Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/f9hPXV4ddBc04Tj4n8IyT5UmeTI.roa
File: f9hPXV4ddBc04Tj4n8IyT5UmeTI.roa (raw, json)
Hash identifier: ehkZEN/NuxZsPtmevVrc57V++f4TSDUNScFVzak2JVo=
Subject key identifier: 7F:D8:4F:5D:5E:1D:74:17:34:E1:38:F8:9F:C2:32:4F:95:26:79:32
Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Certificate serial: 0197E99337448607D55EEBE8A97AB5649686
Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/f9hPXV4ddBc04Tj4n8IyT5UmeTI.roa
Signing time: Tue 08 Jul 2025 10:27:08 +0000
ROA not before: Tue 08 Jul 2025 10:27:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 95.170.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e9:93:37:44:86:07:d5:5e:eb:e8:a9:7a:b5:64:96:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Validity
Not Before: Jul 8 10:27:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fd84f5d5e1d741734e138f89fc2324f95267932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:51:a5:b5:c4:7d:f8:66:b9:fa:9a:b5:56:41:
a2:dc:90:78:2f:5f:99:30:4e:72:48:6d:27:dc:9b:
0b:29:bb:39:7a:ef:7c:7b:b4:28:3b:e7:85:bf:70:
76:18:18:d0:64:30:87:35:45:87:05:57:cb:c6:08:
74:07:47:2d:a9:e1:84:76:d0:02:c3:78:e5:bb:38:
ab:aa:a2:52:67:c4:c2:cd:fe:6c:c9:62:3a:c7:61:
82:12:b3:43:c8:86:5c:76:8b:b0:e4:a5:78:6d:33:
c6:7d:1a:30:2a:17:20:52:10:b4:12:ac:43:70:6c:
9e:a1:e9:84:30:8a:51:2b:db:93:16:ec:df:d6:a4:
ed:d2:36:a8:26:76:cf:b4:0b:2f:ba:bc:52:37:64:
1d:50:ee:4c:f9:78:a8:87:9a:14:6d:bb:6d:b4:fb:
90:dc:73:9b:66:6a:3f:ff:35:95:7f:e5:3d:6f:4e:
ca:33:aa:91:5d:c8:72:a1:95:5a:91:0f:d4:b5:39:
e3:f9:dd:8d:de:b9:4f:21:6e:d2:a9:bb:2d:4d:0f:
10:db:ba:f9:12:32:2f:f7:57:bd:81:c2:98:aa:b4:
25:55:d9:51:da:d1:58:c8:23:c3:b6:43:ca:3c:e5:
c4:ec:b0:ec:db:a0:b9:e2:1c:0f:18:aa:fd:53:3e:
b0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D8:4F:5D:5E:1D:74:17:34:E1:38:F8:9F:C2:32:4F:95:26:79:32
X509v3 Authority Key Identifier:
keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/f9hPXV4ddBc04Tj4n8IyT5UmeTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.170.14.0/24
Signature Algorithm: sha256WithRSAEncryption
95:90:9b:5f:50:41:db:84:e5:72:d7:1f:d7:9f:23:48:3e:95:
19:f1:52:d7:05:4a:e1:0f:0c:49:fe:6e:c8:81:5e:f1:6a:5d:
e8:29:a3:c0:69:6d:c5:a2:13:86:a4:58:07:c5:c7:b0:2f:4f:
4f:ad:be:ee:c5:d5:ee:ce:5c:b5:66:bb:06:fa:ff:01:96:04:
dd:65:e9:8b:d7:5e:66:31:de:31:87:5f:d2:9d:6f:02:73:38:
0f:98:41:6e:71:52:2e:34:9b:20:93:a9:79:1f:fd:53:f3:08:
8d:43:89:29:6a:be:7d:30:f1:e9:3b:c7:d8:20:ab:61:c7:77:
4a:9c:72:a3:67:a2:46:81:b1:74:ee:9f:3a:99:ed:41:5f:5e:
41:1f:9e:62:85:86:d6:0b:0a:0f:db:cd:cd:c7:17:15:61:c5:
38:15:91:dc:c0:f3:e0:9b:f6:5a:96:98:62:6d:31:cd:c7:fe:
f4:e3:0a:5c:3f:94:de:5c:67:da:ca:c5:c6:87:d8:be:86:fb:
cd:4b:82:dc:58:ae:7b:cb:31:5d:ad:7a:18:95:0c:41:6b:fe:
2e:39:61:28:54:0f:23:3e:85:a9:e6:e8:08:24:a4:0c:f6:93:
cc:0b:21:aa:df:70:96:54:0f:39:ac:6e:d8:22:35:40:8e:3a:
d6:2b:6b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:28:35 2025 by rpki-client