:c5:
c4:1f:50:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 21:20:11 2025 by rpki-client