Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/ehdBxAB_s_oyu7mn2EhLWbwjh7U.roa
File: ehdBxAB_s_oyu7mn2EhLWbwjh7U.roa (raw, json)
Hash identifier: 8ENm1zYmYI/0iufjtnkA4MrHv/iDYfzRKy9sjlfQWK8=
Subject key identifier: 7A:17:41:C4:00:7F:B3:FA:32:BB:B9:A7:D8:48:4B:59:BC:23:87:B5
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0197E902912BB2BF4F8ACEEFC8966D92C86A
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/ehdBxAB_s_oyu7mn2EhLWbwjh7U.roa
Signing time: Tue 08 Jul 2025 07:49:08 +0000
ROA not before: Tue 08 Jul 2025 07:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58325
IP address blocks: 77.47.252.0/22 maxlen: 24
195.178.128.0/22 maxlen: 24
195.178.148.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e9:02:91:2b:b2:bf:4f:8a:ce:ef:c8:96:6d:92:c8:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jul 8 07:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a1741c4007fb3fa32bbb9a7d8484b59bc2387b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:df:81:4d:b5:6f:c6:cb:12:2f:cb:a3:ba:f8:
1d:f4:ff:2f:4b:13:73:b2:90:a8:1c:69:70:21:ff:
82:4c:6f:d1:49:c2:24:81:bc:c7:ba:ed:96:eb:7c:
20:69:ed:d5:2e:f0:e6:80:be:a6:3d:86:94:e6:00:
94:e5:8e:1a:55:e4:2a:e1:1b:6f:fa:48:bd:6b:b0:
6a:52:9a:d4:6c:77:98:b7:9b:ec:40:01:00:eb:70:
d4:e1:ae:8a:42:e7:7e:5b:2f:19:25:9d:c6:de:0e:
3b:ac:c9:5c:c1:81:df:22:25:6d:3f:a9:be:f4:29:
96:3a:fb:c6:76:b4:42:d8:d0:b6:ba:2b:f0:bc:91:
c0:17:1e:35:ce:72:be:e7:ca:99:02:3f:12:ff:50:
26:ac:6d:f9:ff:85:a6:01:be:54:a0:a2:53:fe:65:
35:81:fa:b0:62:29:40:e1:69:fe:1b:84:b7:61:d1:
55:3c:63:45:07:03:9f:2d:16:ac:99:da:6a:3f:27:
56:37:e6:5c:77:fd:48:0c:16:94:34:04:ab:4c:a3:
0d:f5:56:b9:34:68:0f:31:e5:8e:40:44:ac:ae:c9:
3a:69:53:66:73:22:8c:59:d3:5c:6f:43:f6:2a:d8:
b8:7d:31:99:2d:08:bb:6c:fe:04:65:b5:c3:a6:3b:
de:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:17:41:C4:00:7F:B3:FA:32:BB:B9:A7:D8:48:4B:59:BC:23:87:B5
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/ehdBxAB_s_oyu7mn2EhLWbwjh7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.252.0/22
195.178.128.0/22
195.178.148.0/23
Signature Algorithm: sha256WithRSAEncryption
40:f3:ba:8c:a5:16:f5:a4:e5:da:34:41:a7:c8:43:e1:a1:6c:
32:61:b7:3c:e4:bc:8f:da:3a:db:f2:15:0b:68:59:7a:72:5e:
cc:75:d3:06:2a:f1:8b:f9:15:13:54:62:83:35:30:f2:85:c1:
21:b8:e9:2b:4c:09:0d:73:bc:3e:b1:8b:f6:34:5c:11:f2:6b:
d5:b8:9f:9a:82:38:08:a0:1f:1d:bb:17:16:0d:41:5d:a2:b2:
9f:da:06:16:26:17:9c:71:f1:1a:4f:21:90:8b:f7:26:f5:cd:
e2:6b:c1:04:b9:51:33:bf:48:39:6c:e0:81:c7:6c:c4:20:78:
41:15:b5:e4:e0:5d:a8:01:92:27:75:6a:fd:ee:ac:5c:34:7c:
b8:48:ff:0d:c7:cd:6c:06:d7:c6:10:ac:a2:89:e0:b2:26:26:
f4:f1:f1:44:e7:fc:54:fb:c1:90:11:94:05:91:42:9d:2e:6f:
fb:1f:e6:d6:63:82:0a:35:94:b7:cc:71:d1:fd:cd:73:5d:52:
18:d0:86:a7:19:2b:8b:95:2e:ed:62:8f:d5:7a:70:b8:27:a7:
93:11:e6:da:d5:d8:7e:9e:7d:3a:fa:b4:9b:4d:e2:ee:6c:87:
91:61:2b:93:4e:bd:42:2d:17:36:9f:b7:b6:bf:7f:14:83:60:
96:4d:9e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:58:20 2025 by rpki-client