Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/7BXKsUOjuOFRoB_xLtuTj8xgpGk.roa
File: 7BXKsUOjuOFRoB_xLtuTj8xgpGk.roa (raw, json)
Hash identifier: 0Td1GKV7n2fB74CJpRTzoYkEjcKI38lQAiwf9tEVnfs=
Subject key identifier: EC:15:CA:B1:43:A3:B8:E1:51:A0:1F:F1:2E:DB:93:8F:CC:60:A4:69
Certificate issuer: /CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Certificate serial: 0198080604731CEE721E6EA5D42D4FAA715E
Authority key identifier: 96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/7BXKsUOjuOFRoB_xLtuTj8xgpGk.roa
Signing time: Mon 14 Jul 2025 08:21:08 +0000
ROA not before: Mon 14 Jul 2025 08:21:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214151
IP address blocks: 91.108.140.0/24 maxlen: 24
91.108.141.0/24 maxlen: 24
91.108.142.0/24 maxlen: 24
91.108.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:08:06:04:73:1c:ee:72:1e:6e:a5:d4:2d:4f:aa:71:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Validity
Not Before: Jul 14 08:21:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec15cab143a3b8e151a01ff12edb938fcc60a469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f5:a1:87:5e:d1:c8:d4:67:06:e1:54:78:dc:
f1:3d:90:48:71:16:58:ed:8a:a2:eb:64:27:e8:6e:
74:fa:13:3c:d9:97:28:7e:37:7a:6d:e2:f8:84:49:
b5:9d:cf:96:73:f7:9f:9d:10:9a:0d:bc:a9:bc:1f:
42:e0:b0:77:b2:76:b0:2d:77:52:0c:36:0f:1e:18:
5c:a4:b7:e8:ab:01:a1:8b:d9:f0:20:21:36:6e:a2:
f4:26:c9:08:02:06:d7:e5:42:e5:17:5b:6c:3d:44:
0d:1a:bf:93:b2:29:71:f7:1c:39:70:c5:e7:7b:85:
8f:35:26:ff:9a:f9:61:71:f6:4a:e1:0a:ba:d0:19:
a2:b0:8e:88:66:66:63:b8:d9:e2:e7:ff:02:d9:53:
ce:b3:8f:e7:a5:2a:0f:9e:7f:1a:6c:e1:ba:23:d7:
0f:a1:0b:29:cd:31:66:f6:9c:21:6e:56:af:5b:37:
66:ad:26:f1:94:9a:ee:14:aa:ac:bb:b0:11:0e:ac:
85:42:6c:8d:27:7d:bd:9d:a9:bc:3a:24:c2:ff:74:
6c:10:bb:d3:03:f9:b5:db:0c:71:4f:8e:1d:d7:30:
db:00:74:0e:b2:19:2c:42:b1:ee:a8:49:d8:18:49:
3e:eb:31:58:ba:23:dc:1b:0a:5a:53:d6:8a:4f:f4:
50:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:15:CA:B1:43:A3:B8:E1:51:A0:1F:F1:2E:DB:93:8F:CC:60:A4:69
X509v3 Authority Key Identifier:
keyid:96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/7BXKsUOjuOFRoB_xLtuTj8xgpGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.140.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:a5:f3:19:29:ad:9b:2d:47:79:c4:b8:a7:a9:05:a4:59:f4:
f9:d2:0d:bd:53:e8:8f:5d:a1:c8:62:de:5a:45:70:a2:5f:11:
73:09:cf:11:95:8e:c6:6f:37:f5:1e:9b:e6:43:b9:2b:31:44:
fb:5d:46:80:ae:26:0e:a2:3f:bf:a0:c5:1c:71:00:ac:40:0d:
0d:e1:d8:46:d3:40:fb:82:b3:bb:47:02:8b:f9:94:27:75:b7:
e4:b2:18:af:46:be:c2:bf:bf:5e:7d:4b:15:48:bc:cf:c6:84:
6b:7f:e8:8a:4c:b6:f4:4e:57:1c:16:33:2c:5c:32:9a:80:8d:
e5:24:7a:fe:b0:10:14:e5:61:4c:e4:c6:49:94:e7:a3:c1:9b:
97:9d:1e:cc:41:06:ee:b9:6a:02:0e:11:4e:d0:f2:d3:48:96:
c8:21:8a:79:e9:82:91:06:cd:88:f9:a0:f9:4c:83:3d:be:12:
f7:23:e0:ab:ec:14:bf:0c:03:c1:96:43:d5:17:5d:7d:54:ce:
40:2f:45:c1:6b:d1:8f:b1:bc:0f:42:ce:1c:14:0b:0f:f3:24:
b7:54:de:64:bb:3e:e5:9a:01:1f:13:43:d9:7c:40:49:d6:ce:
ee:e5:ea:1e:be:5f:9d:e6:e8:4a:cd:94:84:bc:0a:47:de:cb:
50:9e:77:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:19:46 2025 by rpki-client